[
https://issues.apache.org/jira/browse/METRON-511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15608555#comment-15608555
]
Nick Allen commented on METRON-511:
-----------------------------------
Flume is only used to push Snort alerts to Kafka. Might be simpler to use the
`kafka_console_producer.sh` to push those alerts instead of Flume. We already
use the `kafka_console_producer.sh` for YAF data and could use a similar
approach. Then we don't need to worry about installing Flume at all.
> Migrate Flume installation to Ambari
> ------------------------------------
>
> Key: METRON-511
> URL: https://issues.apache.org/jira/browse/METRON-511
> Project: Metron
> Issue Type: Improvement
> Reporter: Michael Miklavcic
>
> Flume is currently installed via Ansible. This Jira tracks work to move Flume
> for Metron to an Ambari installation.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
