[GitHub] metron issue #1268: METRON-1877: Nested IF ELSE statements can cause parse e...

2018-11-16 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1268 This looks good to me. Good catch, +1 by inspection. ---

[GitHub] metron issue #1242: METRON-1834: Migrate Elasticsearch from TransportClient ...

2018-10-26 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1242 Just chiming in here in support of taking some care around javadoc. I tend to agree that it goes stale and it can become misleading. I think the metric (and this is just personal opinion here

[GitHub] metron issue #1014: METRON-1563 : Base Stellar assign for feature branch

2018-10-26 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1014 Ok, this looks good. +1 to go to the feature branch ---

[GitHub] metron pull request #870: METRON-1364: Add an implementation of Robust PCA o...

2018-10-16 Thread cestella
Github user cestella closed the pull request at: https://github.com/apache/metron/pull/870 ---

[GitHub] metron issue #1175: METRON-1750 Metron Parser for valid RFC 5424 Syslog mess...

2018-09-28 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1175 This looks good to me; I'm +1 on it by inspection. Good job, otto ;) ---

[GitHub] metron pull request #1171: METRON-1740 make parser support CONFIG and SYSTEM...

2018-08-29 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1171#discussion_r213704549 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/README.md --- @@ -0,0 +1,15

[GitHub] metron issue #1178: METRON-1757 Storm Profiler Serialization Exception

2018-08-29 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1178 This is really good work, @nickwallen. I'm +1 by inspection here, pending @JonZeolla's +1 ---

[GitHub] metron issue #1176: METRON-1751 Storm Profiler dies when consuming null mess...

2018-08-29 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1176 +1 by inspection pending full-dev validation. ---

[GitHub] metron issue #1134: METRON-1696: Create the HDFS directory for pcap sequence...

2018-08-29 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1134 Should this be closed out? ---

[GitHub] metron pull request #1175: METRON-1750 Metron Parser for valid RFC 5424 Sysl...

2018-08-29 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1175#discussion_r213670531 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/syslog/Syslog5424Parser.java --- @@ -0,0 +1,75

[GitHub] metron pull request #1175: METRON-1750 Metron Parser for valid RFC 5424 Sysl...

2018-08-29 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1175#discussion_r213669448 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/syslog/Syslog5424Parser.java --- @@ -0,0 +1,75

[GitHub] metron issue #1091: METRON-1650: Cut size of packaging docker containers

2018-07-27 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1091 This gets a +1 from me too, great job! ---

[GitHub] metron issue #1052: METRON-1604 : Add RHEL 7 power pc to OS family for the H...

2018-07-27 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1052 +1 by inspection ---

[GitHub] metron issue #1131: METRON-1694: Clean up Metron REST docs

2018-07-25 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1131 +1 by inspection ---

[GitHub] metron issue #1130: METRON-1693: Fix Pcap CLI local FS finalizer

2018-07-25 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1130 +1 by inspection. ---

[GitHub] metron issue #1128: METRON-1690: Add more context to PcapJob JobStatus

2018-07-24 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1128 +1 by inspection ---

[GitHub] metron issue #1124: METRON-1560: Update MPack to support Pcap panel

2018-07-23 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1124 +1 by inspection; this puts a nice bow on the backend. ---

[GitHub] metron issue #1125: METRON-1661: Create Pcap Query Filter endpoint

2018-07-23 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1125 +1 by inspection ---

[GitHub] metron issue #1126: METRON-1687: Upgrade the rat plugin to 0.13-SNAPSHOT

2018-07-20 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1126 Ok, I spun this up in full-dev and smoketested the UIs that these licenses touch. ---

[GitHub] metron issue #1122: METRON-1683: Fix the download progress bar in PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1122 Due to a bug in apache rat, our license checking component, it's ignoring all license checks on typescript files. I have submitted a PR to up the rat plugin version and have fixed it in m

[GitHub] metron issue #1118: METRON-1662: Adding download button

2018-07-20 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1118 Due to a bug in apache rat, our license checking component, it's ignoring all license checks on typescript files. I have submitted a PR to up the rat plugin version and have fixed it in m

[GitHub] metron issue #1121: METRON-1675: Add Pagination to PCAP

2018-07-20 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1121 Due to a bug in apache rat, our license checking component, it's ignoring all license checks on typescript files. I have submitted a PR to up the rat plugin version and have fixed it in m

[GitHub] metron issue #1119: METRON-1676: Adding date range selector to PCAP filter b...

2018-07-20 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1119 Due to a bug in apache rat, our license checking component, it's ignoring all license checks on typescript files. I have submitted a PR to up the rat plugin version and have fixed it in m

[GitHub] metron issue #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1103 I have submitted a PR to up the rat plugin version and have fixed it in master #1126, let's make sure to add license headers here for new files added in this branch though. ---

[GitHub] metron pull request #1126: METRON-1687: Upgrade the rat plugin to 0.13-SNAPS...

2018-07-20 Thread cestella
GitHub user cestella opened a pull request: https://github.com/apache/metron/pull/1126 METRON-1687: Upgrade the rat plugin to 0.13-SNAPSHOT ## Contributor Comments Due to https://issues.apache.org/jira/browse/RAT-234, the rat plugin is not checking the typescript files for

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204137924 --- Diff: metron-interface/metron-alerts/src/app/pcap/pcap-list/pcap-list.component.spec.ts --- @@ -0,0 +1,53 @@ +import { async, ComponentFixture

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204138341 --- Diff: metron-interface/metron-alerts/src/app/pcap/service/pcap.service.spec.ts --- @@ -0,0 +1,1735 @@ +import { TestBed, async, inject } from

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204138476 --- Diff: metron-interface/metron-alerts/src/app/pcap/service/pcap.service.ts --- @@ -0,0 +1,10186 @@ +import {Injectable, NgZone} from '@angular

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204137964 --- Diff: metron-interface/metron-alerts/src/app/pcap/pcap-list/pcap-list.component.ts --- @@ -0,0 +1,22 @@ +import { Component, OnInit, Input } from

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204138121 --- Diff: metron-interface/metron-alerts/src/app/pcap/pcap-packet-line/pcap-packet-line.component.spec.ts --- @@ -0,0 +1,1266 @@ +import { async

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204138294 --- Diff: metron-interface/metron-alerts/src/app/pcap/pcap-panel/pcap-panel.component.ts --- @@ -0,0 +1,65 @@ +import { Component, OnInit, Input

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204137868 --- Diff: metron-interface/metron-alerts/src/app/pcap/pcap-filters/pcap-filters.component.ts --- @@ -0,0 +1,24 @@ +import { Component, OnInit, Input

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204138196 --- Diff: metron-interface/metron-alerts/src/app/pcap/pcap-packet/pcap-packet.component.ts --- @@ -0,0 +1,22 @@ +import { Component, OnInit, Input

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204137821 --- Diff: metron-interface/metron-alerts/src/app/pcap/pcap-filters/pcap-filters.component.spec.ts --- @@ -0,0 +1,29 @@ +import { async

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204138081 --- Diff: metron-interface/metron-alerts/src/app/pcap/pcap-packet-line/pcap-packet-line.component.ts --- @@ -0,0 +1,38 @@ +import { Component, OnInit

[GitHub] metron pull request #1103: METRON-1671: Initial PCAP UI

2018-07-20 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1103#discussion_r204138244 --- Diff: metron-interface/metron-alerts/src/app/pcap/pcap-panel/pcap-panel.component.spec.ts --- @@ -0,0 +1,51 @@ +import { async, ComponentFixture

[GitHub] metron issue #1054: METRON-1606 Add capability to wrap json message as entit...

2018-07-20 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1054 +1 by inspection ---

[GitHub] metron issue #1123: METRON-1685: Retrieve Pcap results in raw binary format

2018-07-20 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1123 +1 by inspection, this looks very clean. ---

[GitHub] metron pull request #1120: METRON-1638: Retrieve Pcap results in pdml format

2018-07-19 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1120#discussion_r203843748 --- Diff: metron-deployment/packaging/docker/rpm-docker/SPECS/metron.spec --- @@ -419,6 +419,7 @@ This package installs the Metron Rest %{metron_home

[GitHub] metron issue #1120: METRON-1638: Retrieve Pcap results in pdml format

2018-07-19 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1120 +1 by inspection, this looks good. ---

[GitHub] metron pull request #1120: METRON-1638: Retrieve Pcap results in pdml format

2018-07-19 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1120#discussion_r203803381 --- Diff: metron-interface/pom.xml --- @@ -25,6 +25,9 @@ Interfaces for Metron https://metron.apache.org

[GitHub] metron pull request #1120: METRON-1638: Retrieve Pcap results in pdml format

2018-07-19 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1120#discussion_r203801015 --- Diff: metron-interface/metron-rest/src/main/scripts/pcap_to_pdml.sh --- @@ -0,0 +1,19 @@ +#!/bin/bash +# +# Licensed to the Apache Software

[GitHub] metron pull request #1120: METRON-1638: Retrieve Pcap results in pdml format

2018-07-19 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1120#discussion_r203800738 --- Diff: metron-interface/pom.xml --- @@ -25,6 +25,9 @@ Interfaces for Metron https://metron.apache.org

[GitHub] metron issue #1100: METRON-1659: The platform-info.sh should check for the v...

2018-07-19 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1100 Hey @JonZeolla can you close this one manually, for some reason the automatic close didn't work when I committed this. ---

[GitHub] metron issue #1106: METRON-1672: Add metron-alerts's UI unit tests to travis...

2018-07-19 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1106 Yeah, that makes sense. +1 by inspection, let's go to master. ---

[GitHub] metron pull request #1109: METRON-1674: Create REST endpoint for job status ...

2018-07-18 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1109#discussion_r203502396 --- Diff: metron-platform/metron-pcap/src/main/java/org/apache/metron/pcap/finalizer/PcapRestFinalizer.java --- @@ -0,0 +1,46

[GitHub] metron issue #1110: METRON-1684: Fix Markdown problems in 3rdPartyParser.md

2018-07-18 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1110 +1 by inspection ---

[GitHub] metron pull request #1108: METRON-1614: Create job status abstraction

2018-07-18 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1108#discussion_r203383057 --- Diff: metron-platform/metron-pcap/src/main/java/org/apache/metron/pcap/finalizer/PcapCliFinalizer.java --- @@ -0,0 +1,37 @@ +/** + * Licensed

[GitHub] metron pull request #1108: METRON-1614: Create job status abstraction

2018-07-18 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1108#discussion_r203383137 --- Diff: metron-platform/metron-pcap/src/main/java/org/apache/metron/pcap/finalizer/PcapRestFinalizer.java --- @@ -16,27 +16,21 @@ * limitations

[GitHub] metron pull request #1108: METRON-1614: Create job status abstraction

2018-07-18 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1108#discussion_r203381697 --- Diff: metron-platform/metron-pcap/src/main/java/org/apache/metron/pcap/finalizer/PcapFinalizerStrategies.java --- @@ -0,0 +1,42

[GitHub] metron pull request #1108: METRON-1614: Create job status abstraction

2018-07-18 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1108#discussion_r203382448 --- Diff: metron-platform/metron-pcap/src/main/java/org/apache/metron/pcap/finalizer/PcapFinalizer.java --- @@ -0,0 +1,122 @@ +/** + * Licensed

[GitHub] metron issue #1099: METRON-1657: Parser aggregation in storm

2018-07-17 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1099 Ok, so I want to capture the follow-on tasks: * Change Ambari to accept quoted parser groups * Decouple the ParserBolt from the Parse execution logic * Allow the option for intermediate

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r203115089 --- Diff: use-cases/parser_chaining/README.md --- @@ -233,3 +233,10 @@ cat ~/data.log | /usr/hdp/current/kafka-broker/bin/kafka-console-producer.sh --b

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r203052754 --- Diff: use-cases/parser_chaining/aggregated_parser_chaining_flow.xml --- @@ -0,0 +1

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r203052624 --- Diff: use-cases/parser_chaining/aggregated_parser_chaining_flow.svg --- @@ -0,0 +1,2 @@ +http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd

[GitHub] metron issue #1099: METRON-1657: Parser aggregation in storm

2018-07-17 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1099 @ottobackwards I agree, our bolts tend to do the same magic set of incantations to set up stellar. It'd be better to either try to infer that initialization where possible or to externalize

[GitHub] metron pull request #1109: METRON-1674: Create REST endpoint for job status ...

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1109#discussion_r203049598 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/utils/HDFSUtils.java --- @@ -29,6 +29,16 @@ public class

[GitHub] metron pull request #1108: METRON-1614: Create job status abstraction

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1108#discussion_r203049283 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/utils/HDFSUtils.java --- @@ -29,6 +29,16 @@ public class

[GitHub] metron pull request #1109: METRON-1674: Create REST endpoint for job status ...

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1109#discussion_r203047956 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/utils/HDFSUtils.java --- @@ -29,6 +29,16 @@ public class

[GitHub] metron pull request #1109: METRON-1674: Create REST endpoint for job status ...

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1109#discussion_r203047410 --- Diff: metron-interface/metron-rest/src/main/java/org/apache/metron/rest/config/PcapJobSupplier.java --- @@ -0,0 +1,53 @@ +/** + * Licensed to

[GitHub] metron pull request #1109: METRON-1674: Create REST endpoint for job status ...

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1109#discussion_r203046824 --- Diff: metron-interface/metron-rest-client/src/main/java/org/apache/metron/rest/model/pcap/PcapRequest.java --- @@ -17,75 +17,65

[GitHub] metron pull request #1108: METRON-1614: Create job status abstraction

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1108#discussion_r203045196 --- Diff: metron-platform/metron-job/src/main/java/org/apache/metron/job/Statusable.java --- @@ -18,20 +18,45 @@ package org.apache.metron.job

[GitHub] metron issue #1108: METRON-1614: Create job status abstraction

2018-07-17 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1108 Just pointing out, I will code review but not vote on this because I contributed to this PR in an unattributed capacity. ---

[GitHub] metron pull request #1108: METRON-1614: Create job status abstraction

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1108#discussion_r203035286 --- Diff: metron-platform/metron-job/src/main/java/org/apache/metron/job/Statusable.java --- @@ -18,20 +18,45 @@ package org.apache.metron.job

[GitHub] metron pull request #1108: METRON-1614: Create job status abstraction

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1108#discussion_r203035500 --- Diff: metron-platform/metron-job/src/test/java/org/apache/metron/job/manager/InMemoryJobManagerTest.java --- @@ -0,0 +1,192 @@ +package

[GitHub] metron pull request #1108: METRON-1614: Create job status abstraction

2018-07-17 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1108#discussion_r203037439 --- Diff: metron-interface/metron-rest-client/src/main/java/org/apache/metron/rest/model/pcap/PcapRequest.java --- @@ -17,52 +17,57

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-16 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r202817242 --- Diff: metron-platform/metron-parsers/README.md --- @@ -82,6 +82,12 @@ topology in kafka. Errors are collected with the context of the error (e.g

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-16 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r202814185 --- Diff: metron-platform/metron-parsers/README.md --- @@ -82,6 +82,12 @@ topology in kafka. Errors are collected with the context of the error (e.g

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-16 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r202813546 --- Diff: metron-platform/metron-parsers/README.md --- @@ -82,6 +82,12 @@ topology in kafka. Errors are collected with the context of the error (e.g

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-16 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r202809295 --- Diff: metron-platform/metron-parsers/README.md --- @@ -82,6 +82,12 @@ topology in kafka. Errors are collected with the context of the error (e.g

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-16 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r202805609 --- Diff: metron-platform/metron-parsers/README.md --- @@ -82,6 +82,12 @@ topology in kafka. Errors are collected with the context of the error (e.g

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-16 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r202803869 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bolt/ParserBolt.java --- @@ -182,40 +185,61 @@ public void prepare(Map

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-16 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r202801374 --- Diff: metron-platform/metron-parsers/README.md --- @@ -82,6 +82,12 @@ topology in kafka. Errors are collected with the context of the error (e.g

[GitHub] metron issue #1107: METRON-1673: Fix Javadoc errors

2018-07-16 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1107 +1 by inspection, thanks! ---

[GitHub] metron issue #1104: METRON-1670 Stellar WEEK_OF_YEAR test is locale sensitiv...

2018-07-16 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1104 +1 Great catch! ---

[GitHub] metron issue #1105: METRON-1236 Add start/stop/restart commands that execute...

2018-07-16 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1105 +1 by inspection; thanks! ---

[GitHub] metron issue #1099: METRON-1657: Parser aggregation in storm

2018-07-13 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1099 This looks good to me, I'm +1 by inspection, but I want to make sure enough time has passed so enough people can look at it. I'll hold my +1 until EOD monday. ---

[GitHub] metron issue #870: METRON-1364: Add an implementation of Robust PCA outlier ...

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/870 Thanks @JonZeolla I am planning to try to get around to cleaning this up a bit this week. I have some concerns about its interactions with the sampling stellar functions. ---

[GitHub] metron issue #1097: METRON-1656 Create KAKFA_SEEK function

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1097 +1 by inspection ---

[GitHub] metron issue #1081: METRON-1641: Enable Pcap jobs to be submitted asynchrono...

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1081 @mmiklavc can you merge and close this PR? ---

[GitHub] metron issue #1065: METRON-1620: Fixes for forensic clustering use case exam...

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1065 @mmiklavc Can we get this merged? ---

[GitHub] metron issue #1102: METRON-1660: On Solr, sorting by threat score fails

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1102 +1 by inspection ---

[GitHub] metron issue #1101: METRON-1658: Upgrade bro to 2.5.4

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1101 +1 by inspection ---

[GitHub] metron pull request #1084: METRON-1644: Support parser chaining

2018-07-10 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1084#discussion_r201448152 --- Diff: metron-platform/metron-common/src/main/java/org/apache/metron/common/message/metadata/EnvelopedRawMessageStrategy.java --- @@ -0,0 +1,146

[GitHub] metron issue #1094: METRON-1562: Enable Kerberos in REST for YARN and MR job...

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1094 +1 by inspection ---

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-10 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r201361910 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserTopologyBuilder.java --- @@ -91,14 +101,14 @@ public

[GitHub] metron pull request #1099: METRON-1657: Parser aggregation in storm

2018-07-10 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1099#discussion_r201349285 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserTopologyBuilder.java --- @@ -91,14 +101,14 @@ public

[GitHub] metron issue #1084: METRON-1644: Support parser chaining

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1084 Intermittent test failure, travis sorted now. ---

[GitHub] metron issue #1081: METRON-1641: Enable Pcap jobs to be submitted asynchrono...

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1081 +1, lgtm ---

[GitHub] metron issue #1098: METRON-1655 multiple regex args for REGEXP_MATCH

2018-07-10 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1098 +1 by inspection, this looks great! ---

[GitHub] metron pull request #1084: METRON-1644: Support parser chaining

2018-07-06 Thread cestella
GitHub user cestella reopened a pull request: https://github.com/apache/metron/pull/1084 METRON-1644: Support parser chaining ## Contributor Comments Currently we have only one layer of parsing prior to enrichment, but often real data is more complex. For instance, often data

[GitHub] metron pull request #1084: METRON-1644: Support parser chaining

2018-07-06 Thread cestella
Github user cestella closed the pull request at: https://github.com/apache/metron/pull/1084 ---

[GitHub] metron issue #1084: METRON-1644: Support parser chaining

2018-07-06 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1084 Ok, more javadocs is definitely fair. I went through the core abstractions and added javadocs. If I missed anything, let me know. ---

[GitHub] metron issue #1084: METRON-1644: Support parser chaining

2018-07-06 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1084 @ottobackwards Ok, I attempted to do that [here](https://github.com/cestella/incubator-metron/blob/c4e4786e778d5b06cd16f7faa7d3522f620fc2ba/metron-platform/metron-parsers/ParserChaining.md). Can

[GitHub] metron issue #1083: METRON-1643: Create a REGEX_ROUTING field transformation

2018-07-06 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1083 You got it [METRON-1655](https://issues.apache.org/jira/browse/METRON-1655) ---

[GitHub] metron issue #1084: METRON-1644: Support parser chaining

2018-07-06 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1084 Ok, the prerequisite tickets are merged here and this is ready for review. ---

[GitHub] metron issue #1083: METRON-1643: Create a REGEX_ROUTING field transformation

2018-07-06 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1083 I think a decent UI that would make this a hell of a lot easier, but also not embedding stellar in JSON would help a lot. Something like: ``` match { REGEXP_MATCH(pix_type, '^

[GitHub] metron pull request #1083: METRON-1643: Create a REGEX_ROUTING field transfo...

2018-07-06 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1083#discussion_r200675612 --- Diff: metron-platform/metron-parsers/README.md --- @@ -337,6 +337,28 @@ The following config will rename the fields `old_field` and

[GitHub] metron issue #1083: METRON-1643: Create a REGEX_ROUTING field transformation

2018-07-05 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1083 Sure, so the difference in the parser chaining example would be between the following # Stellar ``` "fieldTransformations" : [ { "transformat

[GitHub] metron issue #1092: METRON-1652 Document X-Pack Common Problem

2018-07-05 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/metron/pull/1092 +1 by inspection ---

  1   2   3   >