Github user mmiklavc commented on the issue:

    https://github.com/apache/metron/pull/1207
  
    Might be worth looking at how we set what spins up by default. For 
instance, we might not want Pcap to start  by default in *any* installation, 
let alone full dev. Is there an option in the mpack config for one, or two, is 
there a way to disable it via our blueprints? This way we don't alter the 
existing set of topologies. One reason for this is that it's at least mildly 
useful to have 2+ sensors worth of data writing out to ES that can be viewed in 
Kibana. And while pcap doesn't go to indexing anyhow, we don't have anything 
generating data into the pcap topology currently at all. It would just be 
taking up a slot and doing nothing.


---

Reply via email to