Github user nickwallen commented on a diff in the pull request:
https://github.com/apache/metron/pull/1047#discussion_r196141302
--- Diff:
metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/configuration/metron-env.xml
---
@@ -137,4 +137,10 @@
<value>yyyy.MM.dd.HH</value>
<display-name>Elasticsearch Date Format</display-name>
</property>
+ <property>
+ <name>source_type_field</name>
+ <display-name>Source Type Field</display-name>
+ <description>Name of the message field that contains the source
type.</description>
+ <value>source.type</value>
--- End diff --
I addressed this by changing the default to `source:type` and improving the
description.
---