Github user justinleet commented on the issue:
https://github.com/apache/metron/pull/824
Do we know why the partial update doesn't work? I'm not necessarily
opposed to doing this as a short term fix, but I'd like to know root cause.
It seems like overkill to submit a full object update on every alert that
goes into a metaalert (e.g. that could be a hundred+ full document reindexes
happening every time)---
