Github user justinleet commented on the issue:
https://github.com/apache/metron/pull/824
@merrimanr I'm okay with excluding metaalerts (although I need to review
what you did there). I wouldn't expect it to go down by two though.
Say I have two matches, I put one in a metaalert (so it should be hidden).
I make the query again. I would still expect to get the remaining, standalone
match. The metaalert should never have showed up and the child alert should be
hidden. So one result. ---
