[
https://issues.apache.org/jira/browse/METRON-659?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15824595#comment-15824595
]
ASF GitHub Bot commented on METRON-659:
---------------------------------------
Github user mmiklavc commented on a diff in the pull request:
https://github.com/apache/incubator-metron/pull/417#discussion_r96306897
--- Diff: metron-deployment/roles/sensor-stubs/templates/start-bro-stub ---
@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#
+# simulates the behavior of a sensor by sending canned telemetry data
+# to a Kafka topic.
+#
+# a subset of the canned data is randomly selected and is sent in
+# batches. the timestamp of the message is altered to match current
+# system time. the number of messages sent in each batch, along with
+# the time delay between batches can be configured.
+#
+# start-bro-stub <DELAY> <COUNT>
+#
+
+#
+# how long to delay between each 'batch' in seconds. defaults to 2 seconds.
+#
+DELAY=${1:-2}
+
+#
+# how many messages to send in each 'batch'. the messages are drawn
randomly
+# from the entire set of canned data. defaults to 1000.
+#
+COUNT=${2:-100}
--- End diff --
This is default 100 not 1000, no? I noticed the same for the other stubs.
> Emulate Sensors in Development Environments
> -------------------------------------------
>
> Key: METRON-659
> URL: https://issues.apache.org/jira/browse/METRON-659
> Project: Metron
> Issue Type: Improvement
> Affects Versions: 0.3.0
> Reporter: Nick Allen
> Assignee: Nick Allen
> Fix For: Next + 1
>
>
> Replace the Snort, Bro, and YAF sensors on the "Quick Dev" and "Full Dev"
> environments with a mechanism that consumes less resources.
> These environments are notoriously difficult to work with because the
> installed services consume nearly all available memory. The Bro, YAF, and
> Snort sensors, along with the PCAP Replay service, consume a considerable
> amount of these limited resources.
> Replacing these sensors with a lightweight mechanism should free-up
> additional resources, make the environment easier to work with, and result in
> faster deployments.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
