GitHub user simonellistonball opened a pull request:
https://github.com/apache/incubator-metron/pull/451
Added CEF Parser
There is some discussion of using an external library on the jira ticket
for this issue. The library in question is excellent, and covers the spec well,
but applies types which don't get along with Metron (IP address, MAC address).
This has a simplified parser focussing on speed and sticking to basic types.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/simonellistonball/incubator-metron METRON-157
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-metron/pull/451.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #451
----
commit 8074a74d0ea6370fef4fb8b4e74dded63eae5c4d
Author: Simon Elliston Ball <[email protected]>
Date: 2017-02-11T16:28:39Z
Added CEF Parser
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
