Re: Kafka error when upgrading to Metron 0.3.0

2017-01-08 Thread Michael Miklavcic
Hi Tyler, I don't recall seeing any failures the last time I ran this. I will take a look. On Jan 8, 2017 9:56 PM, "Tyler Moore" wrote: Michael, I am receiving error when trying to build with HPD profile, have you had any problems with pcap-backend tests failing when

Re: Kafka error when upgrading to Metron 0.3.0

2017-01-08 Thread Tyler Moore
Michael, I am receiving error when trying to build with HPD profile, have you had any problems with pcap-backend tests failing when building with hdp profile? Errors and log files provided below: Results : Failed tests:

Re: Enrich enrichment

2017-01-08 Thread Casey Stella
You could do the geo enrichment normally and do a stellar hbase enrichment in the threat Intel phase. On Sun, Jan 8, 2017 at 16:22 Ryan Merriman wrote: > Hbase enrichments and geo enrichments are done in parallel so I would not > expect this to work. You could do the Hbase

Re: Enrich enrichment

2017-01-08 Thread Ryan Merriman
Hbase enrichments and geo enrichments are done in parallel so I would not expect this to work. You could do the Hbase enrichment as a threat Intel enrichment and that should work because enrichments and threat Intel are done in series. The ideal way would be to chain together Stellar

Enrich enrichment

2017-01-08 Thread Dima Kovalyov
Is it possible to enrich enrichment? For example I have IP address, I enrich it with geo and get City name, now I want to enrich City name with city crime level (assume I have that data). But when I do that it just does not work. I specify enrichment like that: > { > "index" : "msexchange", >