Github user justinleet commented on the issue:
https://github.com/apache/metron/pull/803
@iraghumitra looks like the new API isn't being used quite right.
Sample from the dev tools
```
{
"alerts": [
{
"guid": "50a0c1f6-8a55-4cdd-a031-81c53174ad7b",
"sensorType": [
"snort"
],
"index": "snort_index_2017.11.20.15"
},
...
```
This should be, I believe,
```
{
"alerts": [
{
"guid": "50a0c1f6-8a55-4cdd-a031-81c53174ad7b",
"sensorType": "snort",
"index": "snort_index_2017.11.20.15"
},
...
],
"groups": [
"source:type"
]
}
```
---