This repository was archived by the owner on Aug 20, 2025. It is now read-only.
Falconhose Topology #13
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
(This includes the big rename.)
This includes a message parser, as well as a new alert adapter that knows that everything from the FalconHose should be considered an alert. There are Flux YAML file templates for both local and remote running.
Contributor
|
@sirsean Hi Sean - Even though Github thinks this merges, this no longer merges due to reorg of the code base. Was this still something that you wanted to address? If not, mind closing the PR? Many thanks for your contribution. |
JonZeolla
pushed a commit
to JonZeolla/metron
that referenced
this pull request
Jun 29, 2017
* Catching weird kafak issue. * removing extraneous imports. * reverted pom file change.
cestella
pushed a commit
to cestella/incubator-metron
that referenced
this pull request
Oct 25, 2017
BUG-90628 Set Session Limits for Elasticsearch When Deploying with the MPack
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This adds a FalconHose topology, including a parser that understands the FalconHose API data format, and a new alerts adapter that understands that everything from FalconHose should be considered an alert.