[jira] [Created] (METRON-1761) Allow a grok statement to be applied to each line in a file.

Laurens Vets created METRON-1761: Summary: Allow a grok statement to be applied to each line in a file. Key: METRON-1761 URL: https://issues.apache.org/jira/browse/METRON-1761 Project: Metron

[jira] [Updated] (METRON-1761) Allow a grok statement to be applied to each line in a file.

[ https://issues.apache.org/jira/browse/METRON-1761?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laurens Vets updated METRON-1761: - Description: Make grok work where each line in incoming logs is a separate unit to be parsed. T

[jira] [Commented] (METRON-1292) Metron should support Apache Nifi Storm Spout

[ https://issues.apache.org/jira/browse/METRON-1292?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16244807#comment-16244807 ] Laurens Vets commented on METRON-1292: -- I can see the value of having a Storm spout

[jira] [Commented] (METRON-1292) Metron should support Apache Nifi Storm Spout

[ https://issues.apache.org/jira/browse/METRON-1292?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16250041#comment-16250041 ] Laurens Vets commented on METRON-1292: -- [~ottobackwards], aren't https://issues.apac

[jira] [Created] (METRON-1408) Upgrade from 0.4.1 to 0.4.2 fails on Alerts UI

Laurens Vets created METRON-1408: Summary: Upgrade from 0.4.1 to 0.4.2 fails on Alerts UI Key: METRON-1408 URL: https://issues.apache.org/jira/browse/METRON-1408 Project: Metron Issue Type: B

[jira] [Commented] (METRON-1408) Upgrade from 0.4.1 to 0.4.2 fails on Alerts UI

[ https://issues.apache.org/jira/browse/METRON-1408?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16329587#comment-16329587 ] Laurens Vets commented on METRON-1408: -- Some more debugging. Otto asked me to look a

[jira] [Created] (METRON-1410) Some more upgrade fallout... Can't restart Metron Indexing.

Laurens Vets created METRON-1410: Summary: Some more upgrade fallout... Can't restart Metron Indexing. Key: METRON-1410 URL: https://issues.apache.org/jira/browse/METRON-1410 Project: Metron

[jira] [Commented] (METRON-1410) Some more upgrade fallout... Can't restart Metron Indexing.

[ https://issues.apache.org/jira/browse/METRON-1410?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16330880#comment-16330880 ] Laurens Vets commented on METRON-1410: -- [~cestella] suggested to rename 'metron_upda

[jira] [Commented] (METRON-1410) Some more upgrade fallout... Can't restart Metron Indexing.

[ https://issues.apache.org/jira/browse/METRON-1410?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16330887#comment-16330887 ] Laurens Vets commented on METRON-1410: -- The 'profiler' tables has the same problem..

[jira] [Created] (METRON-1415) match statement does not seem to work.

Laurens Vets created METRON-1415: Summary: match statement does not seem to work. Key: METRON-1415 URL: https://issues.apache.org/jira/browse/METRON-1415 Project: Metron Issue Type: Bug A

[jira] [Commented] (METRON-1415) match statement does not seem to work.

[ https://issues.apache.org/jira/browse/METRON-1415?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16334698#comment-16334698 ] Laurens Vets commented on METRON-1415: -- Forgot to attach a sample event: {code:java}

[jira] [Assigned] (METRON-1415) match statement does not seem to work.

[ https://issues.apache.org/jira/browse/METRON-1415?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laurens Vets reassigned METRON-1415: Assignee: Laurens Vets > match statement does not seem to work. >

[jira] [Assigned] (METRON-1415) match statement does not seem to work.

[ https://issues.apache.org/jira/browse/METRON-1415?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laurens Vets reassigned METRON-1415: Assignee: Otto Fowler (was: Laurens Vets) > match statement does not seem to work. >

[jira] [Commented] (METRON-1415) match statement does not seem to work.

[ https://issues.apache.org/jira/browse/METRON-1415?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16335082#comment-16335082 ] Laurens Vets commented on METRON-1415: -- I can confirm that the following match state

[jira] [Comment Edited] (METRON-1415) match statement does not seem to work.

[ https://issues.apache.org/jira/browse/METRON-1415?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16335082#comment-16335082 ] Laurens Vets edited comment on METRON-1415 at 1/22/18 10:48 PM: ---

[jira] [Created] (METRON-1517) GeoLite discontinuation notice

Laurens Vets created METRON-1517: Summary: GeoLite discontinuation notice Key: METRON-1517 URL: https://issues.apache.org/jira/browse/METRON-1517 Project: Metron Issue Type: Bug R

[jira] [Commented] (METRON-1517) GeoLite discontinuation notice

[ https://issues.apache.org/jira/browse/METRON-1517?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16432651#comment-16432651 ] Laurens Vets commented on METRON-1517: -- Don't we need to adapt Metron for: h4. *Impo

[jira] [Created] (METRON-1606) Add a 'wrap' to incoming messages in the metron json parser

Laurens Vets created METRON-1606: Summary: Add a 'wrap' to incoming messages in the metron json parser Key: METRON-1606 URL: https://issues.apache.org/jira/browse/METRON-1606 Project: Metron

[jira] [Created] (METRON-938) "service metron-rest start " does not work on CentOS 7.

Laurens Vets created METRON-938: --- Summary: "service metron-rest start " does not work on CentOS 7. Key: METRON-938 URL: https://issues.apache.org/jira/browse/METRON-938 Project: Metron Issue T

[jira] [Updated] (METRON-938) "service metron-rest start " does not work on CentOS 7.

[ https://issues.apache.org/jira/browse/METRON-938?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laurens Vets updated METRON-938: Description: I suppose due to the change to systemd, the command "service metron-rest start " does

[jira] [Updated] (METRON-938) "service metron-rest start " does not work on CentOS 7.

[ https://issues.apache.org/jira/browse/METRON-938?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laurens Vets updated METRON-938: Description: I suppose due to the change to systemd, the command "service metron-rest start " does

[jira] [Created] (METRON-1023) PEP8-ify included Python scripts.

Laurens Vets created METRON-1023: Summary: PEP8-ify included Python scripts. Key: METRON-1023 URL: https://issues.apache.org/jira/browse/METRON-1023 Project: Metron Issue Type: Improvement

[jira] [Commented] (METRON-967) How to push Snort, Bro, YAF log to Metron

[ https://issues.apache.org/jira/browse/METRON-967?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16078738#comment-16078738 ] Laurens Vets commented on METRON-967: - GS Peter, What exactly is not working currentl

[jira] [Created] (METRON-1055) Metron 0.4.0 manual installation guide for CentOS 6 updates

Laurens Vets created METRON-1055: Summary: Metron 0.4.0 manual installation guide for CentOS 6 updates Key: METRON-1055 URL: https://issues.apache.org/jira/browse/METRON-1055 Project: Metron

[jira] [Commented] (METRON-938) "service metron-rest start " does not work on CentOS 7.

[ https://issues.apache.org/jira/browse/METRON-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16103327#comment-16103327 ] Laurens Vets commented on METRON-938: - Hi Paul, Can you find anything in the logs? >

[jira] [Commented] (METRON-938) "service metron-rest start " does not work on CentOS 7.

[ https://issues.apache.org/jira/browse/METRON-938?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16103502#comment-16103502 ] Laurens Vets commented on METRON-938: - Can you make sure you did the following in MySQ

[jira] [Created] (METRON-1106) JSONMap parser doesn't parse square brackets.

Laurens Vets created METRON-1106: Summary: JSONMap parser doesn't parse square brackets. Key: METRON-1106 URL: https://issues.apache.org/jira/browse/METRON-1106 Project: Metron Issue Type: Bu

[jira] [Commented] (METRON-485) Storm worker processes not properly terminating on restart

[ https://issues.apache.org/jira/browse/METRON-485?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16131262#comment-16131262 ] Laurens Vets commented on METRON-485: - [~ottobackwards] Where would I set this "-w" pa

[jira] [Created] (METRON-1172) Upgrade from Metron 0.4.1-rc to 0.4.1-rc4 'escalation' topic problem.

Laurens Vets created METRON-1172: Summary: Upgrade from Metron 0.4.1-rc to 0.4.1-rc4 'escalation' topic problem. Key: METRON-1172 URL: https://issues.apache.org/jira/browse/METRON-1172 Project: Metron

[jira] [Created] (METRON-1181) ES option masters_also_are_datanodes doesn't seem to work on 2 nodes.

Laurens Vets created METRON-1181: Summary: ES option masters_also_are_datanodes doesn't seem to work on 2 nodes. Key: METRON-1181 URL: https://issues.apache.org/jira/browse/METRON-1181 Project: Metron