| clear
query|
facets|
time |
Search criteria: .
Results from 1 to 10 from
45851 (0.0s).
|
|
|
Loading phrases to help you
refine your search...
|
|
[METRON-1189] Add alert escalation to the Alerts UI -
Metron - [issue]
|
| ...The PR is a follow on to https://issues.apache.org/jira/browse/METRON-1127. We need a way to escalate alerts in the alerts UI so that a user can selects alerts and send them to the esc... |
|
|
|
|
|
|
|
[expand - 2 more]
[collapse]
-
Installation Issues -
Metron - [mail # user]
|
| ...Provisioning a server grade machine is impossible at the moment. Thecurrent resources are the maximum I have to run metron or atleast juststart it.On Tue, Sep 26, 2017 at 10:15 AM, Khurram A... |
|
|
|
|
| |
|
Installation Issues - Metron - [mail # user]
|
| ...Dear HammadWithout getting into specifics of technical problems you are facing rightnow. Based on my experience getting Metron to work on anything lower than32GB of RAM and a quad-core proce... |
|
|
|
|
|
Installation Issues - Metron - [mail # user]
|
| ...Hello everyone, any Idea how I can resolve this?[image: Inline image 1]... |
|
|
|
|
|
|
|
[METRON-1196] Increment master version number to 0.4.2 for on-going development -
Metron - [issue]
|
| ......now that 0.4.1 has been released to public.... |
|
|
|
|
|
|
|
[expand - 9 more]
[collapse]
-
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST -
Metron - [mail # dev]
|
| ...I've been stretched a little thin lately but am trying to jump back in.2:30pm EDT works well for me too.-KyleOn Mon, Sep 25, 2017 at 8:38 PM, Otto Fowler wrote:> 11:30 your time. So... |
|
|
|
|
| |
|
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST - Metron - [mail # dev]
|
| ...11:30 your time. Sorry I have to pick my kids up from school. 2:30 mine.On September 25, 2017 at 19:41:28, James Sirota ([EMAIL PROTECTED]) wrote:Oh sorry, didn't notice that. Ot... |
|
|
|
|
|
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST - Metron - [mail # dev]
|
| ...Oh sorry, didn't notice that. Otto, when is a good time for you?25.09.2017, 16:35, "[EMAIL PROTECTED]" :> When is the meeting, given Otto mentioned he can't make 10am? Or did that&g... |
|
|
|
|
|
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST - Metron - [mail # dev]
|
| ...When is the meeting, given Otto mentioned he can't make 10am? Or did thatchangeJonOn Mon, Sep 25, 2017, 19:19 James Sirota wrote:> Great. Thank you, Otto. I would encour... |
|
|
|
|
|
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST - Metron - [mail # dev]
|
| ...Great. Thank you, Otto. I would encourage everyone to watch it so that we have constructive feedback for tomorrow and are able to arrive to a decisionThanks,James 25.09.2017, 08:27, "O... |
|
|
|
|
|
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST - Metron - [mail # dev]
|
| ...https://youtu.be/-ISycoP3TVAThe video is short and simple. Hopefully it is what you are looking for.On September 21, 2017 at 16:54:13, [EMAIL PROTECTED] ([EMAIL PROTECTED])wrote:I won'... |
|
|
|
|
|
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST - Metron - [mail # dev]
|
| ...I won't be able to make it and would really like to make sure there's arecording for this one, if possible. I'm unavailable until Thursday ofnext week, but not necessarily suggesting t... |
|
|
|
|
|
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST - Metron - [mail # dev]
|
| ...I can’t make that time, can we make it later in the day?On September 21, 2017 at 11:40:37, James Sirota ([EMAIL PROTECTED]) wrote:https://hortonworks.webex.com/meet/jsirota... |
|
|
|
|
|
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST - Metron - [mail # dev]
|
| ...Sorry made a mistake. Tuesday is 26th, not 23rd.Thanks,James 21.09.2017, 08:06, "James Sirota" :> Hi Guys,>> I'd like to propose a community meeting for this Tuesday, Sept.23 ... |
|
|
|
|
|
[DISCUSS] Community meeting on Tuesday, Sept.23 10AM PST - Metron - [mail # dev]
|
| ...Hi Guys,I'd like to propose a community meeting for this Tuesday, Sept.23 and focus on the strategy for getting Metron-777 and related PRs on Otto's feature branch merged into master. ... |
|
|
|
|
|
|
|
[expand - 18 more]
[collapse]
-
feature branch bumps -
Metron - [mail # dev]
|
| ...Hi all,Otto and I had an off-line discussion about this, and we think we have a constructive suggestion that will allow chunking the feature branch to some extent, which will of course make ... |
|
|
|
|
| |
|
feature branch bumps - Metron - [mail # dev]
|
| ...My thought was that in answering things in the wiki, it would build out the‘guide’ there. But I was just taking a stab at that. I am open towhatever the group thinks would work b... |
|
|
|
|
|
feature branch bumps - Metron - [mail # dev]
|
| ...> What I would like to do, and what it seems to me that we need to do (again I apologize if I am wrong ), is to catch up on the confluence andwhere things currently stand, and then move t... |
|
|
|
|
|
feature branch bumps - Metron - [mail # dev]
|
| ...Nick, thanks for taking the time to reply, I have no doubts about yourmotivations and intent. Hopefully we get through this point by pointstuff, which is always difficult on email.http... |
|
|
|
|
|
feature branch bumps - Metron - [mail # dev]
|
| ...>> But, as you said, it has been since April, and only Bundles has been> reviewed. If nobody but Matt is even going to _attempt_ code review, then> it may now be implicitly requi... |
|
|
|
|
|
feature branch bumps - Metron - [mail # dev]
|
| ...OmitOn September 20, 2017 at 19:20:27, Otto Fowler ([EMAIL PROTECTED])wrote:> With the bundles, archetype, plug-in and parser moves gone 777 will be> much smaller though.>> Also ... |
|
|
|
|
|
feature branch bumps - Metron - [mail # dev]
|
| ...With the bundles, archetype, plug-in and parser moves gone 777 will be muchsmaller though.Also I did not mean to admit Mike’s doc reviews, sorry.On September 20, 2017 at 18:04:20, Otto Fowle... |
|
|
|
|
|
feature branch bumps - Metron - [mail # dev]
|
| ...I am not taking any of this as starting to do a flame war :) And yourconcern is about review not merging right? If it is all reviewed andaccepted, why would 6 merges be preferabl... |
|
|
|
|
|
feature branch bumps - Metron - [mail # dev]
|
| ...I was just responding to your statement "Well, if there is an alternativemerge strategy, I’m all ears." I understand that you disagree, but this isan alternative strategy. I thin... |
|
|
|
|
|
feature branch bumps - Metron - [mail # dev]
|
| ...“Bite off small chunks” is what I keep hearing. I have no idea how to dothat from an already integrated and working branch.Do you mean I…- create patch files of whole directories and do a pr... |
|
|
|
|
|
|
|
[expand - 11 more]
[collapse]
-
Not seeing any Metron alerts. -
Metron - [mail # user]
|
| ...I was under the impression that besides setting the is_alert field,there would now also be a threat:triage:level created by myriskLevelRules rules? A SUMmed 'score' as it were? On 2017-09-25... |
|
|
|
|
| |
|
Not seeing any Metron alerts. - Metron - [mail # user]
|
| ...I was quickly reading through this on my mobile device so sorry if I'm offbase here, but it may be because threat.triage.level is changed tothreat:triage:level just before indexing due to th... |
|
|
|
|
|
Not seeing any Metron alerts. - Metron - [mail # user]
|
| ...Next problem:I'm setting the "is_alert" field to true. It shows up in Kibana, but I don't get a threat.triage.level field which means that either my riskLevelRules rules don't trigger or som... |
|
|
|
|
|
Not seeing any Metron alerts. - Metron - [mail # user]
|
| ...And, this PR just went into master. Hopefully this will help in thefuture. Let me know how I can make it better.On Mon, Sep 25, 2017 at 4:54 PM, Nick Allen wrote:> Just ... |
|
|
|
|
|
Not seeing any Metron alerts. - Metron - [mail # user]
|
| ...Just as a side note, based on PR #733 [1], you can also simulate/debugthese types ofThreat Triage rulesdirectly in the Stellar REPL. (1) There are a few different Threat Triage ... |
|
|
|
|
|
Not seeing any Metron alerts. - Metron - [mail # user]
|
| ...Thanks!On 2017-09-25 13:16, Simon Elliston Ball wrote:> The second statement overwrites the first, but also uses the previous > value.> > Technically that is an or. Note this con... |
|
|
|
|
|
Not seeing any Metron alerts. - Metron - [mail # user]
|
| ...The second statement overwrites the first, but also uses the previous value. Technically that is an or. Note this construct is designed to allow multiple different trigger conditions to make... |
|
|
|
|
|
Not seeing any Metron alerts. - Metron - [mail # user]
|
| ...Thanks! Followup question, the below is_alert 'rules' in the snippet from http://apache.website-solution.net/metron/0.4.1/site-book/use-cases/geographic_login_outliers/index.html, are those ... |
|
|
|
|
|
Not seeing any Metron alerts. - Metron - [mail # user]
|
| ...Usually you would have the is_alert set based on more complex rules, and then potentially have different rules to determine the importance of the alert, so they do tend to serve different pu... |
|
|
|
|
|
Not seeing any Metron alerts. - Metron - [mail # user]
|
| ...Oh, I didn't know I had to set is_alert to True.Doesn't that mean that we have to add all rules twice? First to check whether is_alert needs to be set to True. Next to apply the actual score... |
|
|
|
|
|
|
|
[expand - 1 more]
[collapse]
-
[DISCUSS] Splitting up the Indexing Topology -
Metron - [mail # dev]
|
| ...I have experienced issues with ES and HDFS indexing in production and have previously split out the topologies into two separate topologies. As you state the benefits of this approach ... |
|
|
|
|
| |
|
[DISCUSS] Splitting up the Indexing Topology - Metron - [mail # dev]
|
| ...One of the lessons that have bubbled up in doing some performance analysisis that having the indexing topology share both the ES and the HDFS writerin the same topology can be problematic fr... |
|
|
|
|
|
|
|
[METRON-1156] Simulate Triage Rules in the Stellar REPL -
Metron - [issue]
|
| ...Troubleshooting issues when programming against a live stream of data is difficult. It would be useful to have a means to run the entire threat triage process within the REPL before deployin... |
|
|
|
|
|
|
|
[METRON-1198] Pycapa - No such configuration property: "sasl.kerberos.principal" -
Metron - [issue]
|
| ...When running pycapa in a Kerberized environment, but without a version of librdkafka built with SASL support, it can produce error messages that look-like the following.KafkaError{code=_INVA... |
|
|
|
|
|
|
|
[expand - 6 more]
[collapse]
-
Metron Installation -
Metron - [mail # user]
|
| ...I have increased the ram to 12 GB. The os I use is ubuntu so I guess metronmight be able to get 8GB of ram. Have left the installation running back atoffice. Last command I left running was ... |
|
|
|
|
| |
|
Metron Installation - Metron - [mail # user]
|
| ...You need 8GB to dedicate 100% to the VM. Any other processes, the OS, etc.will often absorb many more GB of RAM. In my scenario I usually test on aVM on a ESXi host because my la... |
|
|
|
|
|
Metron Installation - Metron - [mail # user]
|
| ...But this guide says that 8gb ram is required (which I have) to run singlenode VM versionhttps://cwiki.apache.org/confluence/display/METRON/Dev+VM+InstallI am able to get into ambari and see ... |
|
|
|
|
|
Metron Installation - Metron - [mail # user]
|
| ...This looks like it’s probably a timeout. From your other posts it sounds like the machine you’re using is really not up to running the base platform for Metron. I would strongly recommend go... |
|
|
|
|
|
Metron Installation - Metron - [mail # user]
|
| ...Now I see this but I am able to see ambari login page via node1:8080whats the user and pass to access it?[image: Inline image 3][image: Inline image 2]... |
|
|
|
|
|
Metron Installation - Metron - [mail # user]
|
| ...Any fix for this?[image: Inline image 2]... |
|
|
|
|
|
Metron Installation - Metron - [mail # user]
|
| ...Hello everyone,I have been trying to install metron for over 2 weeks already and I haventgot any success so far.I am doing it on my core i5 machine and have followed this guide so far:https:... |
|
|
|
|
|
|
|
|