Github user cestella commented on the issue:
https://github.com/apache/incubator-metron/pull/279
Ok, just to clarify a bit; I think what is happening is that the yaf
topology (which does exist) does not run by default (this was changed a while
back because of resource constraints), but that does not prevent it from
installing the yaf probe that pushes data to kafka. It's the yaf probe that
@dlyle65535 is stopping by not installing it.
In general, just my $0.02, but I tend think the proper behavior is as
follows:
* All sensors get installed by default; bro, snort, yaf, etc.
* None of them get started by default in either full-dev or quick-dev. If
you want them to start, turn them on via monit
I'm not sure this should be within the scope of this PR, which is why
@dlyle65535 made METRON-467. As for what we do in the interrim, I'd say that
either:
* we either are ok with not installing yaf
* we make the sensors in the `services_to_start` not start, not just the
topologies.
Thoughts and corrections would be greatly appreciated. :)
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
