[GitHub] metron issue #767: METRON-1196 Increment master version number to 0.4.2 for ...

2017-09-25 Thread kylerichardson
Github user kylerichardson commented on the issue: https://github.com/apache/metron/pull/767 There are so many `pom.xml` files to change. Have we considered using a metron_version property in the parent/root pom to avoid needing to change so many files in future releases? If folks

Re: [DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST

2017-09-25 Thread Kyle Richardson
I've been stretched a little thin lately but am trying to jump back in. 2:30pm EDT works well for me too. -Kyle On Mon, Sep 25, 2017 at 8:38 PM, Otto Fowler wrote: > 11:30 your time. Sorry I have to pick my kids up from school. 2:30 mine. > > > On September 25, 2017

Re: feature branch bumps

2017-09-25 Thread Matt Foley
Hi all, Otto and I had an off-line discussion about this, and we think we have a constructive suggestion that will allow chunking the feature branch to some extent, which will of course make it easier to review. Otto is willing to make a series of PRs, each of which must be reviewed and

Re: [DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST

2017-09-25 Thread Otto Fowler
11:30 your time. Sorry I have to pick my kids up from school. 2:30 mine. On September 25, 2017 at 19:41:28, James Sirota (jsir...@apache.org) wrote: Oh sorry, didn't notice that. Otto, when is a good time for you? 25.09.2017, 16:35, "zeo...@gmail.com" : > When is the

Re: [DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST

2017-09-25 Thread James Sirota
Oh sorry, didn't notice that. Otto, when is a good time for you? 25.09.2017, 16:35, "zeo...@gmail.com" : > When is the meeting, given Otto mentioned he can't make 10am? Or did that > change > > Jon > > On Mon, Sep 25, 2017, 19:19 James Sirota wrote: > >>  

Re: [DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST

2017-09-25 Thread zeo...@gmail.com
When is the meeting, given Otto mentioned he can't make 10am? Or did that change Jon On Mon, Sep 25, 2017, 19:19 James Sirota wrote: > Great. Thank you, Otto. I would encourage everyone to watch it so that we > have constructive feedback for tomorrow and are able to

Re: [DISCUSS] Splitting up the Indexing Topology

2017-09-25 Thread James Sirota
I have experienced issues with ES and HDFS indexing in production and have previously split out the topologies into two separate topologies. As you state the benefits of this approach are (a) tuning each topology separately, (b) ability to attribute problems to a specific topology (why is

Re: [DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST

2017-09-25 Thread James Sirota
Great. Thank you, Otto. I would encourage everyone to watch it so that we have constructive feedback for tomorrow and are able to arrive to a decision Thanks, James 25.09.2017, 08:27, "Otto Fowler" : > https://youtu.be/-ISycoP3TVA > > The video is short and simple.

[GitHub] metron pull request #769: METRON-1198: Pycapa - No such configuration proper...

2017-09-25 Thread asfgit
Github user asfgit closed the pull request at: https://github.com/apache/metron/pull/769 ---

[DISCUSS] Splitting up the Indexing Topology

2017-09-25 Thread Casey Stella
One of the lessons that have bubbled up in doing some performance analysis is that having the indexing topology share both the ES and the HDFS writer in the same topology can be problematic from a tuning perspective. Specifically, it's hard to square that circle and make both perform fast enough

Re: [DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST

2017-09-25 Thread Otto Fowler
https://youtu.be/-ISycoP3TVA The video is short and simple. Hopefully it is what you are looking for. On September 21, 2017 at 16:54:13, zeo...@gmail.com (zeo...@gmail.com) wrote: I won't be able to make it and would really like to make sure there's a recording for this one, if possible. I'm

[GitHub] metron issue #733: METRON-1156 Simulate Triage Rules in the Stellar REPL

2017-09-25 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/733 +1 this is useful work; thanks @nickwallen ---

[GitHub] metron issue #771: METRON-1204: UI does not time out after being idle, but s...

2017-09-25 Thread merrimanr
Github user merrimanr commented on the issue: https://github.com/apache/metron/pull/771 That's not a bad idea. It occurs to me that this issue may also exist with the Management UI and should be fixed there as well. Stay tuned. ---

Suricata parser

2017-09-25 Thread Carolyn Duby
Is anyone working on a Suricata parser? https://suricata-ids.org/ I was not able to find an enhancement request for it. Thanks Carolyn

[GitHub] metron issue #762: METRON-1189: Add alert escalation to the Alerts UI

2017-09-25 Thread merrimanr
Github user merrimanr commented on the issue: https://github.com/apache/metron/pull/762 This PR is already fairly large and I don't see the "Hide Dismissed/Resolved Alerts" feature as being a trivial addition. Can we do that as a follow-on? ---

[GitHub] metron issue #770: METRON-1202: ElasticsearchDao Has extraneous sleep call

2017-09-25 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/770 Damn, I missed my opportunity to mock ;) +1 for posterity! ---

[GitHub] metron issue #771: METRON-1204: UI does not time out after being idle, but s...

2017-09-25 Thread iraghumitra
Github user iraghumitra commented on the issue: https://github.com/apache/metron/pull/771 Tested, the UI redirects to log-in after the timeout. Should we show a message on the login page that session timeout happened ?. ---

[GitHub] metron pull request #762: METRON-1189: Add alert escalation to the Alerts UI

2017-09-25 Thread iraghumitra
Github user iraghumitra commented on a diff in the pull request: https://github.com/apache/metron/pull/762#discussion_r140751012 --- Diff: metron-interface/metron-alerts/e2e/alert-details/alert-details.po.ts --- @@ -0,0 +1,60 @@ +/** + * Licensed to the Apache Software