Re: who is having problems installing?

2017-10-06 Thread zeo...@gmail.com
First would be to migrate docs from the wiki into the site-book so we have a more concise place to point people to regarding documentation, because there is some good stuff in the wiki, and some good things in the site-books, but attempts to link them together is currently broken all over the place

Re: SUM aggregator not working?

2017-10-06 Thread James Sirota
I think until we officially migrate to ES 5.x you should write code that would be compatible with ES 2.x (if you want that code to be generally consumable by the Metron community). 04.10.2017, 18:04, "Laurens Vets" : > It's working now, so I'm happy :) > > On 2017-10-04 14:03, Casey Stella wrote

Re: who is having problems installing?

2017-10-06 Thread James Sirota
Can you give an example? My personal view is that our docs explain Metron fundamentals pretty well. If this is not the case, then would be willing to take a look and see how we can make them more consumable. The problem with videos is that they become out of date very quickly and it's a lot o

Re: Cloudtrail use case

2017-10-06 Thread James Sirota
I agree. That's the right place to put them 06.10.2017, 06:26, "Casey Stella" : > There is actually a use-cases top level directory with worked examples in > them. They get picked up by the doc book too! I'd suggest putting it > there, thoughts? > > On Fri, Oct 6, 2017 at 8:44 AM, Nick Allen wrot

Re: Need suggestion on how to configure HCP Big Data for Development and Testing

2017-10-06 Thread James Sirota
As I mentioned in my previous response, https://community.hortonworks.com/topics/Metron.html is where you want to go for help with Hortonworks products 06.10.2017, 05:34, "Dima Kovalyov" : > Hello Ashikin, > > HCP is Hortonworks product and they have installation document here: > https://docs.hor

Re: who is having problems installing?

2017-10-06 Thread zeo...@gmail.com
To generalize a bit, I think it would be helpful to have a single or series of recordings, write-ups, or even just pointers to some good high-level docs to introduce people to each component used in Metron, and then a description of how it's used in the Metron environment. I know I spend a lot of

Re: Configuring HCP Big Data for Development

2017-10-06 Thread James Sirota
For questions on the Hortonworks offerings please ask your questions on https://community.hortonworks.com/topics/Metron.html This is a board for Apache Metron. 05.10.2017, 00:57, "Ashikin Abdullah" : > Hi, can anyone suggest appropriate deployment for Hortonworks Cybersecurity > Package within t

Re: who is having problems installing?

2017-10-06 Thread James Sirota
Hi Guys, How about a meeting at 11 AM PST on this? Can everyone who needs to make the meeting? If you could come with a Hadoop cluster (including Kafka, storm, HDFS, Hbase) pre-installed I can walk you through the steps required to install Metron. Does that seem reasonable? Thanks, James

[GitHub] metron issue #682: METRON-1081: Fix Alerts and Ops UI Notices file

2017-10-06 Thread mmiklavc
Github user mmiklavc commented on the issue: https://github.com/apache/metron/pull/682 Is this still relevant? ---

[GitHub] metron pull request #790: METRON-1234 fix for WARNING 'dependencies.dependen...

2017-10-06 Thread asfgit
Github user asfgit closed the pull request at: https://github.com/apache/metron/pull/790 ---

[GitHub] metron pull request #782: METRON-1222 fix warning for The expression ${paren...

2017-10-06 Thread asfgit
Github user asfgit closed the pull request at: https://github.com/apache/metron/pull/782 ---

[GitHub] metron issue #791: METRON-1235: Document the properties pulled from the glob...

2017-10-06 Thread mmiklavc
Github user mmiklavc commented on the issue: https://github.com/apache/metron/pull/791 This is excellent. I really like the table layout. +1 pending the merge conflicts and Travis. ---

Re: [DISCUSS] Upgrading Elasticsearch from 2.x to 5.x

2017-10-06 Thread Casey Stella
Yeah, I agree with what Michael "fine whine" Miklavcic said; I'm in favor of the high level client. On Thu, Oct 5, 2017 at 3:35 PM, Michael Miklavcic < michael.miklav...@gmail.com> wrote: > Justin, thanks for the feedback! I'm inclined to agree with you about using > the high level client. It's a

[GitHub] metron pull request #788: METRON-1223: Support for adding comments to alerts

2017-10-06 Thread justinleet
Github user justinleet commented on a diff in the pull request: https://github.com/apache/metron/pull/788#discussion_r143198763 --- Diff: metron-interface/metron-alerts/src/app/alerts/alert-details/alert-details.component.ts --- @@ -133,6 +173,40 @@ export class AlertDetailsCompon

[GitHub] metron pull request #780: METRON-1220: Create documentation around alert nes...

2017-10-06 Thread asfgit
Github user asfgit closed the pull request at: https://github.com/apache/metron/pull/780 ---

Re: Cloudtrail use case

2017-10-06 Thread Justin Leet
I totally forgot you added that. 100% think it belongs there. On Fri, Oct 6, 2017 at 9:26 AM, Casey Stella wrote: > There is actually a use-cases top level directory with worked examples in > them. They get picked up by the doc book too! I'd suggest putting it > there, thoughts? > > On Fri, O

[GitHub] metron issue #790: METRON-1234 fix for WARNING 'dependencies.dependency.(gro...

2017-10-06 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/790 +1 by inspection. Great catch and thanks for the contribution! ---

Re: Cloudtrail use case

2017-10-06 Thread Casey Stella
There is actually a use-cases top level directory with worked examples in them. They get picked up by the doc book too! I'd suggest putting it there, thoughts? On Fri, Oct 6, 2017 at 8:44 AM, Nick Allen wrote: > Yes, agreed, Justin. I guess my main point to Laurens was meant to be that > the

[GitHub] metron issue #780: METRON-1220: Create documentation around alert nested fie...

2017-10-06 Thread nickwallen
Github user nickwallen commented on the issue: https://github.com/apache/metron/pull/780 +1 LGTM. Thanks! ---

Re: Quick Dev

2017-10-06 Thread Simon Elliston Ball
I think the codelab build might be more Metron archeologist! +1 to a big old clearout, especially on the wiki. > On 6 Oct 2017, at 13:57, Nick Allen wrote: > > I doubt it has been run in a long, long time. It was originally created > for some Meetups that we did early on in the project. Usefu

Re: Quick Dev

2017-10-06 Thread Nick Allen
I doubt it has been run in a long, long time. It was originally created for some Meetups that we did early on in the project. Useful then, but not any longer. It might have even predated Quick Dev. FYI - We have an opening for Metron Team Historian. Send a cover letter, CV and $150 application

Re: Quick Dev

2017-10-06 Thread Justin Leet
What is the point of that anyway? It just looks like full dev with no skipTags? That seems like it should just be documented that you can run with Vagrant with '--ansible-skip-tags'? We probably should document any tags you might want to skip anyway. I'm pretty in favor of killing that. On Fri, O

Re: Quick Dev

2017-10-06 Thread Nick Allen
The same case might be made for the Code Lab Platform `metron-deployment/vagrant/codelab-platform`? On Fri, Oct 6, 2017 at 8:44 AM Justin Leet wrote: > Wiki updated. It now points to full dev and the link just says "Dev > Platform" > > On Fri, Oct 6, 2017 at 8:39 AM, Nick Allen wrote: > > > +1

Re: Cloudtrail use case

2017-10-06 Thread Nick Allen
Yes, agreed, Justin. I guess my main point to Laurens was meant to be that the actual destination of the use case should be the least of our worries. However Laurens wants to write it up will work. If you type it up, throw it in an envelope, seal it with a stamp, and physically mail it to me, I wi

Re: Quick Dev

2017-10-06 Thread Justin Leet
Wiki updated. It now points to full dev and the link just says "Dev Platform" On Fri, Oct 6, 2017 at 8:39 AM, Nick Allen wrote: > +1 To killing Quick Dev and updating the Wiki. Quick Dev has been broken > for eons. Simon's point about "profusion of installs" makes a lot of sense > too. > > >

Re: Quick Dev

2017-10-06 Thread Nick Allen
+1 To killing Quick Dev and updating the Wiki. Quick Dev has been broken for eons. Simon's point about "profusion of installs" makes a lot of sense too. On Fri, Oct 6, 2017 at 8:33 AM Simon Elliston Ball < si...@simonellistonball.com> wrote: > +1 we see a lot of people struggling with the pro

Re: Need suggestion on how to configure HCP Big Data for Development and Testing

2017-10-06 Thread Dima Kovalyov
Hello Ashikin, HCP is Hortonworks product and they have installation document here: https://docs.hortonworks.com/HDPDocuments/HCP1/HCP-1.2.0/bk_installation/content/getting_started.html Chapter that you are looking for is below: https://docs.hortonworks.com/HDPDocuments/HCP1/HCP-1.3.0/bk_installat

Re: Quick Dev

2017-10-06 Thread Simon Elliston Ball
+1 we see a lot of people struggling with the profusion of install and run methods as it is, if we can reduce that surface area, life will be a lot easier on the user list. > On 6 Oct 2017, at 13:28, zeo...@gmail.com wrote: > > I say we kill it and repoint the site. That will give us one les

Re: Quick Dev

2017-10-06 Thread zeo...@gmail.com
I say we kill it and repoint the site. That will give us one less thing to upgrade to centos 7 as well. Jon On Fri, Oct 6, 2017, 08:27 Justin Leet wrote: > So what are we going to do with Quick Dev? I'm pretty sure everybody's > been using full dev for awhile now (and quick dev is probably br

Quick Dev

2017-10-06 Thread Justin Leet
So what are we going to do with Quick Dev? I'm pretty sure everybody's been using full dev for awhile now (and quick dev is probably broken since I'm sure we haven't been regularly updating it). I just realized our website links to a wiki page that says to use quick dev. Given that quick dev is

[GitHub] metron pull request #788: METRON-1223: Support for adding comments to alerts

2017-10-06 Thread justinleet
Github user justinleet commented on a diff in the pull request: https://github.com/apache/metron/pull/788#discussion_r143161957 --- Diff: metron-interface/metron-alerts/src/app/alerts/alert-details/alert-details.component.ts --- @@ -133,6 +173,40 @@ export class AlertDetailsCompon

[GitHub] metron pull request #788: METRON-1223: Support for adding comments to alerts

2017-10-06 Thread simonellistonball
Github user simonellistonball commented on a diff in the pull request: https://github.com/apache/metron/pull/788#discussion_r143158180 --- Diff: metron-interface/metron-alerts/src/app/alerts/alert-details/alert-details.component.ts --- @@ -133,6 +173,40 @@ export class AlertDetail

[GitHub] metron pull request #788: METRON-1223: Support for adding comments to alerts

2017-10-06 Thread justinleet
Github user justinleet commented on a diff in the pull request: https://github.com/apache/metron/pull/788#discussion_r143157741 --- Diff: metron-interface/metron-alerts/src/app/alerts/alert-details/alert-details.component.ts --- @@ -133,6 +173,40 @@ export class AlertDetailsCompon

[GitHub] metron issue #768: Metron 1123: Add group by option using faceted search cap...

2017-10-06 Thread iraghumitra
Github user iraghumitra commented on the issue: https://github.com/apache/metron/pull/768 @merrimanr oops missed the comment thanks for letting me know again. I will add a test case for tree bulk actions. Looks like e2e for drag-drop is going to be tough I tried a bit but could not ge