GitHub user cestella opened a pull request:
https://github.com/apache/incubator-metron/pull/136
METRON-186: Create a fieldMapping functionality which allows for parsed
fields to be transformed
Currently the parsers take care of transforming raw data to the parsed JSON
representation. Allow for a layer to be placed at a sensor level to transform
input fields from the parsed messages to create new fields. For instance,
mapping IANA protocol numbers to a standardized textual representation (i.e. 6
maps to TCP).
This should be generalized, so that we can provide common functions and
users can define the input fields and the output field to use. This
configuration should live with the sensor configuration in zookeeper.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/cestella/incubator-metron transformers
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/incubator-metron/pull/136.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #136
----
commit 0d3b31be29b4238e1923d4d812e40dca4afe64f2
Author: cstella <ceste...@gmail.com>
Date: 2016-05-25T19:01:55Z
Creating mapping infrastructure for parsing.
commit 7e1366735a0ed8eb78ec7103759b6a2574beff2f
Author: cstella <ceste...@gmail.com>
Date: 2016-05-25T21:16:47Z
Renamed and refactored a bit.
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---
