Github user merrimanr commented on the issue:
https://github.com/apache/metron/pull/811
@nickwallen suppose you have a metaalert that contains 2 alerts. Then
suppose each alert has a different value for the host field. If you grouped on
host, which group would you expect the metaalert to appear in?---
