Re: Question about the customization of Metron with my machine learining algo.

2017-06-07 Thread smlabs
Hello Casey, your explanations (and Matt's one with the other email) help me. By the way, if I could, I need more details. The origins of my questions are both conceptual (Metron is absolutely a new tool for me) and practical (e.g., I didn't find any guideline that explain where ML model

Re: Question about the customization of Metron with my machine learining algo.

2017-06-06 Thread Matt Foley
Hope you don’t mind if I chime in. There are a couple very basic points which are in the documentation, but may not jump out at a new user, who is trying to learn Metron at the same time as MaaS. 1. In the thread below there is only a brief reference to the main documentation page for MaaS,

Re: Question about the customization of Metron with my machine learining algo.

2017-06-06 Thread Casey Stella
So, first off, it's not a basic question at all and thanks for asking it. I'm sure if it's not clear to you, then it's not clear to many and bears some reinforcement and clarification. - Metron does indeed enable the deployment and use of machine learning models on data ingested into

Re: Question about the customization of Metron with my machine learining algo.

2017-06-06 Thread smlabs
Dear Mr Stella, I didn't know who you are since today when I read more about you. So first, thanks for your time answering to my previous post. Here below, there are some other questions, because I read the available guidelines about Metron focusing on Maas but for me it is not clear how to

Re: Question about the customization of Metron with my machine learining algo.

2017-06-05 Thread smlabs
Hello Casey, your answer makes something more clear, but not at all. My question about ML models was because somewhere on the web I read that Metron comes with ML. But maybe it's better to say that it supports ML models. If I understood well, I can run Metron in a virtual machine connected to

Re: Question about the customization of Metron with my machine learining algo.

2017-06-05 Thread Casey Stella
We do not ship any ML models currently with metron, just the infrastructure to deploy your own models and interact with those models from within Metron. That being said, you might be interested in https://gist.github.com/cestella/8dd83031b8898a732b6a5a60fce1b616 That's the code to take a DGA

Re: Question about the customization of Metron with my machine learining algo.

2017-06-05 Thread smlabs
Hello Simon, thank you for your prompt replay and for the link as well. I'm more confortable with Python. May I ask you if there is any example in python that I use as template to receive network packets and then implement the machine learning algorithm? Moreover, where can I find

Re: Question about the customization of Metron with my machine learining algo.

2017-06-05 Thread Simon Elliston Ball
Hi Simone, and welcome to the community. There are a number of extension points in Metron, the key ones being around machine learning. I suggest taking a look at https://github.com/apache/metron/tree/master/metron-analytics/metron-maas-service