Justin Leet created METRON-1548:
-----------------------------------

             Summary: Alerts UI: Remove hardcoded source:type and other fields 
that may vary
                 Key: METRON-1548
                 URL: https://issues.apache.org/jira/browse/METRON-1548
             Project: Metron
          Issue Type: Sub-task
            Reporter: Justin Leet


In Solr, we use source.type instead of source:type (which was originally due to 
ES limitations, we'd prefer it to be common across both). However, it's 
hardcoded in the alerts UI to be source:type, so nothing in the UI has a source 
type and it breaks other things like metaalerts (which rely on source type for 
being able to pull the data together).

Any other configs / queries that would cause similar problems should be updated 
appropriately.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to