[
https://issues.apache.org/jira/browse/METRON-1304?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16649436#comment-16649436
]
ASF GitHub Bot commented on METRON-1304:
----------------------------------------
Github user ottobackwards commented on a diff in the pull request:
https://github.com/apache/metron-bro-plugin-kafka/pull/2#discussion_r224997103
--- Diff: README.md ---
@@ -144,23 +194,35 @@ event bro_init() &priority=-5
#### Notes
* `logs_to_send` is mutually exclusive with `$pred`, thus for each log
you want to set `$pred` on, you must individually setup a `Log::add_filter` and
refrain from including that log in `logs_to_send`.
+ * In Bro 2.5.x the bro project introduced a [logger
function](https://www.bro.org/sphinx/cluster/index.html#logger) which removes
the logging functions from the manager thread, and taking advantage of that is
highly recommended. If you are running this plugin on Bro 2.4.x, you may
encounter issues where the manager thread is taking on too much responsibility
and pinning a single CPU core without the ability to spread the load across
additional cores. In this case, it may be in your best interest to prefer
using a bro logging predicate over filtering in your Metron cluster [using
Stellar](https://github.com/apache/metron/tree/master/metron-stellar/stellar-common)
in order to lesson the load of that thread.
--- End diff --
s/lesson/lessen/
> Allow metron-bro-plugin-kafka to include or exclude logs
> --------------------------------------------------------
>
> Key: METRON-1304
> URL: https://issues.apache.org/jira/browse/METRON-1304
> Project: Metron
> Issue Type: Improvement
> Reporter: Jon Zeolla
> Assignee: Jon Zeolla
> Priority: Major
>
> Right now, you must specify which logs you want to send to kafka via
> metron-bro-plugin-kafka. This would allow the additional feature of
> excluding certain logs, and sending everything else.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
