Metron docker compose fails

2018-07-04 Thread Muhammed Irshad
g" /usr/metron/$METRON_VERSION/config/enrichment.properties' returned a non-zero code: 2 ' -- Muhammed Irshad K T Senior Software Engineer +919447946359 irshadkt@gmail.com Skype : muhammed.irshad.k.t

Performance comparison between Grok and Java regex

2018-07-11 Thread Muhammed Irshad
stackoverflow <https://stackoverflow.com/questions/43222863/logstash-grok-filter-is-slower-than-java-regex-pattern-matching> question which inspired me for this post. -- Muhammed Irshad K T Senior Software Engineer +919447946359 irshadkt@gmail.com Skype : muhammed.irshad.k.t

Re: Performance comparison between Grok and Java regex

2018-07-11 Thread Muhammed Irshad
using -w option in grok to increase the > threads. > > Kevin > > On Wed, Jul 11, 2018 at 5:35 PM Muhammed Irshad > wrote: > > > Hi All, > > > > I am trying to write Java custom parser for parsing AD logs. I am > expecting > > log flow of 10 mill

Re: Performance comparison between Grok and Java regex

2018-07-11 Thread Muhammed Irshad
you to > understand. > > https://github.com/thekrakken/java-grok/blob/master/src/ > main/java/io/krakens/grok/api/Grok.java > https://github.com/thekrakken/java-grok/blob/master/src/ > main/java/io/krakens/grok/api/GrokCompiler.java > > On July 11, 2018 at 07:13:38, Muhammed

Re: Performance comparison between Grok and Java regex

2018-07-11 Thread Muhammed Irshad
pting that you are ok with the tradeoffs. > > If you have 10M mps parsing might night be your bottleneck. > > > > > > On July 11, 2018 at 11:01:19, Muhammed Irshad (irshadkt@gmail.com) > wrote: > > Otto Fowler, > > Thanks for the reply. I saw it uses sa

Re: Performance comparison between Grok and Java regex

2018-07-11 Thread Muhammed Irshad
ven a simple scanner. > Regex is not the only pattern :) > > It would also be great to see such a parser contributed back to the > community of possible, and I sure we would be happy to help maintain and > improve it in the open source. > > Simon > > > On 11 Jul 2018, at 16:

Re: Metron docker compose fails

2018-07-19 Thread Muhammed Irshad
r. > > > On July 5, 2018 at 02:26:08, Muhammed Irshad (irshadkt@gmail.com) > wrote: > > Hi All, > > I was trying to setup metron docker in my local machine for development > purpose. I tried the steps mentioned here > <https://metron.apache.org/current-book/met

Custom parser using Jackson instead of json-simple

2018-10-04 Thread Muhammed Irshad
4:42:09.850 o.a.s.d.executor Thread-12-parserBolt-executor[5 5] [ERROR] -- Muhammed Irshad K T Senior Software Engineer +919447946359 irshadkt@gmail.com Skype : muhammed.irshad.k.t

HBaseDao and IndexDao abstraction

2018-10-15 Thread Muhammed Irshad
ectory inventory, Using AD event logs being indexed via metron. Is HBaseDao can be used for this use case ? -- Muhammed Irshad K T Senior Software Engineer +919447946359 irshadkt@gmail.com Skype : muhammed.irshad.k.t

Re: HBaseDao and IndexDao abstraction

2018-10-17 Thread Muhammed Irshad
chment topology - > > https://github.com/apache/metron/tree/master/metron-platform/metron-enrichment > ...which feeds into the indexing topology, which you've already found > > Hope this helps for a start! > > Best, > Mike Miklavcic > > > On Tue, Oct 16, 2018 a

Re: Invite to Slack Channel

2018-10-22 Thread Muhammed Irshad
Some one get me also the slack channel link ? Thanks, Muhammed Irshad Q*Burst* www.qburst.com On Wed, Oct 17, 2018 at 7:33 PM Michael Miklavcic < michael.miklav...@gmail.com> wrote: > Sent > > On Wed, Oct 17, 2018 at 7:23 AM Tibor Meller > wrote: > > > Hi Guys, >

Re: HBaseDao and IndexDao abstraction

2018-10-23 Thread Muhammed Irshad
<https://metron.apache.org/current-book/index.html>. I am going to give this a try and see how it goes. Thanks a lot for Simon Elliston Ball & Metron slack channel :) On Thu, Oct 18, 2018 at 10:51 AM Muhammed Irshad wrote: > Mike, > > Thanks for replying. I had gone thro