mmiklavc commented on issue #1570: METRON-2326 Unable to Call ENRICHMENT_GET from Threat Triage Rule Reason Field URL: https://github.com/apache/metron/pull/1570#issuecomment-557299193 One thing we should probably add here is a note in the documentation that says "while you can call ENRICHMENT_GET here... DO NOT CALL ENRICHMENT_GET HERE." i.e. ymmv - it's better to handle this in enrichment and use that field later. Reason being, I'm not sure we handle multi-threading in threat triage the way we do for normal enrichments, so there may be an adverse performance impact.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
