GitHub user nickwallen opened a pull request:
https://github.com/apache/incubator-metron/pull/239
METRON-401 ParseException Thrown by ThreatIntelJoinBolt
If the configuration for the ThreatIntelJoinBolt used any Stellar code that
called a function, the following error occured.
```
org.apache.metron.common.dsl.ParseException: Unable to find string function
IN_SUBNET. Valid functions are...
```
The `FunctionResolver` used by the `ThreatIntelJoinBolt` was not being
initialized. If the configuration included any function calls, the functions
could not be resolved and a ParseException was thrown.
Configuration containing Stellar code that does not call any functions was
not impacted. This is why the existing unit and functional tests did not catch
this. Updated the unit tests to validate the fix.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/nickwallen/incubator-metron METRON-401
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-metron/pull/239.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #239
----
commit 0da57e39107e370566e9ac35976c99517754a613
Author: Nick Allen <[email protected]>
Date: 2016-08-31T22:21:12Z
METRON-401 ParseException Thrown by ThreatIntelJoinBolt
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
