clear query| facets| time Search criteria: .   Results from 1 to 10 from 35 (0.0s).
Loading phrases to help you
refine your search...
Investigator UI meta-alerts - Metron - [mail # dev]
...Hi OliverI still saw Meta alerts even when I was filtering for alerts = true but I am using an earlier version.You may want to try filtering by score instead.  A meta-alert should have ...
   Author: Carolyn Duby , 2018-07-03, 16:11
Architectural reason to split in 4 topologies / impact on the kafka ressources - Metron - [mail # dev]
...Another reason for the original string is that you may not want to extract all components of the original event into JSON.  If you look at Windows events you will want to have the origi...
   Author: Carolyn Duby , 2018-06-27, 20:42
[expand - 2 more] - Writing enrichment data directly from NiFi with PutHBaseJSON - Metron - [mail # dev]
...Agreed….Streaming enrichments is the right solution for DNS data.Do we have a web service for writing enrichments?Carolyn DubySolutions Engineer, Northeast[EMAIL PROTECTED]+1.508.965.0584Joi...
   Author: Carolyn Duby , 2018-06-13, 14:01
Suricata parser - Metron - [mail # dev]
...Is anyone working on a Suricata parser?  https://suricata-ids.org/I was not able to find an enhancement request for it.ThanksCarolyn...
   Author: Carolyn Duby , 2017-09-25, 13:49
So we graduated... - Metron - [mail # dev]
...Nice!  That's great news!    Sent from my Verizon, Samsung Galaxy smartphone   -------- Original message -------- From: David Lyle  Date: 4/20/17 5:16 PM (GMT-05:00)...
   Author: Carolyn Duby , 2017-04-20, 21:50
[Discuss] Improve Alerting - Metron - [mail # dev]
...For profiler alerts it will be helpful during analysis to see the alerts that caused the anomaly.  The meta alert is useful for incidents involving correlation of multiple events.  ...
   Author: Carolyn Duby , 2017-02-02, 12:40
[DISCUSS] Ambari Metron Configuration Management consequences and call to action - Metron - [mail # dev]
...ZooKeeper is more efficient if you want to maintain an update to the topologies without requiring a restart.  Is this useful going forward?   I think it is for development but prod...
   Author: Carolyn Duby , 2017-01-13, 15:19
[DISCUSS] Turning off indexing writers feature discussion - Metron - [mail # dev]
...For larger installations you need to control what is indexed so you don’t end up with a nasty elastic search situation and so you can mine the data later for reports and training ml models. ...
   Author: Carolyn Duby , 2017-01-13, 14:44
[expand - 1 more] - Enrich enrichment - Metron - [mail # dev]
...Dima - does this solve the enrichment you are trying to add?  Thanks Carolyn    Sent from my Verizon, Samsung Galaxy smartphone   -------- Original message -------- From:...
   Author: Carolyn Duby , 2017-01-09, 20:24
[expand - 2 more] - Long-term storage for enriched data - Metron - [mail # dev]
...One last recommendation for ORC for Hive files.  Hive with LLAP is most efficient with ORC.  Llap is a feature that makes Hive up to 25 times faster.  Thanks Carolyn   &n...
   Author: Carolyn Duby , 2017-01-07, 00:46