Hi Friends, I am new to apache metron world. I have started exploring the apche metron, Kafka, Nifi. All new to me.
I have followed steps mentioned below to setup first topology https://cwiki.apache.org/confluence/display/METRON/ Adding+a+New+Telemetry+Data+Source Now i am trying to add Paloalto firewall topology. I followed the similar steps mentioned above with changes specific to "topic" and "parser". Instead of touch /usr/metron/$METRON_VERSION/config/zookeeper/parsers/ squid.json, i created touch /usr/metron/$METRON_VERSION/config/zookeeper/parsers/ palto.json with below entry { "parserClassName": "org.apache.metron.parsers.paloalto.BasicPaloAltoFirewallParser ", "sensorTopic": "palto", "parserConfig": {} } "palto" is the new topic created and used for this topology. Added this json to Zookeper and restarted all services. I have started injesting data into "palto" topic by configuring Nifi. In storm UI, i can see data being parsed in "SQUID" topology but not in "PALTO" . I am missing anything? Any help would be appreciated. Thanks, Bharath
