Github user mmiklavc commented on the issue: https://github.com/apache/metron/pull/840 @mraliagha I do think we should consider revisiting the field name conventions, but I'd push for that as a follow-on task. As discussed in other points on this thread, e.g. going straight to ES 6.x, this PR is already massive in scope, and adding further non-critical improvements will increase the surface area of those changes. Now that we have the meta alerts fixes in master, I strongly encourage the community to stabilize around as minimal an ES upgrade as possible with incremental improvements and feature enhancements once we've been able to convince ourselves through the unit and integration test suites and functional testing that we're in a healthy and stable place with minimal risk of adding regressions.
---