Github user JonZeolla commented on the issue:

    https://github.com/apache/incubator-metron/pull/499
  
    Ok I've spun this up a few different ways now and I'm consistently seeing 
no indexes being created in ES, but I am successfully getting what appears to 
be valid snort and bro logs to the indexing topic.  
    ```
    [vagrant@node1 /]$ curl -XGET 'localhost:9200/_cat/indices?v&pretty'
    health status index   pri rep docs.count docs.deleted store.size 
pri.store.size
    green  open   .kibana   1   0         52            0     57.6kb         
57.6kb
    ```
    
    Storm UI is showing no activity in the indexing bolts/spout.
    <img width="1668" alt="screen shot 2017-04-02 at 10 25 40 pm" 
src="https://cloud.githubusercontent.com/assets/1385510/24593618/55f7ced6-17f3-11e7-93ac-0e722bb5da26.png";>
    The worker.log for indexing shows
    ```
    2017-04-03 02:15:29.420 STDERR [INFO] Error: Could not find or load main 
class ${topology.worker.childopts}
    ```
    I'm not 100% sure why this is happening but my initial thought is to take a 
closer look at aef84636a3427da20b1d54acfe1b8de23e2aaf97.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

Reply via email to