[ 
https://issues.apache.org/jira/browse/METRON-514?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15608605#comment-15608605
 ] 

ASF GitHub Bot commented on METRON-514:
---------------------------------------

Github user merrimanr commented on a diff in the pull request:

    https://github.com/apache/incubator-metron/pull/323#discussion_r85134447
  
    --- Diff: metron-deployment/roles/snort/tasks/producer.yml ---
    @@ -15,5 +15,18 @@
     #  limitations under the License.
     #
     ---
    -hdp_repo_def: 
"http://public-repo-1.hortonworks.com/HDP/centos6/2.x/updates/2.4.2.0/hdp.repo";
    -java_home: /usr/jdk64/jdk1.8.0_60
    +- name: Create Snort producer home directory
    +  file:
    +    path: "{{ snort_producer_home }}"
    +    state: directory
    +    mode: 0755
    +
    +- name: Install Snort producer start script
    +  template: src=start-snort-producer.sh dest={{ snort_producer_home 
}}/start-snort-producer.sh mode=0755
    +
    +- name: Install init.d service script
    +  template: src=snort-producer dest=/etc/init.d/snort-producer mode=0755
    +
    +- name: Register the service with systemd
    +  shell: systemctl enable snort-producer
    +  when: ansible_distribution == "CentOS" and 
ansible_distribution_major_version == "7"
    --- End diff --
    
    Okay removed those lines from producer.yml and yaf.yml


> Snort kafka topic fails to get any data on a setup running for several days
> ---------------------------------------------------------------------------
>
>                 Key: METRON-514
>                 URL: https://issues.apache.org/jira/browse/METRON-514
>             Project: Metron
>          Issue Type: Bug
>            Reporter: Ryan Merriman
>            Assignee: Ryan Merriman
>
> After a cluster has been running for a while, data will suddenly stop being 
> written to the snort Kafka topic.  Other topics like yaf and bro continue to 
> work.  The difference between those sensors and snort is that snort logs are 
> fed into Kafka with Flume.  



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to