[jira] [Commented] (METRON-227) Add Time-Based Flushing to Writer Bolt

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15567231#comment-15567231 ] ASF GitHub Bot commented on METRON-227: --- Github user mattf-horton commented on the issue:

[jira] [Commented] (METRON-363) Fix Cisco ASA Parser

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-363?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15567065#comment-15567065 ] ASF GitHub Bot commented on METRON-363: --- GitHub user kylerichardson reopened a pull request:

[jira] [Commented] (METRON-363) Fix Cisco ASA Parser

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-363?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15567002#comment-15567002 ] ASF GitHub Bot commented on METRON-363: --- Github user kylerichardson closed the pull request at:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566974#comment-15566974 ] ASF GitHub Bot commented on METRON-424: --- GitHub user ottobackwards reopened a pull request:

[jira] [Comment Edited] (METRON-263) Configuration push should validate JSON prior to pushing to Zookeeper

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-263?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566687#comment-15566687 ] Nick Allen edited comment on METRON-263 at 10/11/16 9:38 PM: - I would think we

[jira] [Commented] (METRON-263) Configuration push should validate JSON prior to pushing to Zookeeper

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-263?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566687#comment-15566687 ] Nick Allen commented on METRON-263: --- I would think we would want to mimic what the

[jira] [Commented] (METRON-263) Configuration push should validate JSON prior to pushing to Zookeeper

2016-10-11 Thread Otto Fowler (JIRA)
[ https://issues.apache.org/jira/browse/METRON-263?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566657#comment-15566657 ] Otto Fowler commented on METRON-263: So it is enough to verify that they are valid json? I will work

[jira] [Issue Comment Deleted] (METRON-263) Configuration push should validate JSON prior to pushing to Zookeeper

2016-10-11 Thread Otto Fowler (JIRA)
[ https://issues.apache.org/jira/browse/METRON-263?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Otto Fowler updated METRON-263: --- Comment: was deleted (was: Valid in what way? Syntactically? Logically?) > Configuration push should

[jira] [Commented] (METRON-363) Fix Cisco ASA Parser

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-363?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566633#comment-15566633 ] ASF GitHub Bot commented on METRON-363: --- Github user nickwallen commented on the issue:

[jira] [Comment Edited] (METRON-403) Bro elasticsearch bulk index item fails when DNS response includes CNAME

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-403?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566592#comment-15566592 ] Nick Allen edited comment on METRON-403 at 10/11/16 8:59 PM: - The template for

[jira] [Commented] (METRON-403) Bro elasticsearch bulk index item fails when DNS response includes CNAME

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-403?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566599#comment-15566599 ] Nick Allen commented on METRON-403: --- The current Metron default dashboard does not make use of this

[jira] [Commented] (METRON-403) Bro elasticsearch bulk index item fails when DNS response includes CNAME

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-403?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566592#comment-15566592 ] Nick Allen commented on METRON-403: --- The template for the Bro index is constructed expecting that the

[jira] [Commented] (METRON-485) Storm worker processes not properly terminating on restart

2016-10-11 Thread Otto Fowler (JIRA)
[ https://issues.apache.org/jira/browse/METRON-485?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566582#comment-15566582 ] Otto Fowler commented on METRON-485: Were you able to reproduce with the -w parameter? > Storm worker

[jira] [Commented] (METRON-293) indexingBolt errors out for bro logs having IPV6 address or FQDNs

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-293?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566575#comment-15566575 ] Nick Allen commented on METRON-293: --- METRON-403 covers the FQDN scenario > indexingBolt errors out for

[jira] [Assigned] (METRON-293) indexingBolt errors out for bro logs having IPV6 address or FQDNs

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-293?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Nick Allen reassigned METRON-293: - Assignee: Nick Allen > indexingBolt errors out for bro logs having IPV6 address or FQDNs >

[jira] [Assigned] (METRON-403) Bro elasticsearch bulk index item fails when DNS response includes CNAME

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-403?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Nick Allen reassigned METRON-403: - Assignee: Nick Allen > Bro elasticsearch bulk index item fails when DNS response includes CNAME

[jira] [Commented] (METRON-363) Fix Cisco ASA Parser

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-363?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566368#comment-15566368 ] ASF GitHub Bot commented on METRON-363: --- Github user kylerichardson commented on the issue:

[jira] [Commented] (METRON-496) Field transformations are applied after parser validation

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566329#comment-15566329 ] ASF GitHub Bot commented on METRON-496: --- Github user cestella commented on the issue:

[jira] [Commented] (METRON-496) Field transformations are applied after parser validation

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566323#comment-15566323 ] ASF GitHub Bot commented on METRON-496: --- Github user ottobackwards commented on the issue:

[jira] [Commented] (METRON-496) Field transformations are applied after parser validation

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566247#comment-15566247 ] ASF GitHub Bot commented on METRON-496: --- Github user cestella commented on the issue:

[jira] [Commented] (METRON-496) Field transformations are applied after parser validation

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566177#comment-15566177 ] ASF GitHub Bot commented on METRON-496: --- Github user ottobackwards commented on the issue:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566128#comment-15566128 ] ASF GitHub Bot commented on METRON-424: --- GitHub user ottobackwards reopened a pull request:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566127#comment-15566127 ] ASF GitHub Bot commented on METRON-424: --- Github user ottobackwards closed the pull request at:

[jira] [Commented] (METRON-488) Snort should use a proper CSV implementation

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-488?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566102#comment-15566102 ] ASF GitHub Bot commented on METRON-488: --- Github user asfgit closed the pull request at:

[jira] [Commented] (METRON-482) Add logging to GrokParser to indicate supplied TimeZone

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-482?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566090#comment-15566090 ] ASF GitHub Bot commented on METRON-482: --- Github user asfgit closed the pull request at:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566095#comment-15566095 ] ASF GitHub Bot commented on METRON-424: --- Github user cestella commented on the issue:

[jira] [Commented] (METRON-496) Field transformations are applied after parser validation

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-496?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566081#comment-15566081 ] ASF GitHub Bot commented on METRON-496: --- GitHub user cestella opened a pull request:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15566004#comment-15566004 ] ASF GitHub Bot commented on METRON-424: --- Github user ottobackwards commented on the issue:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565988#comment-15565988 ] ASF GitHub Bot commented on METRON-424: --- Github user nickwallen commented on the issue:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565980#comment-15565980 ] ASF GitHub Bot commented on METRON-424: --- Github user cestella commented on the issue:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565971#comment-15565971 ] ASF GitHub Bot commented on METRON-424: --- Github user JonZeolla commented on the issue:

[jira] [Commented] (METRON-482) Add logging to GrokParser to indicate supplied TimeZone

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-482?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565763#comment-15565763 ] ASF GitHub Bot commented on METRON-482: --- Github user mmiklavc commented on the issue:

[jira] [Created] (METRON-496) Field transformations are applied after parser validation

2016-10-11 Thread Casey Stella (JIRA)
Casey Stella created METRON-496: --- Summary: Field transformations are applied after parser validation Key: METRON-496 URL: https://issues.apache.org/jira/browse/METRON-496 Project: Metron Issue

[jira] [Commented] (METRON-482) Add logging to GrokParser to indicate supplied TimeZone

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-482?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565736#comment-15565736 ] ASF GitHub Bot commented on METRON-482: --- Github user justinleet commented on the issue:

[jira] [Commented] (METRON-326) Error Handling in ElasticsearchWriter

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565705#comment-15565705 ] ASF GitHub Bot commented on METRON-326: --- Github user asfgit closed the pull request at:

[jira] [Commented] (METRON-227) Add Time-Based Flushing to Writer Bolt

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565677#comment-15565677 ] ASF GitHub Bot commented on METRON-227: --- Github user mmiklavc commented on the issue:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565676#comment-15565676 ] ASF GitHub Bot commented on METRON-424: --- GitHub user ottobackwards opened a pull request:

[jira] [Commented] (METRON-424) Stellar fieldValidation "IP" does not support list values

2016-10-11 Thread Otto Fowler (JIRA)
[ https://issues.apache.org/jira/browse/METRON-424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565657#comment-15565657 ] Otto Fowler commented on METRON-424: I have a PR for this, however I'm not sure if we should allow a

[jira] [Commented] (METRON-439) Stellar : IS_EMPTY(host) throws exception

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-439?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565654#comment-15565654 ] ASF GitHub Bot commented on METRON-439: --- Github user asfgit closed the pull request at:

[jira] [Commented] (METRON-473) Add LENGTH function to Stellar String functions

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-473?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565640#comment-15565640 ] ASF GitHub Bot commented on METRON-473: --- Github user asfgit closed the pull request at:

[jira] [Commented] (METRON-371) Errors seen in enrichment bolts for squid logs

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-371?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565636#comment-15565636 ] ASF GitHub Bot commented on METRON-371: --- Github user asfgit closed the pull request at:

[jira] [Commented] (METRON-421) Make Stellar Profiler Client API Accessible in Parser and Enrichment Topologies

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-421?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565618#comment-15565618 ] ASF GitHub Bot commented on METRON-421: --- Github user asfgit closed the pull request at:

[jira] [Commented] (METRON-432) Fix pcap field resolver to return object instead of string value

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565602#comment-15565602 ] ASF GitHub Bot commented on METRON-432: --- Github user mmiklavc commented on the issue:

[jira] [Assigned] (METRON-492) Run metron_common build check as local_action

2016-10-11 Thread David M. Lyle (JIRA)
[ https://issues.apache.org/jira/browse/METRON-492?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] David M. Lyle reassigned METRON-492: Assignee: David M. Lyle > Run metron_common build check as local_action >

[jira] [Commented] (METRON-492) Run metron_common build check as local_action

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-492?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565517#comment-15565517 ] ASF GitHub Bot commented on METRON-492: --- Github user asfgit closed the pull request at:

[jira] [Commented] (METRON-432) Fix pcap field resolver to return object instead of string value

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565474#comment-15565474 ] ASF GitHub Bot commented on METRON-432: --- Github user cestella commented on the issue:

[jira] [Commented] (METRON-474) Vagrant's default behavior should work as expected.

2016-10-11 Thread David M. Lyle (JIRA)
[ https://issues.apache.org/jira/browse/METRON-474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565501#comment-15565501 ] David M. Lyle commented on METRON-474: -- Thanks [~ottobackwards]! Great stuff. > Vagrant's default

[jira] [Commented] (METRON-495) Upgrade Storm to 1.0.x

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-495?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565480#comment-15565480 ] Nick Allen commented on METRON-495: --- We are also behind on the Kafka version that we build against

[jira] [Commented] (METRON-439) Stellar : IS_EMPTY(host) throws exception

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-439?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565479#comment-15565479 ] ASF GitHub Bot commented on METRON-439: --- Github user cestella commented on the issue:

[jira] [Commented] (METRON-482) Add logging to GrokParser to indicate supplied TimeZone

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-482?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565473#comment-15565473 ] ASF GitHub Bot commented on METRON-482: --- Github user dlyle65535 commented on the issue:

[jira] [Commented] (METRON-473) Add LENGTH function to Stellar String functions

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-473?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565472#comment-15565472 ] ASF GitHub Bot commented on METRON-473: --- Github user cestella commented on the issue:

[jira] [Commented] (METRON-495) Upgrade Storm to 1.0.x

2016-10-11 Thread Nick Allen (JIRA)
[ https://issues.apache.org/jira/browse/METRON-495?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565469#comment-15565469 ] Nick Allen commented on METRON-495: --- While you are in there, it might be good to correct the HBase

[jira] [Commented] (METRON-326) Error Handling in ElasticsearchWriter

2016-10-11 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/METRON-326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565465#comment-15565465 ] ASF GitHub Bot commented on METRON-326: --- Github user cestella commented on the issue:

[jira] [Commented] (METRON-293) indexingBolt errors out for bro logs having IPV6 address or FQDNs

2016-10-11 Thread David M. Lyle (JIRA)
[ https://issues.apache.org/jira/browse/METRON-293?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565415#comment-15565415 ] David M. Lyle commented on METRON-293: -- [~nsinha17] - could you split this into 2 jiras? One for the

[jira] [Commented] (METRON-474) Vagrant's default behavior should work as expected.

2016-10-11 Thread Otto Fowler (JIRA)
[ https://issues.apache.org/jira/browse/METRON-474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15565393#comment-15565393 ] Otto Fowler commented on METRON-474: Hi David, I can't change the status of this, but I think it can