Github user merrimanr commented on the issue:
https://github.com/apache/metron/pull/1031
I tested this in full dev and found a small bug where the index.writer.name
wasn't being passed to the REST app on startup. The latest commit fixes that.
I was able to verify the 2 cases @cestella mentioned. For the first test I
update the bro sensor config:
```
{
"hdfs": {
"index": "bro",
"batchSize": 5,
"enabled": true
},
"elasticsearch": {
"index": "bro",
"batchSize": 5,
"enabled": true
},
"solr": {
"index": "bro_2",
"batchSize": 5,
"enabled": true
}
}
```
A search result now looks like:
```
{
"id": "44fc8391-474d-4b8e-a375-52f748735b2f",
"source": {
...
"source.type": "bro"
},
"score": 0,
"index": "bro_2"
}
```
For the next test I deleted the snort indexing config. A search result
against that collection now looks like:
```
{
"id": "71a0ca1a-b3c2-414b-9fde-c31e8dd5544a",
"source": {
...
"source.type": "snort"
},
"score": 0,
"index": "snort"
}
```
---
