Github user cestella commented on a diff in the pull request:
https://github.com/apache/metron/pull/832#discussion_r149409051
--- Diff:
metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/package/files/bro_index.template
---
@@ -98,7 +98,7 @@
"mapping": {
"type": "float"
},
- "match": "threat.triage.rules:*:score",
+ "match": "threat:triage:*score",
--- End diff --
great catch.---
