GitHub user cestella opened a pull request:
https://github.com/apache/incubator-metron/pull/207
METRON-362: Unify the Stellar Languages
At the moment, stellar has some architectural issues:
* The query and transformation languages are distinct despite sharing the
same transformation functions
* The transformation language does not have any notion of the comparison
operations or the logical (aka boolean) functions from the query language
* Neither language has the ability to do arithmetic or even represent
negative numbers as constants
* Neither language has the ability to do simple if/then/else constructs
We should unify the languages and correct the deficiencies as they have
come up in multiple situations. This should be done in a backwards compatible
way so that deployed stellar statements as part of field transformations or
threat triage do not have to change.
This is completely tested via the unit test `StellarTest` in
`metron-common` as well as the existing integration tests around
FieldTransformations and Threat Triage.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/cestella/incubator-metron METRON-362
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-metron/pull/207.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #207
----
commit 261e393e91c6972b7da7a33a76e46e095892d592
Author: cstella <[email protected]>
Date: 2016-08-08T18:46:23Z
METRON-362: Unify the Stellar Languages
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
