Github user nickwallen commented on a diff in the pull request:
https://github.com/apache/incubator-metron/pull/279#discussion_r81014011
--- Diff: metron-deployment/inventory/full-dev-platform/group_vars/all ---
@@ -78,7 +79,7 @@ sensor_test_mode: True
install_pycapa: False
install_bro: True
install_snort: True
-install_yaf: True
+install_yaf: False
--- End diff --
Before this change, Snort, Bro and YAF were all installed and started by
default. That is my understanding of how it has been for months.
This PR changes that behavior so that YAF is neither installed nor started.
The comments in your PR only say that you don't want YAF started. You don't
mention anything about YAF not being installed.
Since there was this gap between what the PR says and what the PR does, I
wanted to make sure we bring it to light.
There is a fair amount of documentation that describes to users that when
they deploy Metron, they are going to see YAF, Snort and Bro data in the Metron
Dashboard. This PR will change that. The user will not see YAF data.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---