Use the "Unified" enrichment topology rather than the legacy Split/Join. You will see much better performance in many cases. You can toggle which topology to use in Ambari under Metron > Config > Enrichment.
On Thu, Nov 1, 2018 at 3:15 AM Farrukh Naveed Anjum <[email protected]> wrote: > Message was in the join cache too long which may be caused by slow > enrichments/threatintels. Increase the maxTimeRetain setting. at > org.apache.metron.enrichment.bolt.JoinBolt$ > > > -- > With Regards > Farrukh Naveed Anjum >
