Github user anandsubbu commented on the issue: https://github.com/apache/metron/pull/943 +1 Works as advertised. I used both mpacks to deploy a 12-node CentOS 7 cluster (Ambari 2.6.0.0 and HDP 2.6.3.0). Was able to kerberize the cluster and get bro indices into ES.
---