[GitHub] incubator-metron issue #432: METRON-682: Unify and Improve the Flat File Loa...

2017-02-03 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/432
  
I am trying to test this out - my vm is not doing well at the moment 
however.  Hopefully I can get it straight


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #432: METRON-682: Unify and Improve the Flat File Loa...

2017-02-03 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/432
  
[vagrant@node1 tmp]$ /usr/metron/0.3.0/bin/flatfile_loader.sh -i 
http://s3.amazonaws.com/alexa-static/top-1m.csv.zip -t enrichment -c t -e 
./extractor.json -p 5 -b 128
Exception in thread "main" org.codehaus.jackson.map.JsonMappingException: 
Can not instantiate value of type [map type; class java.util.LinkedHashMap, 
[simple type, class java.lang.String] -> [simple type, class java.lang.Object]] 
from JSON String; no single-String constructor/factory method (through 
reference chain: 
org.apache.metron.dataloads.extractor.ExtractorHandler["config"])
at 
org.codehaus.jackson.map.deser.std.StdValueInstantiator._createFromStringFallbacks(StdValueInstantiator.java:379)
at 
org.codehaus.jackson.map.deser.std.StdValueInstantiator.createFromString(StdValueInstantiator.java:268)
at 
org.codehaus.jackson.map.deser.std.MapDeserializer.deserialize(MapDeserializer.java:244)
at 
org.codehaus.jackson.map.deser.std.MapDeserializer.deserialize(MapDeserializer.java:33)
at 
org.codehaus.jackson.map.deser.SettableBeanProperty.deserialize(SettableBeanProperty.java:299)
at 
org.codehaus.jackson.map.deser.SettableBeanProperty$MethodProperty.deserializeAndSet(SettableBeanProperty.java:414)
at 
org.codehaus.jackson.map.deser.BeanDeserializer.deserializeFromObject(BeanDeserializer.java:697)
at 
org.codehaus.jackson.map.deser.BeanDeserializer.deserialize(BeanDeserializer.java:580)
at 
org.codehaus.jackson.map.ObjectMapper._readMapAndClose(ObjectMapper.java:2732)
at 
org.codehaus.jackson.map.ObjectMapper.readValue(ObjectMapper.java:1909)
at 
org.apache.metron.dataloads.extractor.ExtractorHandler.load(ExtractorHandler.java:70)
at 
org.apache.metron.dataloads.extractor.ExtractorHandler.load(ExtractorHandler.java:75)
at 
org.apache.metron.dataloads.extractor.ExtractorHandler.load(ExtractorHandler.java:78)
at 
org.apache.metron.dataloads.nonbulk.flatfile.SimpleEnrichmentFlatFileLoader.main(SimpleEnrichmentFlatFileLoader.java:49)
at 
org.apache.metron.dataloads.nonbulk.flatfile.SimpleEnrichmentFlatFileLoader.main(SimpleEnrichmentFlatFileLoader.java:40)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at 
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at 
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at org.apache.hadoop.util.RunJar.run(RunJar.java:233)
at org.apache.hadoop.util.RunJar.main(RunJar.java:148)
[vagrant@node1 tmp]$ 

with extractor.json of:


```
{
  "config" :
"columns" : {
  "domain" : 1,
  "rank" : 0
  }
,"indicator_column" : "domain"
,"type" : "alexa"
,"separator" : ","
},
  "extractor" : "CSV"
}   
```


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #444: METRON-705: Parallelize the build in travis to ...

2017-02-07 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/444
  
you bet btw -the build on this pr isn't even going at all


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #444: METRON-705: Parallelize the build in travis to ...

2017-02-07 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/444
  
integration tests took 43 minutes


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #444: METRON-705: Parallelize the build in travis to ...

2017-02-07 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/444
  
 #14 passed

 Elapsed time 43 min 10 sec
 Total time 1 hr 6 min 21 sec


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #444: METRON-705: Parallelize the build in travis to ...

2017-02-07 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/444
  
So to test this - if you have travis set up for your git account, I think 
you just push it to a branch in your repo and let travis build it?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #361: METRON-630 Add tarLongFileMode posix to maven-a...

2017-02-05 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/361
  
Thanks for the contribution


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #444: METRON-705: Parallelize the build in travis to ...

2017-02-07 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/444
  
 #14.1 passed

 Elapsed time 23 min 28 sec
On my second try around 5pm


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #461: METRON-733: Remove Geo database from ParserBolt

2017-02-21 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/461
  
Does this mean you can get rid of the local geo database in the parsers 
resource dir?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #438: METRON-686 Record Rule Set that Fired During Th...

2017-02-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/438
  
That makes sense, thanks for the explanation.
I am +1 for having SOLR specific flattening, although documenting well 
needs to be a priority.
Also, if we do this, please log a jira that the flattening in the json 
mapper needs to be optional by configuration


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #438: METRON-686 Record Rule Set that Fired During Th...

2017-02-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/438
  
let me know which one to comment on!



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #462: METRON-734 Builds failing because of MaxMind DB...

2017-02-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/462
  
+1, build and tests run (  mvn -q clean integration-test install && 
build_utils/verify_licenses.sh ), on machine that was failing every every time.



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #455: METRON-720 modify generate-md.sh to re-throw er...

2017-02-17 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/455
  
ok - i'm not building this branch, just what i've seen from other builds


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #455: METRON-720 modify generate-md.sh to re-throw er...

2017-02-17 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/455
  
re: "site.xml is now a fully auto-generated file"  that would be why it is 
showing in git as unstaged but modified?  
Is there a way we can stop that from happening?  If it is generated does it 
need to be in git?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #438: METRON-686 Record Rule Set that Fired During Th...

2017-02-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/438
  
I think what we are saying is 1.  I think that is the best way to move 
forward.
Just make sure that this commit isn't merged into an RC for 0.3.1



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #449: METRON-701 Triage Metrics Produced by the Profi...

2017-02-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/449
  
I think routing from stellar within routing in storm is confusing.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #449: METRON-701 Triage Metrics Produced by the Profi...

2017-02-23 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/449
  
I'm sorry, no Nick I don't


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #450: METRON-690: Create a DSL-based timestamp lookup...

2017-02-21 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/450
  
Honestly, I was thinking more about the 'kill everything' part, which seems 
to be repeated a lot


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #457: METRON-724 add [IN] to the documented ke...

2017-02-17 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/457

METRON-724 add [IN] to the documented keywords that require escaping

The keyword 'in' must be escaped to be used in Stellar, but is not 
documented as such.
This PR adds in the documentation and a unit test.
Verify:
- by running the tests
- by using the Stellar Console to evaluate an expression
- by building and viewing the documentation ( see below ) and the readme.md 
in github



Thank you for submitting a contribution to Apache Metron (Incubating).
Please refer to our [Development 
Guidelines](https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=61332235)
 for the complete guide to follow for contributions.
Please refer also to our [Build Verification 
guildlines](https://cwiki.apache.org/confluence/display/METRON/Verifying+Builds?show-miniview)
 for complete smoke testing guides.


In order to streamline the review of the contribution we ask you follow 
these guidelines and ask you to double check
the following:

### For all changes:
- [ x] Is there a JIRA ticket associated with this PR? If not one needs to 
be created at [Metron 
Jira](https://issues.apache.org/jira/browse/METRON/?selectedTab=com.atlassian.jira.jira-projects-plugin:summary-panel).
 
- [ x] Does your PR title start with METRON- where  is the JIRA 
number you are trying to resolve? Pay particular attention to the hyphen "-" 
character.
- [x ] Has your PR been rebased against the latest commit within the target 
branch (typically master)?


### For code changes:
- [ n/a] Have you included steps to reproduce the behavior or problem that 
is being changed or addressed?
- [x ] Have you included steps or a guide to how the change may be verified 
and tested manually?
- [x ] Have you ensured that the full suite of tests and checks have been 
executed in the root incubating-metron folder via:

```
mvn -q clean integration-test install && build_utils/verify_licenses.sh 
```

- [x ] Have you written or updated unit tests and or integration tests to 
verify your changes?
- [n/a ] If adding new dependencies to the code, are these dependencies 
licensed in a way that is compatible for inclusion under [ASF 
2.0](http://www.apache.org/legal/resolved.html#category-a)? 
- [n/a ] Have you verified the basic functionality of the build by building 
and running locally with Vagrant full-dev environment or the equivalent?

### For documentation related changes:
- [x ] Have you ensured that format looks appropriate for the output in 
which it is rendered by building and verifying the site-book? If not then run 
the following commands and the verify changes via 
site-book/target/site/index.html.

```
cd site-book
bin/generate-md.sh
mvn site:site

```

### Note:
Please ensure that once the PR is submitted, you check travis-ci for build 
issues and submit an update to your PR as soon as possible.
It is also recommened that [travis-ci](https://travis-ci.org) is set up for 
your personal repository such that your branches are built there before 
submitting a pull request.

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-724

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/457.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #457


commit b90987bbeca346301a18aea2a7913a072fde4a3a
Author: Otto Fowler <ottobackwa...@gmail.com>
Date:   2017-02-17T17:06:58Z

METRON-724 add [IN] to the documented keywords that require escaping

add in unit test




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #461: METRON-733: Remove Geo database from ParserBolt

2017-02-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/461
  
I am seeing this on my local branch, not the PR


On February 22, 2017 at 09:13:12, Nick Allen (notificati...@github.com)
wrote:

The build error does not seem related to your PR. I saw the same failure on
#450 <https://github.com/apache/incubator-metron/pull/450>.

The resource com.fasterxml:oss-parent:pom:28 really does not exist in Maven
Central, AFAIK. Hmm.

[ERROR] Failed to execute goal on project metron-enrichment: Could not
resolve dependencies
for project org.apache.metron:metron-enrichment:jar:0.3.1:
Failed to collect dependencies at com.maxmind.geoip2:geoip2:jar:2.8.0 ->
 com.maxmind.db:maxmind-db:jar:1.2.1 ->
com.fasterxml.jackson.core:jackson-databind:jar:2.9.0-SNAPSHOT:
Failed to read artifact descriptor for
com.fasterxml.jackson.core:jackson-databind:jar:2.9.0-SNAPSHOT:
Could not find artifact com.fasterxml:oss-parent:pom:28 in central
(http://repo.maven.apache.org/maven2) -> [Help 1]

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub

<https://github.com/apache/incubator-metron/pull/461#issuecomment-281679880>,
or mute the thread

<https://github.com/notifications/unsubscribe-auth/ABD1_98dtsK9jFWAsUhiM3fkRJZzHr_Kks5rfEJ3gaJpZM4MIH4d>
.



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #438: METRON-686 Record Rule Set that Fired During Th...

2017-02-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/438
  
I commented on 735 so it wins. #settled


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #438: METRON-686 Record Rule Set that Fired During Th...

2017-02-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/438
  
Nick - if you look at the JSONMapParser, Casey and I implemented a 
flattener that you would use for this.  So, all of our json stuff from that 
_was_ already flattened.  I am more confused about there being *non* flattened 
things going through actually.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #454: METRON-716 site-book README.md

2017-02-14 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/454
  
@mattf-horton are you ok on this after the revisions?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #454: METRON-716 site-book README.md

2017-02-13 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/454

METRON-716 site-book README.md

Initial draft of a readme for site-book documentation.

Questions:  should we list the tools used more explicitly?

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-716

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/454.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #454


commit f56190441f4751bc2493b49b1495258ed0a25c5b
Author: Otto Fowler <ottobackwa...@gmail.com>
Date:   2017-02-13T20:54:26Z

initial draft of site-book README.md




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #452: Removed MySQL from Enrichment Diagram

2017-02-15 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/452
  
Please rename the PR to start with "METRON-715".  Then we can land this


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #453: METRON-694: Index Errors from Topologies

2017-02-13 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/453
  
Just real quick before I start to review:

- What are the performance implications of this?  How can we measure that?
- What is the effect of running this on quick dev?  is it to be enabled by 
default or disabled for load/performance?
- Does this run in Docker?
- I don't see any documentation changes. What needs to be done, should it 
be in this or another PR? 



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #453: METRON-694: Index Errors from Topologies

2017-02-13 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/453#discussion_r100815725
  
--- Diff: 
metron-platform/metron-common/src/main/java/org/apache/metron/common/error/MetronError.java
 ---
@@ -0,0 +1,200 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.apache.metron.common.error;
+
+import org.apache.commons.codec.digest.DigestUtils;
+import org.apache.commons.lang.exception.ExceptionUtils;
+import org.apache.hadoop.hbase.util.Bytes;
+import org.apache.metron.common.Constants;
+import org.apache.metron.common.Constants.ErrorType;
+import org.json.simple.JSONObject;
+
+import java.net.InetAddress;
+import java.net.UnknownHostException;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Optional;
+import java.util.Set;
+import java.util.stream.Collectors;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static org.apache.metron.common.Constants.ErrorFields;
+
+public class MetronError {
+
+  private String message;
+  private Throwable throwable;
+  private String sensorType = "error";
+  private ErrorType errorType = ErrorType.DEFAULT_ERROR;
+  private Set errorFields;
+  private List rawMessages;
+
+  public MetronError withMessage(String message) {
+this.message = message;
+return this;
+  }
+
+  public MetronError withThrowable(Throwable throwable) {
+this.throwable = throwable;
+return this;
+  }
+
+  public MetronError withSensorType(String sensorType) {
+this.sensorType = sensorType;
+return this;
+  }
+
+  public MetronError withErrorType(ErrorType errorType) {
+this.errorType = errorType;
+return this;
+  }
+
+  public MetronError withErrorFields(Set errorFields) {
+this.errorFields = errorFields;
+return this;
+  }
+
+
+  public MetronError addRawMessage(Object rawMessage) {
+if (rawMessage != null) {
+  if (this.rawMessages == null) {
+this.rawMessages = new ArrayList<>();
+  }
+  this.rawMessages.add(rawMessage);
+}
+return this;
+  }
+
+  public MetronError withRawMessages(List rawMessages) {
+this.rawMessages = rawMessages;
+return this;
+  }
+
+  public Optional getThrowable() {
+return throwable != null ? Optional.of(throwable) : Optional.empty();
+  }
+
+  @SuppressWarnings({"unchecked"})
+  public JSONObject getJSONObject() {
+JSONObject errorMessage = new JSONObject();
+errorMessage.put(Constants.SENSOR_TYPE, "error");
+
+   /*
+ * Save full stack trace in object.
+*/
+if (throwable != null) {
+  String stackTrace = ExceptionUtils.getStackTrace(throwable);
+  String exception = throwable.toString();
+  errorMessage.put(ErrorFields.EXCEPTION.getName(), exception);
+  errorMessage.put(ErrorFields.STACK.getName(), stackTrace);
+}
+
+errorMessage.put(ErrorFields.TIMESTAMP.getName(), 
System.currentTimeMillis());
+try {
+  errorMessage.put(ErrorFields.HOSTNAME.getName(), 
InetAddress.getLocalHost().getHostName());
+} catch (UnknownHostException ex) {
+
+}
+if(rawMessages != null) {
+  for(int i = 0; i < rawMessages.size(); i++) {
+Object rawMessage = rawMessages.get(i);
+// If multiple messages are included add an index to the field 
name, otherwise leave it off
+String rawMessageField = rawMessages.size() == 1 ? 
ErrorFields.RAW_MESSAGE.getName() : ErrorFields.RAW_MESSAGE.getName() + "_" + i;
+String rawMessageBytesField = rawMessages.size() == 1 ? 
ErrorFields.RAW_MESSAGE_BYTES.getName() : 
ErrorFields.RAW_MESSAGE_BYTES.getName() + "_" + i;
+if(

[GitHub] incubator-metron pull request #453: METRON-694: Index Errors from Topologies

2017-02-13 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/453#discussion_r100815478
  
--- Diff: 
metron-platform/metron-common/src/main/java/org/apache/metron/common/error/MetronError.java
 ---
@@ -0,0 +1,200 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.apache.metron.common.error;
+
+import org.apache.commons.codec.digest.DigestUtils;
+import org.apache.commons.lang.exception.ExceptionUtils;
+import org.apache.hadoop.hbase.util.Bytes;
+import org.apache.metron.common.Constants;
+import org.apache.metron.common.Constants.ErrorType;
+import org.json.simple.JSONObject;
+
+import java.net.InetAddress;
+import java.net.UnknownHostException;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Optional;
+import java.util.Set;
+import java.util.stream.Collectors;
+
+import static java.nio.charset.StandardCharsets.UTF_8;
+import static org.apache.metron.common.Constants.ErrorFields;
+
+public class MetronError {
+
+  private String message;
+  private Throwable throwable;
+  private String sensorType = "error";
+  private ErrorType errorType = ErrorType.DEFAULT_ERROR;
+  private Set errorFields;
+  private List rawMessages;
+
+  public MetronError withMessage(String message) {
+this.message = message;
+return this;
+  }
+
+  public MetronError withThrowable(Throwable throwable) {
+this.throwable = throwable;
+return this;
+  }
+
+  public MetronError withSensorType(String sensorType) {
+this.sensorType = sensorType;
+return this;
+  }
+
+  public MetronError withErrorType(ErrorType errorType) {
+this.errorType = errorType;
+return this;
+  }
+
+  public MetronError withErrorFields(Set errorFields) {
+this.errorFields = errorFields;
+return this;
+  }
+
+
+  public MetronError addRawMessage(Object rawMessage) {
+if (rawMessage != null) {
+  if (this.rawMessages == null) {
+this.rawMessages = new ArrayList<>();
+  }
+  this.rawMessages.add(rawMessage);
+}
+return this;
+  }
+
+  public MetronError withRawMessages(List rawMessages) {
+this.rawMessages = rawMessages;
+return this;
+  }
+
+  public Optional getThrowable() {
+return throwable != null ? Optional.of(throwable) : Optional.empty();
+  }
+
+  @SuppressWarnings({"unchecked"})
+  public JSONObject getJSONObject() {
+JSONObject errorMessage = new JSONObject();
+errorMessage.put(Constants.SENSOR_TYPE, "error");
+
+   /*
+ * Save full stack trace in object.
--- End diff --

Instead of having a method with multiple null checks
Maybe have a method that just calls other methods, and put the checks in 
there

handleThrowable(errorMessage);
handleRawMessages(errorMessage);
etc etc



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #453: METRON-694: Index Errors from Topologies

2017-02-13 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/453#discussion_r100817317
  
--- Diff: 
metron-platform/metron-elasticsearch/src/main/config/elasticsearch_error.properties
 ---
@@ -0,0 +1,69 @@
+#  Licensed to the Apache Software Foundation (ASF) under one
+#  or more contributor license agreements.  See the NOTICE file
+#  distributed with this work for additional information
+#  regarding copyright ownership.  The ASF licenses this file
+#  to you under the Apache License, Version 2.0 (the
+#  "License"); you may not use this file except in compliance
+#  with the License.  You may obtain a copy of the License at
+#
+#  http://www.apache.org/licenses/LICENSE-2.0
+#
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS,
+#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#  See the License for the specific language governing permissions and
+#  limitations under the License.
+
--- End diff --

This is duplicated in the MPACK isn't it?  Is there not a way to have this 
defined once and used in multiple places?   


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #453: METRON-694: Index Errors from Topologies

2017-02-13 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/453#discussion_r100820671
  
--- Diff: 
metron-platform/metron-indexing/src/main/config/zookeeper/indexing/error.json 
---
@@ -0,0 +1,17 @@
+{
+  "hdfs" : {
--- End diff --

error is too generic.  


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #453: METRON-694: Index Errors from Topologies

2017-02-13 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/453#discussion_r100813285
  
--- Diff: 
metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/configuration/metron-env.xml
 ---
@@ -37,6 +37,12 @@
 Metron apps indexed HDFS dir
 
 
--- End diff --

Should these HDSF directories more specifically pertain to topology 
processing?  As the other use cases came into being, just 'error' may be too 
generic


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #453: METRON-694: Index Errors from Topologies

2017-02-13 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/453
  
That makes complete sense, we should call that stuff out pre-review.  I 
think what we are seeing is that folks have some really good ideas and are 
willing to contribute to documentation on this project, we should take 
advantage.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #453: METRON-694: Index Errors from Topologies

2017-02-13 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/453
  
What comes to mind is the 'source' of an error.  Is this error wrong 
because METRON thinks it is invalid, or it it wrong because of some other 
configuration specific evaluation.  I don't think we do this now with stellar   
(   IF (BUSINESS_RULE(rule_valid_field,field1) == FALSE) DROP_ERROR()) however.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #453: METRON-694: Index Errors from Topologies

2017-02-13 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/453
  
@cestella - how can we utilize the error indexing if we were going to say - 
output errors or warnings that there were deprecated stellar statements?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #456: METRON-721 Add github pull request template to ...

2017-02-15 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/456
  
I put a reference to the verification doc at the top ' for smoke test guide 
' and then put a checkbox for running in vagrant - how's that?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #456: METRON-721 Add github pull request template to ...

2017-02-15 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/456
  
So - why don't we come up with a cut down version of that, maybe restricted 
to trying quick or full dev?  or reference and link like we do with the full 
dev guide?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #456: METRON-721 Add github pull request template to ...

2017-02-15 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/456
  
Thanks for the review!

I am not sure about verifying builds.  I don't think we should put 
everything that is in the Dev Guide or the Verification in the PR template, 
there is some balance to be had there.  I don't think we expect every PR to 
have validated the builds anyways.

I did make the jira change.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #456: METRON-721 Add github pull request templ...

2017-02-15 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/456#discussion_r101297815
  
--- Diff: .github/PULL_REQUEST_TEMPLATE.md ---
@@ -0,0 +1,40 @@
+Thank you for submitting a contribution to Apache Metron (Incubating).
+Please refer to our [Development 
Guidelines](https://cwiki.apache.org/confluence/pages/viewpage.action?pageId=61332235)
 for the complete guide to follow for contributions
+
+In order to streamline the review of the contribution we ask you follow 
these guidelines and ask you to double check
+the following:
+
+### For all changes:
+- [ ] Is there a JIRA ticket associated with this PR? If not one needs to 
be created at [Metron 
Jira](https://issues.apache.org/jira/browse/METRON/?selectedTab=com.atlassian.jira.jira-projects-plugin:summary-panel)
 
+
+- [ ] Does your PR title start with METRON- where  is the JIRA 
number you are trying to resolve? Pay particular attention to the hyphen "-" 
character.
+
+- [ ] Has your PR been rebased against the latest commit within the target 
branch (typically master)?
+
+
+### For code changes:
+- [ ] Have you included steps to reproduce the behavior or problem that is 
being changed or addressed?
+- [ ] Have you included steps or a guide to how the change may be verified 
and tested manually?
+- [ ] Have you ensured that the full suite of tests and checks have been 
executed in the root incubating-metron folder via:
+
+```
+mvn -q clean integration-test install && build_utils/verify_licenses.sh 
+```
+
+- [ ] Have you written or updated unit tests and or integration tests to 
verify your changes?
+- [ ] If adding new dependencies to the code, are these dependencies 
licensed in a way that is compatible for inclusion under [ASF 
2.0](http://www.apache.org/legal/resolved.html#category-a)? 
+
+### For documentation related changes:
+- [ ] Have you ensured that format looks appropriate for the output in 
which it is rendered by building and verifying the site-book?
+
+```
+cd site-book
+bin/generate-md.sh
+mvn site:site
+
+view changes via target/site/index.html
--- End diff --

done



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #422: METRON-670 Monit Incorrectly Reports Status

2017-01-24 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/422
  
There are also problems with shutting down topologies, since we don't pass 
in the wait to storm ( at least we didn't.   I need to find the pr/jira for 
that.  All external calls from monit need to have clear timeout accounting from 
both monit's pov and the external agent


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #316: METRON-503: Metron REST API

2017-01-19 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/316
  
Also, the point that this may be better managed from within ambari as a
view may need consideration.



On January 19, 2017 at 08:58:51, JJ Meyer (notificati...@github.com) wrote:

@merrimanr <https://github.com/merrimanr> @cestella
<https://github.com/cestella> does it make sense to hold off on this for a
little while? It looks like all configuration may be managed by Ambari
going forward. I am getting this from the dev thread: Ambari Metron
Configuration Management consequences and call to action.

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub

<https://github.com/apache/incubator-metron/pull/316#issuecomment-273782615>,
or mute the thread

<https://github.com/notifications/unsubscribe-auth/ABD1_zjUuptzwwa_4XekwsX-AFZ6qGNAks5rT2wZgaJpZM4KbJgW>
.



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #220: Metron-342 Fix permissions of {{ metron_directo...

2017-01-19 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/220
  
Can we close this then?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #467: METRON-743: Sort the files when reading results...

2017-02-26 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/467
  
Thank you for clarifying, that makes sense.  Sorry to confuse the issue


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #466: METRON-742: Generated code for profile window s...

2017-02-25 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/466
  
[INFO] 

[INFO] Reactor Summary:
[INFO] 
[INFO] Metron . SUCCESS [  
0.002 s]
[INFO] metron-analytics ... SUCCESS [  
0.000 s]
[INFO] metron-maas-common . SUCCESS [  
0.800 s]
[INFO] metron-platform  SUCCESS [  
0.001 s]
[INFO] metron-test-utilities .. SUCCESS [  
0.357 s]
[INFO] metron-integration-test  SUCCESS [  
2.171 s]
[INFO] metron-maas-service  SUCCESS [  
1.720 s]
[INFO] metron-common .. SUCCESS [ 
40.376 s]
[INFO] metron-statistics .. SUCCESS [01:03 
min]
[INFO] metron-hbase ... SUCCESS [01:11 
min]
[INFO] metron-profiler-common . SUCCESS [ 
10.194 s]
[INFO] metron-profiler-client . SUCCESS [01:30 
min]
[INFO] metron-profiler  SUCCESS [ 
29.689 s]
[INFO] metron-writer .. SUCCESS [ 
15.689 s]
[INFO] metron-enrichment .. SUCCESS [ 
49.701 s]
[INFO] metron-indexing  SUCCESS [ 
11.529 s]
[INFO] metron-solr  SUCCESS [ 
13.183 s]
[INFO] metron-pcap  SUCCESS [  
0.785 s]
[INFO] metron-parsers . SUCCESS [ 
48.027 s]
[INFO] metron-pcap-backend  SUCCESS [ 
29.235 s]
[INFO] metron-data-management . SUCCESS [01:11 
min]
[INFO] metron-api . SUCCESS [ 
26.331 s]
[INFO] metron-management .. SUCCESS [ 
39.091 s]
[INFO] elasticsearch-shaded ... SUCCESS [  
5.547 s]
[INFO] metron-elasticsearch ... SUCCESS [ 
41.378 s]
[INFO] metron-deployment .. SUCCESS [  
0.000 s]
[INFO] Metron Ambari Management Pack .. SUCCESS [  
0.148 s]
[INFO] metron-docker .. SUCCESS [  
2.782 s]
[INFO] 

[INFO] BUILD SUCCESS
[INFO] 

[INFO] Total time: 11:05 min
[INFO] Finished at: 2017-02-26T00:05:34-05:00
[INFO] Final Memory: 112M/2199M
[INFO] 

0:05 ottofowler@Winterfell 
/Users/ottofowler/src/apache/work/incubator-metron-pr-466
% git status
On branch pr-466
nothing to commit, working tree clean




+1


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #467: METRON-743: Sort the files when reading results...

2017-02-25 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/467
  
There are two things here I *think*

1. The test assumptions and the failure on some platforms ( if this is 
indeed the problem )
2. What this means for the real use of the pcap query system

I think we can address the test first, and may have to discuss the 2.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #467: METRON-743: Sort the files when reading results...

2017-02-25 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/467
  
What are the performance penalties of doing this?

Part of the discussion in  
[HADOOP-12009](https://issues.apache.org/jira/browse/HADOOP-12009) that lead to 
the clarification of this behavior in the spec was about why they don't do this 
themselves for the performance penalty.

Could you get OOM errors or other issues running large queries that would 
have worked before?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #466: METRON-742: Generated code for profile window s...

2017-02-25 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/466
  
So - the test is - build without changing anything after clone, and there 
should not be shown in git status right?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #466: METRON-742: Generated code for profile window s...

2017-02-25 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/466
  
Does building or running the tests have anything to do with it?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #468: METRON-744: Allow Stellar functions to be loade...

2017-03-01 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/468
  
Run the free up space script


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #436: METRON-671: Refactor existing Ansible deploymen...

2017-03-02 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/436
  
 ansible-playbook -v playbooks/metron_build.yml  
Using 
/Users/ottofowler/src/apache/forks/incubator-metron/metron-deployment/ansible.cfg
 as config file
 [WARNING]: provided hosts list is empty, only localhost is available

 __ 
< PLAY >
 -- 
\   ^__^
 \  (oo)\___
(__)\   )\/\
||w |
|| ||

skipping: no hosts matched
  
< PLAY RECAP >
  
\   ^__^
 \  (oo)\___
(__)\   )\/\
||w |
|| ||



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #436: METRON-671: Refactor existing Ansible deploymen...

2017-03-02 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/436
  
Do I have to create an inventory with my local machine name?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #436: METRON-671: Refactor existing Ansible deploymen...

2017-03-02 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/436
  
I want to run the playbook to just build the rpm's, not deploy.  So just 
metron_build


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #436: METRON-671: Refactor existing Ansible deploymen...

2017-03-02 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/436
  
How are you running the playbook?  I cannot get it to execute


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #436: METRON-671: Refactor existing Ansible deploymen...

2017-03-02 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/436
  
can you share your command line?  Do you run it from /playbooks?  does you 
-i an inventory?  Did you copy or create an ansible.cfg?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #436: METRON-671: Refactor existing Ansible deploymen...

2017-03-02 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/436
  
I need to run the playbook though. 
It doesn't match any hosts


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #436: METRON-671: Refactor existing Ansible deploymen...

2017-03-02 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/436
  
ansible-playbook -v -i "localhost," -c local playbooks/metron_build.yml

now it is running and i'll see about the errors



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #436: METRON-671: Refactor existing Ansible deploymen...

2017-03-02 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/436
  
Maybe we should add that line to the doc or create a script??


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #436: METRON-671: Refactor existing Ansible deploymen...

2017-03-02 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/436
  
Well, if we don't want to put deployment things with the src, then ansible 
is a more flexible and easier to use tool for certain tasks too. But we will 
talk about it when I get it working


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #436: METRON-671: Refactor existing Ansible de...

2017-02-27 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/436#discussion_r103235131
  
--- Diff: metron-deployment/roles/kibana/README.md ---
@@ -1,35 +0,0 @@
-Kibana 4
--- End diff --

Is this documented anywhere else?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #436: METRON-671: Refactor existing Ansible de...

2017-02-27 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/436#discussion_r103238671
  
--- Diff: metron-deployment/roles/kibana/README.md ---
@@ -1,35 +0,0 @@
-Kibana 4
--- End diff --

The file I commented was the readme that documented how to add or modify 
the kibana page template


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #436: METRON-671: Refactor existing Ansible de...

2017-02-27 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/436#discussion_r103239678
  
--- Diff: metron-deployment/roles/java_jdk/defaults/main.yml ---
@@ -15,4 +15,4 @@
 #  limitations under the License.
 #
 ---
--- End diff --

Is there a reason not to go to the latest ( _121 ) if we are going to 
update?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #271: METRON-449 JSONMapParser should unfold maps to ...

2016-09-26 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/271
  
Never mind - just found the field name converter


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #271: METRON-449 JSONMapParser should unfold maps to ...

2016-09-26 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/271
  
@cestella , from looking at the ES templates etc, it seems that ':' is used 
as the name separator and not '.'.  Should the the unfolding not use the same?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #270: METRON-449 - JSON Parser should unfold nested m...

2016-09-24 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/270
  
I don't think I should be carrying the other commits.  I didn't rebase.  
I'll redo


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #270: METRON-449 - JSON Parser should unfold n...

2016-09-24 Thread ottobackwards
Github user ottobackwards closed the pull request at:

https://github.com/apache/incubator-metron/pull/270


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #271: METRON-449 JSONMapParser should unfold m...

2016-09-24 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/271

METRON-449 JSONMapParser should unfold maps to arbitrary depths

The JSON Parser currently only unfolds maps at the root level.  The parser 
would support a wider range of sources is it supported unfolding maps at any 
depth of the document.

METRON-449 adds a recursive function to unfold Maps as they are encountered 
when parsing.  A new function was added because the enum lambdas cannot 
reference themselves.

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-449

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/271.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #271


commit b5360fff99620d8b6806e1e0fa382b292fa56b8c
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-09-24T13:53:31Z

METRON-449 JSONMapParser should unfold maps to arbitrary depths




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #284: METRON-474 - fix vagrant ansible default...

2016-09-29 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/284

METRON-474 - fix vagrant ansible defaults for quick and full

Added defaults to match the run.sh parameters and removed the run.sh files. 
 Added a mention in the readmes as well.

Now, instead of running run.sh and having to add parameters to vagrant 
provision, in both quick and full simply running vagrant up and vagrant 
provision will maintain the correct parameters.

Tested by executing vagrant up and provision, vagrant ssh, ambari login

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-474

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/284.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #284






---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #292: METRON-171 add .class to .gitignore

2016-10-05 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/292

METRON-171 add .class to .gitignore

Add .class files to .gitignore

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-171

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/292.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #292


commit ab74b2cf223787d8d5f6a3c84be88fe815478b34
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-05T13:42:04Z

METRON-171 add .class to .gitignore




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #293: METRON-473 Add LENGTH() To Stellar

2016-10-05 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/293

METRON-473 Add LENGTH() To Stellar

Add LENGTH to Stellar string functions and unit tests.

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-473

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/293.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #293


commit 7aaa5d0cd08ae0861601ff2a763f45c71d70dbce
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-05T14:23:50Z

METRON-473 Add LENGTH() function for getting the length of strings to 
Stellar dsl functions




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #284: METRON-474 - fix vagrant ansible default...

2016-10-04 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/284#discussion_r81776066
  
--- Diff: metron-deployment/vagrant/quick-dev-platform/README.md ---
@@ -5,7 +5,7 @@ This project fully automates the provisioning and 
deployment of Apache Metron an
 
 This image is designed for quick deployment of a single node Metron 
cluster running on Virtualbox.  This platform is ideal for use by Metron 
developers.  It uses a base image that has been pre-loaded with Ambari and HDP.
 
-Metron is composed of many components and installing all of these on a 
single host, especially a virtualized one, will greatly stress the resources of 
the host. The host will require at least 8 GB of RAM and a fair amount of 
patience. It is highly recommended that you shut down all unnecessary services.
+Metron is composed of many components and installing all of these on a 
single host, especially a virtualized one, will greatly stress the resources of 
the host. The host will require at least 8 GB of RAM and a fair amount of 
patience. It is highly recommended that you shut down all unnecessary services. 
 To that end the vagrant file configuration defaults to disabling solr and yaf.
--- End diff --

Done.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/293
  
@mmiklavc I had seen that.  The tests in StellarTests test the compiler and 
the variable resolution etc as well is my point.  It is worth having both.  If 
both were done from the start, maybe  METRON-439 doesn't get through


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #296: METRON-439: Stellar : IS_EMPTY(host) throws exc...

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/296
  
OK, if I change my functions to not throw then it works.  This doesn't seem 
right to me, but it may be something to do with why the tests are run that way.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/293
  
OK I have it in.  Here is the thing that I found,  I know there is a pull 
about fixing IS_EMPTY from throwing exceptions - and I had to take that same 
return 0 approach instead of throwing.  IS_EMPTY did NOT have a test in 
StellarTests, so it was never being tested through the stellar variable 
resolver, validation, parser etc.  If it had had a test there ( using the run() 
as implemented in the test ) it never would have been committed, because it 
NEVER works, no matter what you pass it as originally implemented with the 
IllegalStateExceptions.  This is because the validate calls down to the apply 
with a specifically null argument which triggers the exception.
So, a couple of things:

- every stellar function needs to be tested through the whole stellar 
framework and not just on top of StellarFunction.apply()
- why would validate call parse which calls apply?  Is that the way it is 
at runtime?  Does apply always get called twice?  Is the test harness wrong?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #296: METRON-439: Stellar : IS_EMPTY(host) throws exc...

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/296
  
I'm working on making LENGTH work like IS_EMPTY.  I can't get either one to 
work as both are failing validation.  There is no StellarTest for IS_EMPTY ( I 
have added one to check if it is just my code that is failing ).  Can you one 
and try it there an make sure it works all the way through the Stellar parse 
and variable resolve?
ParseException: Unable to parse IS_EMPTY(foo): Unable to execute: IS_EMPTY 
expects a collection or a string

This is when calling with
`String query = "IS_EMPTY(foo);
 Asser.assertEquals(true,run(query,ImmutableMap.of("foo",""));
`


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/293#discussion_r82259618
  
--- Diff: 
metron-platform/metron-common/src/test/java/org/apache/metron/common/stellar/StellarTest.java
 ---
@@ -30,9 +30,7 @@
 import org.reflections.Reflections;
 import org.reflections.util.ConfigurationBuilder;
 
-import java.util.HashMap;
-import java.util.HashSet;
-import java.util.Map;
+import java.util.*;
--- End diff --

I did not actually change this on purpose, I'll fix


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/293
  
I took this jira to get some start of an idea about Stellar, and after 
debugging through it to track down to exitVariable to find the argument 
resolution and then back up to the validate x->null I would say I got what I 
bargained for.

I am not sure how I would answer your question on validation, I don't know 
Stellar well enough.  My experience and intuition tells me that running the 
'execute' and using an exception or error case as validation is not very 
efficient at runtime, if in fact this is what happens at runtime as well.  
Better to have real metadata on the function and just validating the metadata 
and they syntax of the query I would think.   *A logical/runtime error does not 
mean an invalid expression*.  This method is in effect equating them which I 
think is incorrect ( unless I am mistaking the intent of validate()).




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/293
  
It would make a nice little POC -


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/293
  
ok, as above, I'm not sure about x->null to do that, but I am the noob here


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/293
  
@cestella I can do that.  Should I move LENGTH to DataStructureFunctions 
then?
Also - I notice that IS_EMPTY throws IllegalStateExceptions instead of 
returning null, is that how no-var should be handled?  In the String functions 
they return null


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #299: METRON-425 Stellar transformation fails ...

2016-10-06 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/299

METRON-425 Stellar transformation fails to handle special characters

The issue is that per our grammar the arithmetic and comparison operators 
need to be escaped to be used as literals.

I have added a unit test to the system for this case ( for field 
transformations ).
I have also taken a stab at updating the readme.md.  I do not thing the 
readme is correct though.  It may need to be written out more better by someone 
who writes good.

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-425

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/299.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #299


commit ac2ffc4d4c5c9f233e3629b5884b0e0073646823
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-06T22:31:04Z

METRON-425 add unit test and readme change about escaping literals in 
stellar statements




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #299: METRON-425 Stellar transformation fails to hand...

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/299
  
So - based on 
`identifier_operand : (TRUE | FALSE) # LogicalConst
   | arithmetic_expr #ArithmeticOperands
   | STRING_LITERAL # StringLiteral
   | list_entity #List
   | map_entity #MapConst
   | NULL #NullConst
   | EXISTS LPAREN IDENTIFIER RPAREN #ExistsFunc
   | LPAREN conditional_expr RPAREN#condExpr_paren
   ;`

Anything that can be completely expressed from this list will work.  TRUE 
and FALSE can, but NOT um, can not.

It is not random.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/293#discussion_r82218396
  
--- Diff: 
metron-platform/metron-common/src/main/java/org/apache/metron/common/dsl/functions/StringFunctions.java
 ---
@@ -222,4 +222,16 @@ public Object apply(List args) {
   return null;
 }
   }
+
+  @Stellar( name="LENGTH"
+  , description = "Returns the length of a string"
+  , params = { "input - String" }
+  , returns = "String"
--- End diff --

No - I need to fix that.  I started with the TO_UPPER def. to make sure I 
got it right and need to change that.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/293#discussion_r82218813
  
--- Diff: 
metron-platform/metron-common/src/test/java/org/apache/metron/common/stellar/StellarTest.java
 ---
@@ -285,6 +285,18 @@ public void testHappyPath() {
   }
 
   @Test
+  public void testLength(){
+String query = "LENGTH(foo)";
+Assert.assertEquals(5, run(query,ImmutableMap.of("foo","abcde")));
+  }
+
+  @Test
--- End diff --

I will fix - see my comment above about how to test


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #293: METRON-473 Add LENGTH() To Stellar

2016-10-06 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/293#discussion_r82218691
  
--- Diff: 
metron-platform/metron-common/src/test/java/org/apache/metron/common/stellar/StellarTest.java
 ---
@@ -285,6 +285,18 @@ public void testHappyPath() {
   }
 
   @Test
--- End diff --

So, I was going to make a test passing in NULL, but the Immutable map will 
not take nulls, can you clarify how you would test this?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #261: METRON-434: JSON Parser

2016-09-21 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/261
  
Casey, would you feel about adding in recursion, such that nested maps will 
be unfolded?
I have that working.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #261: METRON-434: JSON Parser

2016-09-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/261
  
No problem - do you require a jira?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #261: METRON-434: JSON Parser

2016-09-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/261
  
Should I open a new jira and do a PR?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #261: METRON-434: JSON Parser

2016-09-22 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/261
  
METRON-449



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #261: METRON-434: JSON Parser

2016-09-20 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/261
  
Is it correct that multiple separate instances of this parser ( or any 
parser ) could be configured by adding multiple zookeeper jsons with separate 
kafka topics?


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #279: METRON-466: Full Dev Platform build some...

2016-09-28 Thread ottobackwards
Github user ottobackwards commented on a diff in the pull request:

https://github.com/apache/incubator-metron/pull/279#discussion_r80999009
  
--- Diff: metron-deployment/inventory/quick-dev-platform/group_vars/all ---
@@ -0,0 +1,95 @@
+#
+#  Licensed to the Apache Software Foundation (ASF) under one or more
+#  contributor license agreements.  See the NOTICE file distributed with
+#  this work for additional information regarding copyright ownership.
+#  The ASF licenses this file to You under the Apache License, Version 2.0
+#  (the "License"); you may not use this file except in compliance with
+#  the License.  You may obtain a copy of the License at
+#
+#  http://www.apache.org/licenses/LICENSE-2.0
+#
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS,
+#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#  See the License for the specific language governing permissions and
+#  limitations under the License.
+#
+
+# which services should be started?
+services_to_start:
+  - mysql
+  - elasticsearch
+  - pcap-service
+  - kibana
+  - snort
+  - snort-logs
+  - bro
+  - pcap-replay
+  - bro-parser
+  - snort-parser
+  - enrichment
+  - indexing
--- End diff --

For what it's worth that is a good idea.  Maybe there could be some 
'special' scripts or tools available for that configuration ( things you would 
want while developing a parser and stellar rules etc )


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #283: METRON-472: add runAgain.sh to handle a ...

2016-09-28 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/283

METRON-472: add runAgain.sh to handle a proper vagrant provision

When you fail after running run.sh in quickdev you will be told to run 
vagrant provision... but what you really want to do is run vagrant provision 
with the same parameters that you used for vagrant up inside run.sh.

runAgain.sh has that.



You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-472

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/283.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #283


commit 820045a68bf8ff7c020fbe3986cbbe45cdaf803b
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-09-29T04:26:22Z

METRON-472: add runAgain.sh to handle a proper vagrant provision after a 
run.sh failure




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #283: METRON-472: add runAgain.sh to handle a proper ...

2016-09-30 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/283
  
No you are right
I thought I closed the pr, I guess I did not.
Sorry


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #325: METRON-512 up default junit to 4.12

2016-10-25 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/325

METRON-512 up default junit to 4.12

"Global default JUnit version is 4.4. It would be nice to update this to 
4.12 and expose newer JUnit featues. Existing pom files should be updated - 
some are pointing to the version in an ad-hoc fashion rather than using the 
global version."


full build and tests passing

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-512

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/325.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #325


commit cae270288c32824fc256d5155752e792e7fd16ff
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-26T02:54:51Z

METRON-512 up default junit t0 4.12, cleanup references to use global




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #329: METRON-148 compress logs with logrotate

2016-10-27 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/329
  
kicking travis


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #329: METRON-148 compress logs with logrotate

2016-10-27 Thread ottobackwards
Github user ottobackwards closed the pull request at:

https://github.com/apache/incubator-metron/pull/329


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #329: METRON-148 compress logs with logrotate

2016-10-27 Thread ottobackwards
GitHub user ottobackwards reopened a pull request:

https://github.com/apache/incubator-metron/pull/329

METRON-148 compress logs with logrotate

Add compress configuration for logrotate.d/ configurations

Tested using the logrotate -f /etc/logrotate.d/metron-* commands

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-148

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/329.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #329


commit b44146cfceb542fbeed4e812a8fb9a62fa29bfbe
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-27T01:50:13Z

METRON-148 compress logs with logrotate




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #318: METRON-495: Upgrade Storm to 1.0.x

2016-10-28 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/318
  
I think this monit timeout issue is part of the problem on low resource 
machines, and with 'zombie' storm threads being left behind


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #318: METRON-495: Upgrade Storm to 1.0.x

2016-10-28 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/318
  
Are there instructions for doing either of those things?



---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron issue #330: Metron 506 - Add Otto Fowler to committers

2016-10-28 Thread ottobackwards
Github user ottobackwards commented on the issue:

https://github.com/apache/incubator-metron/pull/330
  
Kicking travis


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #330: Metron 506 - Add Otto Fowler to committe...

2016-10-28 Thread ottobackwards
GitHub user ottobackwards opened a pull request:

https://github.com/apache/incubator-metron/pull/330

Metron 506 - Add Otto Fowler to committers

Add Otto Fowler to committers list on main site

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-506

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/330.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #330


commit 4c0426a7ecc1d0e26837b8016f3432ded0009783
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-17T19:54:23Z

added Otto Fowler to commiters

commit 401ece493ffc753cc8c35afcb945f6cd9eec9a66
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-22T02:45:17Z

Merge branch 'master' of https://github.com/apache/incubator-metron into 
METRON-506

commit c98d11cc0cc0594f4465fd5cc4cf1358f0cff3a0
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-28T16:00:12Z

merge remote tracking branch apache master




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


[GitHub] incubator-metron pull request #330: Metron 506 - Add Otto Fowler to committe...

2016-10-28 Thread ottobackwards
GitHub user ottobackwards reopened a pull request:

https://github.com/apache/incubator-metron/pull/330

Metron 506 - Add Otto Fowler to committers

Add Otto Fowler to committers list on main site

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/ottobackwards/incubator-metron METRON-506

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/incubator-metron/pull/330.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #330


commit 4c0426a7ecc1d0e26837b8016f3432ded0009783
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-17T19:54:23Z

added Otto Fowler to commiters

commit 401ece493ffc753cc8c35afcb945f6cd9eec9a66
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-22T02:45:17Z

Merge branch 'master' of https://github.com/apache/incubator-metron into 
METRON-506

commit c98d11cc0cc0594f4465fd5cc4cf1358f0cff3a0
Author: Otto Fowler <ofow...@industrialdefender.com>
Date:   2016-10-28T16:00:12Z

merge remote tracking branch apache master




---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---


  1   2   3   4   >