Github user merrimanr commented on the issue:
https://github.com/apache/metron/pull/824
@justinleet looking at your results I would expect the count to go down by
2 instead of 1: 1 for the alert that was added to the meta alert and another
for the meta alert itself since they shouldn't be included in group by queries.
I think the bug @iraghumitra reported is valid.---
