Hi Muhammed, I think you probably want to start with our parser infrastructure rather than the DAO's for what you're doing. This series of blog posts gives a use case driven walkthrough that should help shed some light on things: Part 1 (start here) - https://cwiki.apache.org/confluence/display/METRON/2016/04/25/Metron+Tutorial+-+Fundamentals+Part+1%3A+Creating+a+New+Telemetry TOC of the 7-part series - https://cwiki.apache.org/confluence/display/METRON/2016/06/22/Metron+Tutorial+-+Fundamentals+Part+7%3A+Dashboarding+with+Kibana
Here's some details about our parser infrastructure - https://github.com/apache/metron/tree/master/metron-platform/metron-parsers ...which feeds into the data enrichment topology - https://github.com/apache/metron/tree/master/metron-platform/metron-enrichment ...which feeds into the indexing topology, which you've already found Hope this helps for a start! Best, Mike Miklavcic On Tue, Oct 16, 2018 at 12:05 AM Muhammed Irshad <irshadkt....@gmail.com> wrote: > Hi all, > > What is the actual use of HBaseDao documented in metron indexing > documentation > < > https://metron.apache.org/current-book/metron-platform/metron-indexing/index.html > > > under section 'The IndexDao Abstraction' ? From my reading I understand it > as a HBase indexing implementation which can be clubbed to hdfs for updated > data. What is the use of it as we cannot chose to index in HBase / hdfs > dynamically ? Can some one explain an example about how to configure and > use it ( More documentation link or reference is fine) ? I have a use case > where I need to maintain an Active Directory inventory, Using AD event logs > being indexed via metron. Is HBaseDao can be used for this use case ? > > -- > Muhammed Irshad K T > Senior Software Engineer > +919447946359 > irshadkt....@gmail.com > Skype : muhammed.irshad.k.t >
