Neha Sinha created METRON-520:
---------------------------------

             Summary: /apps/metron/enrichment directory does not get created 
for Metron cluster deployed via Ambari
                 Key: METRON-520
                 URL: https://issues.apache.org/jira/browse/METRON-520
             Project: Metron
          Issue Type: Bug
    Affects Versions: 0.2.1BETA
            Reporter: Neha Sinha


1.Deploy Metron cluster via Ambari
2. Replay Bro logs to generate bro elasticsearch indices
3. The bro enriched and indexed data should be written to the HDFS at :-
/apps/metron/enrichment

The indexed data gets written to "/apps/metron/enrichment" for metron setups 
that get deployed via Ansible, however, this path does not get created for 
clusters deployed via Ambari.

Output for "hdfs dfs -ls" command for clusters deployed via Ansible
[hdfs@metron-ansible-3 ~]$ hdfs dfs -ls /apps/metron
Found 2 items
drwxrwxr-x   - storm hadoop          0 2016-10-24 11:41 /apps/metron/enrichment
drwxrwxr-x   - hdfs  hadoop          0 2016-10-24 11:03 /apps/metron/patterns

Output for "hdfs dfs -ls" command for clusters deployed via Ambari
[hdfs@metron-s-10 ~]$ hdfs dfs -ls /apps/metron
Found 7 items
-rwxr-xr-x   3 hdfs hdfs      13427 2016-10-25 10:02 /apps/metron/asa
-rwxr-xr-x   3 hdfs hdfs       5203 2016-10-25 10:02 /apps/metron/common
-rwxr-xr-x   3 hdfs hdfs        524 2016-10-25 10:02 /apps/metron/fireeye
-rwxr-xr-x   3 hdfs hdfs       2552 2016-10-25 10:02 /apps/metron/sourcefire
-rwxr-xr-x   3 hdfs hdfs        180 2016-10-25 10:02 /apps/metron/squid
-rwxr-xr-x   3 hdfs hdfs       2221 2016-10-25 10:02 /apps/metron/websphere
-rwxr-xr-x   3 hdfs hdfs        879 2016-10-25 10:02 /apps/metron/yaf



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to