Hi all, I was wondering if there is any document to give us a clear understanding of resource consumption in Metron or not? I am investigating the detailed architecture of Metron to understand what type of resource would be critical at each point and how we can eliminate the resource contentions. I am looking for some answers in terms of on-heap/off-heap memory, CPU and IO.
For example, I want to understand how the enrichment works under the hood. How is the process for HBase enrichments, How is the process for the GEO enrichment? What about transformations? How is the JAVA parsing and Grok parsing? What about the threat triage and other threat intel? What about indexing? How profiler uses system resources? ... I have seen most of the documents in GitHub and project confluence, but they are more general. I am looking for more detailed information that can be used for performance tuning. Thank you very much. Regards, Ali
