Re: Metron with Zeek not working.

2019-12-06 Thread Hema malini
Hi Farrukh, You are welcome.. Thanks and Regards Hema On Fri, 6 Dec, 2019, 4:48 PM Farrukh Naveed Anjum, wrote: > Thanks for help Hema, It was port 6667 that i need to send data to. It is > working fine with Zeek now. > > > > On Fri, Dec 6, 2019 at 1:14 PM Farrukh Naveed Anjum < >

Re: Metron with Zeek not working.

2019-12-06 Thread Farrukh Naveed Anjum
Thanks it worked the same way On Fri, Dec 6, 2019 at 4:20 PM Hema malini wrote: > Hi, > > In server.properties in each node ,u should find a property - > listeners=PLAINTEXT://hostname:6667. > > Check that property in each node > > I used the below commands > > bin/kafka-console-producer.sh

Re: Metron with Zeek not working.

2019-12-06 Thread Hema malini
Hi, In server.properties in each node ,u should find a property - listeners=PLAINTEXT://hostname:6667. Check that property in each node I used the below commands bin/kafka-console-producer.sh --broker-list ip1:6667,ip2:6667 --topic topicname bin/kafka-console-consumer.sh --bootstrap-server

Re: Metron with Zeek not working.

2019-12-06 Thread Farrukh Naveed Anjum
Thanks for help Hema, It was port 6667 that i need to send data to. It is working fine with Zeek now. On Fri, Dec 6, 2019 at 1:14 PM Farrukh Naveed Anjum wrote: > Hi, > > Please do find attached detailed configs > > On Fri, Dec 6, 2019 at 1:10 PM Farrukh Naveed Anjum < >

Re: Metron with Zeek not working.

2019-12-06 Thread Farrukh Naveed Anjum
Hi, Please do find the attached Settings I have I tried on 6667 but it does not work On Fri, Dec 6, 2019 at 12:22 PM Hema malini wrote: > Hi, > > Please use the same listener port . I tried with 6067. Can u please > provide the settings you have used. > > > Thanks and Regards, > Hema > On Fri,

Re: Metron with Zeek not working.

2019-12-05 Thread Hema malini
Hi, Please use the same listener port . I tried with 6067. Can u please provide the settings you have used. Thanks and Regards, Hema On Fri, 6 Dec, 2019, 11:48 AM Farrukh Naveed Anjum, wrote: > Hi, > > Can you please suggest what port I should use. Metron Documentation says > 6667 (For Kafka)

Re: Metron with Zeek not working.

2019-12-05 Thread Farrukh Naveed Anjum
Hi, Can you please suggest what port I should use. Metron Documentation says 6667 (For Kafka) I tried both 6667 and 9092 but did not receive data in kafka. On Fri, Dec 6, 2019 at 9:48 AM Hema malini wrote: > Hi, > > This issue is basically due to Kafka configuration. Check your listener >

Re: Metron with Zeek not working.

2019-12-05 Thread Hema malini
Hi, This issue is basically due to Kafka configuration. Check your listener port in Kafka configuration .Hope this helps. Thanks and Regards, Hema On Fri, 6 Dec, 2019, 10:17 AM Hema malini, wrote: > Hi, > > Please check the listener property.Use the same port while consuming. > > Thanks and

Re: Metron with Zeek not working.

2019-12-05 Thread Hema malini
Hi, Please check the listener property.Use the same port while consuming. Thanks and Regards, Hema On Fri, 6 Dec, 2019, 9:54 AM Farrukh Naveed Anjum, wrote: > Problem is i am not able to Push data into Kafka.. > > I have 1 Name Node, 2 Data Node (All have Kafka Broker + Zookeeper). > > Even

Re: Metron with Zeek not working.

2019-12-05 Thread Otto Fowler
I don’t think we support newer versions of bro yet i.e. zeek. On December 5, 2019 at 10:31:12, Farrukh Naveed Anjum ( anjum.farr...@gmail.com) wrote: Hi, I am trying to use upgraded version of Bro that is Zeek. I am unable to receive data into Kafka @load

Re: Metron with Zeek not working.

2019-12-05 Thread Nick Allen
Are you able to push data in kafka using Kafka's console producer/consumer tools? On Thu, Dec 5, 2019 at 10:31 AM Farrukh Naveed Anjum < anjum.farr...@gmail.com> wrote: > Hi, > I am trying to use upgraded version of Bro that is Zeek. I am unable to > receive data into Kafka > > @load

Metron with Zeek not working.

2019-12-05 Thread Farrukh Naveed Anjum
Hi, I am trying to use upgraded version of Bro that is Zeek. I am unable to receive data into Kafka @load packages/metron-bro-plugin-kafka/Apache/Kafka redef Kafka::logs_to_send = set(SSH::LOG, RDP::LOG, KRB::LOG, SSL::LOG, DHCP::LOG, Cluster::LOG, Syslog::LOG, SNMP::LOG, Reporter::LOG,