Github user james-sirota commented on the issue:
https://github.com/apache/metron/pull/811
@nickwallen to avoid scope creep on this PR I created a follow-on PR to
figure out how to represent meta alerts in the facet panel.
https://issues.apache.org/jira/browse/METRON-1276
I agreee with @merrimanr that meta alerts contains multiple alerts each
with with distinct meta data and faceting them with the non-grouped alerts
doesn't make sense IMO. We do need to figure out a way to visualize metadata
of the meta alert (maybe have a separate facet panel for meta alerts?), but I
think this will add scope to this PR and therefore should be resolved outside
of this PR.
---
