[GitHub] incubator-metron pull request #557: METRON-811: Enforce Maven Version in Top...

Github user zezutom closed the pull request at: https://github.com/apache/incubator-metron/pull/557 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feat

METRON-777 and rest interface for installing parsers

I have enough of a rest interface around installing parsers that I’m thinking of merging it down into 777 and get them reviewed together, as apposed to following on. I know there will be a bunch of rework from suggestions coming, it would be easier to refactor on the same branch. Thoughts? Is 777

[GitHub] incubator-metron issue #555: METRON-902 ES improperly indexes Bro logs

Github user ottobackwards commented on the issue: https://github.com/apache/incubator-metron/pull/555 We should attach those logs to a jira about expanding the parser es integration tests --- If your project is set up for it, you can reply to this email and have your reply appear on

[GitHub] incubator-metron issue #555: METRON-902 ES improperly indexes Bro logs

Github user JonZeolla commented on the issue: https://github.com/apache/incubator-metron/pull/555 The most recent time I noticed the issue was when I was testing #510. In that case, I spun up full-dev and pushed [these logs](https://github.com/JonZeolla/incubator-metron/blob/master/m

[GitHub] incubator-metron pull request #557: METRON-811: Enforce Maven Version in Top...

GitHub user zezutom opened a pull request: https://github.com/apache/incubator-metron/pull/557 METRON-811: Enforce Maven Version in Top Level POM ## Contributor Comments Enforcing Maven version >= 3.3.1 and Java 8 ## Pull Request Checklist Thank you for sub

Started the infrastructure requests to move to TLP

I have begun the process as described in http://incubator.apache.org/guides/graduation.html#project-first-steps and http://www.apache.org/dev/infra-contact#requesting-graduation to move out of the incubator. First off, I'm sorry it took so long, but it's started now. I will be sending followup em

Re: Don't forget to un-incubate

I'm going to do my best to go through it tonight or tomorrow and file the appropriate tickets. If I run into issues, I'll ping you on monday Taylor. Sorry, I've been a bit busy. Best, Casey On Fri, Apr 28, 2017 at 5:12 PM, P. Taylor Goetz wrote: > general@ moved to BCC. > > Casey, > > If you

Re: Don't forget to un-incubate

Thanks Greg, I'm on it; been a busy week. Sorry about that. Best, Casey On Fri, Apr 28, 2017 at 4:11 PM, Greg Stein wrote: > Apache Metron, > > You need to move to a TLP. It has been over a week since the Board meeting, > and Infrastructure has not seen any tickets filed to perform your move

Re: Don't forget to un-incubate

general@ moved to BCC. Casey, If you need any help with the graduation steps let me know, I'd be happy to help. -Taylor > On Apr 28, 2017, at 4:11 PM, Greg Stein wrote: > > Apache Metron, > > You need to move to a TLP. It has been over a week since the Board meeting, > and Infrastructure ha

[GitHub] incubator-metron issue #219: METRON-196 Fix support of ansible 2.1 in metron...

Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/219 @2xyo Did #499 take care of your concerns here (as @JonZeolla mentioned)? If so, please close this PR when you get a chance. Otherwise, please describe why this PR might still be need

Re: [VOTE] Metron 0.4.0 release (RC2)

On Thu, Apr 27, 2017 at 09:25:04PM -0700, Matt Foley wrote: > Colleagues, > > This is a call to vote on the second release candidate for Apache Metron > 0.4.0 (Note: not incubating any more!) > Full list of changes in this release, compared to 0.3.1: > > https://dist.apache.org/repos/dist/

[GitHub] incubator-metron pull request #524: METRON-836 Use Pycapa with Kerberos

Github user asfgit closed the pull request at: https://github.com/apache/incubator-metron/pull/524 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the featu

Re: Don't forget to un-incubate

Apache Metron, You need to move to a TLP. It has been over a week since the Board meeting, and Infrastructure has not seen any tickets filed to perform your move. I'd suggest stopping your 0.4.0 release and deal with moving to TLP status. Cheers, Greg Stein Infrastructure Administrator, ASF On

[GitHub] incubator-metron issue #555: METRON-902 ES improperly indexes Bro logs

Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/555 How should we test this @JonZeolla ? Can you layout some steps for us? --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If

Re: [VOTE] Metron 0.4.0 release (RC2)

Semi-related to this, I would like to see METRON-902 make it into 0.4.0, as it is a fix for a current indexing problem with bro logs in ES. Jon On Fri, Apr 28, 2017 at 2:20 PM Matt Foley wrote: > I’ve opened https://issues.apache.org/jira/brows

[GitHub] incubator-metron issue #524: METRON-836 Use Pycapa with Kerberos

Github user merrimanr commented on the issue: https://github.com/apache/incubator-metron/pull/524 Looks good! +1 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wish

[GitHub] incubator-metron issue #524: METRON-836 Use Pycapa with Kerberos

Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/524 > One last minor documentation issue: this PR description includes steps to install Python 2.7 but nowhere is that mentioned in the README. The latest README now mentions Python

Re: [VOTE] Metron 0.4.0 release (RC2)

I’ve opened https://issues.apache.org/jira/browse/METRON-905 to fix both the default i/f and the square brackets issue. On 4/28/17, 10:30 AM, "Matt Foley" wrote: I’m happy to re-spin with a default of binding to all interfaces (0.0.0.0) With that single setting, are the square brackets

Re: [VOTE] Metron 0.4.0 release (RC2)

I’m happy to re-spin with a default of binding to all interfaces (0.0.0.0) With that single setting, are the square brackets still needed? Thanks, --Matt On 4/28/17, 6:22 AM, "Nick Allen" wrote: -1 binding I agree with you Anand. It should work out-of-the-box. The fix is simple.

[GitHub] incubator-metron issue #524: METRON-836 Use Pycapa with Kerberos

Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/524 Yes, good feedback. I had updated the README to mention Py 2.7, but I now just realized that I never pushed that out. Will get that pushed out and updated. --- If your project is set

[GitHub] incubator-metron issue #507: METRON-819: Document kafka console producer par...

Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/507 I also remember (after fighting with this for a while this morning) that if you don't have a JAAS config file defined then it won't work. Should this be part of the docs in this PR??

[GitHub] incubator-metron issue #524: METRON-836 Use Pycapa with Kerberos

Github user merrimanr commented on the issue: https://github.com/apache/incubator-metron/pull/524 I was able to get this to work by performing one extra step. The PR description did not include the Kafka ACL command to permission the topic, only the "pycapa" group. After I did this,

[GitHub] incubator-metron issue #553: METRON-896: Document Having Kerberos Issue Rene...

Github user justinleet commented on the issue: https://github.com/apache/incubator-metron/pull/553 Updated after merging in master, which included the README fixes as well as moving the Ambari instructions alongside the Manual instructions. --- If your project is set up for it, you c

[GitHub] incubator-metron pull request #556: METRON-903: Create a connections report ...

GitHub user justinleet opened a pull request: https://github.com/apache/incubator-metron/pull/556 METRON-903: Create a connections report in Zeppelin ## Contributor Comments The added Zeppelin dashboard is pretty straightforward. For each of the sensors (Bro/Snort/Yaf) a

[GitHub] incubator-metron issue #555: METRON-902 ES improperly indexes Bro logs

Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/555 Or maybe we need something new, specifically for these templates. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your

[GitHub] incubator-metron issue #555: METRON-902 ES improperly indexes Bro logs

Github user ottobackwards commented on the issue: https://github.com/apache/incubator-metron/pull/555 We should look at extending the indexing integration tests maybe. another idea for me is if the ES templates get bundled with the parsers, we can have new parser integration te

[GitHub] incubator-metron issue #555: METRON-902 ES improperly indexes Bro logs

Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/555 Good catch, @JonZeolla I am trying to think of a way we could automate the testing of this thing. Somehow grab a particular record that triggers the issue and make sure thats part of

[GitHub] incubator-metron pull request #555: METRON-902

GitHub user JonZeolla opened a pull request: https://github.com/apache/incubator-metron/pull/555 METRON-902 ## Contributor Comments It appears that `bro_index.template` regressed a bit when it was migrated to the ambari mpack. If you run this up in vagrant and let the bro senso

[GitHub] incubator-metron pull request #554: Metron 899: Fix bad Kerberos doc merge i...

Github user asfgit closed the pull request at: https://github.com/apache/incubator-metron/pull/554 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the featu

[GitHub] incubator-metron issue #554: Metron 899: Fix bad Kerberos doc merge in METRO...

Github user cestella commented on the issue: https://github.com/apache/incubator-metron/pull/554 +1, great job, Mike. Thank you very much for taking this up. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your projec

Re: [VOTE] Metron 0.4.0 release (RC2)

-1 binding I agree with you Anand. It should work out-of-the-box. The fix is simple. On Fri, Apr 28, 2017 at 6:56 AM, Anand Subramanian < asubraman...@hortonworks.com> wrote: > -1 (non-binding) > > Validated on a 12-node openstack CentOS 7 setup. > > - Ran 'mvn clean package' [PASS] > - Able

Re: [VOTE] Metron 0.4.0 release (RC2)

I'd prefer to not release something where ES is getting killed due to misconfiguration. I'm -1 binding unless someone has more context. On Fri, Apr 28, 2017 at 6:56 AM, Anand Subramanian < asubraman...@hortonworks.com> wrote: > -1 (non-binding) > > Validated on a 12-node openstack CentOS 7 setup

[GitHub] incubator-metron issue #524: METRON-836 Use Pycapa with Kerberos

Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/524 Hey, the more reviewers the better. No harm in that. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does

[GitHub] incubator-metron issue #554: Metron 899: Fix bad Kerberos doc merge in METRO...

Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/554 +1 Very nice, Mike. Thanks for cleaning that up. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not

[GitHub] incubator-metron issue #500: METRON-795: Install Metron REST with Ambari MPa...

Github user merrimanr commented on the issue: https://github.com/apache/incubator-metron/pull/500 Matt, METRON-795 is ready for review but it's substantial and I imagine it will take some time to make it through the process. Ryan On Wed, Apr 26, 2017 at 7:

Re: [VOTE] Metron 0.4.0 release (RC2)

-1 (non-binding) Validated on a 12-node openstack CentOS 7 setup. - Ran 'mvn clean package' [PASS] - Able to build RPMs [PASS] - Cluster deployment [PASS] - ES services were getting killed - https://issues.apache.org/jira/browse/METRON-897 With the workaround provided in METRON-897, I was able

Re: [VOTE] Metron 0.4.0 release (RC2)

+1 (non-binding) completed the below testing on the build 1. Built metron 0.4.0 2. Deployed metron vagrant full-dev-platform 3. Verified metron is working by checking Ambari, Storm , indexing and data written to HDFS. 4. Added new squid telemetry 5. Created new ‘whois’ enrichment and validated

[GitHub] incubator-metron issue #553: METRON-896: Document Having Kerberos Issue Rene...

Github user justinleet commented on the issue: https://github.com/apache/incubator-metron/pull/553 Looks like https://github.com/apache/incubator-metron/pull/554 cleans up a lot of things. I'll wait for that to go in, then I'll adjust this PR and we'll revisit it. --- If your projec