Github user justinleet commented on the issue:
https://github.com/apache/metron/pull/811
@nickwallen It's not a perfect solution, but I added the "source:type"
field for consistency and to allow for filtering and retrieval of just meta
alerts in an obvious way. Should just be "source:type" of "metaalert"---
