[ 
https://issues.apache.org/jira/browse/METRON-434?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15508454#comment-15508454
 ] 

ASF GitHub Bot commented on METRON-434:
---------------------------------------

Github user ottobackwards commented on the issue:

    https://github.com/apache/incubator-metron/pull/261
  
    I have a question -
    
    Shouldn't the addition of the timestamp and the original string be 
something that is handled in Stellar?
    
    I am looking at running something through this with a field that I would 
want to transform with stellar into the timestamp.  Incoming data from other 
systems ( SIEMs etc ) may already be normalized and have a raw log data field 
as well.  I would think that Stellar would be the better place to these things.



> JSON Parser
> -----------
>
>                 Key: METRON-434
>                 URL: https://issues.apache.org/jira/browse/METRON-434
>             Project: Metron
>          Issue Type: New Feature
>    Affects Versions: 0.2.1BETA
>            Reporter: Casey Stella
>            Assignee: Casey Stella
>   Original Estimate: 48h
>  Remaining Estimate: 48h
>
> Create a parser which will take a JSON map in.  
> Inner maps should be handled pluggably by:
> * doing nothing
> * unfolding maps (e.g. `{ "foo" : { "bar" : 7 } }` is transformed into 
> `{"foo.bar" : 7 }`
> * Throwing an exception
> * Dropping the inner map.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to