Github user cestella commented on a diff in the pull request:

    https://github.com/apache/incubator-metron/pull/93#discussion_r61566951
  
    --- Diff: 
metron-deployment/roles/metron_streaming/tasks/metron_topology.yml ---
    @@ -16,18 +16,14 @@
     #
     ---
     - name: Submit Metron Parser topologies
    -  command: storm jar {{ metron_directory }}/lib/{{ metron_parsers_jar_name 
}} org.apache.storm.flux.Flux  --filter {{ 
metron_parsers_properties_config_path }} --remote {{ item }}
    +  command: "{{ metron_directory }}/bin/start_parser_topology.sh {{ item }}"
       with_items:
           - "{{ storm_parser_topologies }}"
    --- End diff --
    
    So, adding pcap to the list of parser topologies won't do it because pcap 
has a special script (start_pcap_topology.sh) due to it having a different 
config file (all of the parser topologies share the same config).  Also, it's 
just a different sort of beast than a parser topology (i.e. we don't actually 
parse anything, we just take the raw data, slap on a header and put it in HDFS).
    
    That being said, what I think we need to do is start the pcap topology when 
pycapa is installed.  I'll have to look into where and how to do that in 
ansible.  If you have any thoughts or suggestions, I'd be all ears. ;)


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

Reply via email to