GitHub user merrimanr opened a pull request:
https://github.com/apache/incubator-metron/pull/96
Metron 122
During the creation of the blogs detailing how to add parsers, several
issues surfaced. This pull request fixes those issues. Includes:
- a couple new parsers (bluecoat and squid) along with unit and integration
tests
- change to the grokparsertest to make it reusable for other grok based
parsers
- changes to the metron-parser jar to include site files and hadoop
dependency
- additional ansible scripts to rerun the metron-streaming role for the
purpose of pushing out parser changes
- fix to the enrichment topology to pass along data to elasticsearch when
no enrichments have been configured
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/merrimanr/incubator-metron METRON-122
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-metron/pull/96.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #96
----
commit c662a1e1ea53a00fbe762a502f152a4987a42c71
Author: rmerriman <[email protected]>
Date: 2016-04-26T22:31:36Z
METRON-122: Create generic unit test framework for testing grok statements
commit 02c52ed87ba9ce40e6c046cf9f2529b620f631aa
Author: James Sirota <[email protected]>
Date: 2016-04-27T08:04:56Z
Changes to be committed:
deleted: metron-deployment/roles/sensor-test-mode/files/example.pcap
new file:
metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bluecoat/BasicBluecoatParser.java
new file:
metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/bluecoat/BasicBluecoatParserTest.java
commit 0c8db7b477d228196ecce7de6fe6556bafb13fd5
Author: merrimanr <[email protected]>
Date: 2016-04-27T12:18:41Z
Merge pull request #5 from james-sirota/METRON-122-bluecoat
Changes to be committed:
commit 7217a2ef45d6eb3031a4b610b7877bcf516c793e
Author: rmerriman <[email protected]>
Date: 2016-04-27T15:15:01Z
included bluecoat parser and test
commit 1180c90a7c423142c67ca4418ce5319da6f588e7
Author: rmerriman <[email protected]>
Date: 2016-04-27T21:15:22Z
added example.pcap back
commit 005322d997f3db36591f5df0932d9339375dbced
Author: rmerriman <[email protected]>
Date: 2016-04-29T16:12:37Z
changes to make blog post instructions work
commit e4ba1ea32faf1eb7e3706969f7b20e7654b6f604
Author: rmerriman <[email protected]>
Date: 2016-04-29T18:16:40Z
Merge branch 'master' into METRON-122
Conflicts:
metron-deployment/roles/metron_streaming/tasks/main.yml
metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/GrokParser.java
commit e4f6ca6c98482dc3fcffe6496e5f2c87986ad8fc
Author: rmerriman <[email protected]>
Date: 2016-04-29T20:24:50Z
more changes
commit 0220960e825d1e15bd2dbc710aeab9daa33e2622
Author: rmerriman <[email protected]>
Date: 2016-04-29T21:49:27Z
added core-site.xml and hdfs-site.xml to parser jar
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
