Re: Re-establish /apps/metron directory

2019-11-06 Thread Yerex, Tom
Thanks Michael, this is what I was hoping for. I reckon that “intelligent compromise” is what goes into a lot of the best software solutions out there. --Tom. -- Tom Yerex Cybersecurity Analyst, Information Technology Cybersecurity | CISO Office The University of British Columbia |

Re: Error stemming from hbaseBolt

2019-11-06 Thread Yerex, Tom
Thank you Mike, I’ll tackle it this morning. I must have built from HEAD so that would be my first mistake when deploying this with an eye to production. Cheers, Tom. From: Michael Miklavcic Reply-To: "user@metron.apache.org" Date: Wednesday, November 6, 2019 at 9:39 AM To:

Re: Metron Enrichment Error

2019-11-06 Thread Michael Miklavcic
Hrm, I'm not sure how REST and mysql have anything to do with fixing that particular issue, but I'm glad you were able to get it working! On Wed, Nov 6, 2019 at 8:27 AM Gonçalo Pedras wrote: > Resolved. > > Deleted Metron service and added the service again but this time I > configured REST by

Re: Push data from elastic search to Metron alerts

2019-11-06 Thread Michael Miklavcic
It sounds like you might have some issues with Elasticsearch templates. See here for more detail - https://github.com/apache/metron/tree/master/metron-platform/metron-elasticsearch/metron-elasticsearch-common On Wed, Nov 6, 2019 at 8:25 AM Hema malini wrote: > Hi all, > > I pushed data to

Re: Metron Enrichment Error

2019-11-06 Thread Michael Miklavcic
You shouldn't need to create the HBase tables - the Ambari Metron MPack install will (should) do that for you. Do you have a file in $METRON_HOME/config/ named "metron_enrichment_hbase_configured"? We add a coprocessor to the HBase enrichment table and it looks like your startup is having issues

Re: Error stemming from hbaseBolt

2019-11-06 Thread Michael Miklavcic
Hi Tom, How did you build Metron? Our latest official release is 0.7.1 -> https://archive.apache.org/dist/metron/. Are you building via latest HEAD in the master branch? You might see a bland/vague exception like this if using an IDE (like Eclipse) for compilation. If you're not doing so already,

Re: Metron Enrichment Error

2019-11-06 Thread Gonçalo Pedras
Resolved. Deleted Metron service and added the service again but this time I configured REST by configuring the JDBC with mysql. On 2019/11/06 10:49:50, Gonçalo Pedras mailto:g...@ctd.pt>> wrote: > Hi,> > I've built Metron and installed alongside the current Ambari version with > HDP-3.1

Push data from elastic search to Metron alerts

2019-11-06 Thread Hema malini
Hi all, I pushed data to elastic search indices from csv . Log data has been parsed to CSV using customized parser and i am trying to view in metron alerts and apply machine learning on top of those log data(Maas). I pushed bro,snort,yaf logs to Metron .When i tried to push syslog in syslog 5424

Metron Enrichment Error

2019-11-06 Thread Gonçalo Pedras
Hi, I've built Metron and installed alongside the current Ambari version with HDP-3.1 support provided by the GitHub project (https://github.com/apache/metron/tree/feature/METRON-2088-support-hdp-3.1). I've followed the documentation and installed everything with success. Altough when i'm