Re: Metron dashboard events not showing up.

2018-02-23 Thread zeo...@gmail.com
Just to confirm, is it in the indexing Kafka topic? If so, I would look at the storm indexing logs. If nothing there, look at ES and Kibana logs. Jon On Thu, Feb 22, 2018, 22:03 Srikanth Nagarajan wrote: > Hi, > > In my Metron implementation, events from bro and snort are seen in Kafka > topi

Re: Alert View Deduplication

2018-02-23 Thread Jack Burgess
Thanks Ali, Storm without ackers would be a good example as well. From the attached network diagram where a hub sits below a switch with sensors on the span port at A and the hub at B. Traffic from B going to the router would be duplicated. Kibana tables could take care of things as is. The workf