Github user justinleet commented on the issue:

    https://github.com/apache/metron/pull/1099
  
    I ran through 
https://github.com/apache/metron/blob/master/use-cases/parser_chaining/README.md,
 but spinning it up as
    
    ```
    $METRON_HOME/bin/start_parser_topology.sh -k $BROKERLIST -z $ZOOKEEPER -s 
cisco-6-302,cisco-5-304,pix_syslog_router
    ```
    
    This results in indices (noting that I'd pushed the data to the topic a 
couple times, so the numbers won't line up directly if you run it):
    ```
    [root@node1 ~]# curl -X GET "localhost:9200/_cat/indices?v"
    health status index                           uuid                   pri 
rep docs.count docs.deleted store.size pri.store.size
    yellow open   cisco-5-304_index_2018.07.11.18 z-MyPPEJSN6cur7FJbFORA   5   
1         45            0    340.8kb        340.8kb
    yellow open   cisco-6-302_index_2018.07.11.18 vAFrok4sRpW49_RYt9RqbQ   5   
1        660            0      1.4mb          1.4mb
    ...
    ````


---

Reply via email to