[
https://issues.apache.org/jira/browse/EAGLE-798?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Zhao, Qingwen updated EAGLE-798:
--------------------------------
Description:
currently, eagle stores alerts with metadata into jdbc database, which has
performance risks under large volume of data
POST http://localhost:9090/rest/entities?serviceName=AlertService
{code}
{
"prefix": "alert_detail",
"timestamp": 1480056123654,
"tags": {
"policyId": "test_all",
"siteId": "sandbox"
},
"exp": null,
"encodedRowkey": "hiCMlG8vvsd___6nZcfO-SCZKe27qlR0",
"serializeAlias": null,
"serializeVerbose": true,
"appIds": [
"HDFS_AUDIT_LOG_MONITOR_APP_SANDBOX"
],
"policyValue": "from HDFS_AUDIT_LOG_ENRICHED_STREAM_SANDBOX select
* insert into hdfs_audit_log_enriched_stream_out",
"alertData": {
"allowed": true,
"cmd": "delete",
"dst": null,
"host": "10.249.66.185",
"securityZone": "NA",
"sensitivityType": "NA",
"src": "/tmp/hive/hive/caf2438a-87fe-4889-96ac-0c1f0b5dd4e0",
"timestamp": 1480056117845,
"user": "hive"
}
},
{code}
GET
http://localhost:9090/rest/entities?query=AlertService[@siteId="sandbox"]{*}&pageSize=100&startTime=2016-11-22%2001:10:00&endTime=2017-12-22%2003:10:00
was:currently, eagle stores alerts with metadata into jdbc database, which
has performance risks under large volume of data
> Add a new alert publisher to store alerts into hbase
> ----------------------------------------------------
>
> Key: EAGLE-798
> URL: https://issues.apache.org/jira/browse/EAGLE-798
> Project: Eagle
> Issue Type: Improvement
> Affects Versions: v0.5.0
> Reporter: Zhao, Qingwen
> Assignee: Zhao, Qingwen
> Priority: Minor
> Fix For: v0.5.0
>
>
> currently, eagle stores alerts with metadata into jdbc database, which has
> performance risks under large volume of data
> POST http://localhost:9090/rest/entities?serviceName=AlertService
> {code}
> {
> "prefix": "alert_detail",
> "timestamp": 1480056123654,
> "tags": {
> "policyId": "test_all",
> "siteId": "sandbox"
> },
> "exp": null,
> "encodedRowkey": "hiCMlG8vvsd___6nZcfO-SCZKe27qlR0",
> "serializeAlias": null,
> "serializeVerbose": true,
> "appIds": [
> "HDFS_AUDIT_LOG_MONITOR_APP_SANDBOX"
> ],
> "policyValue": "from HDFS_AUDIT_LOG_ENRICHED_STREAM_SANDBOX
> select * insert into hdfs_audit_log_enriched_stream_out",
> "alertData": {
> "allowed": true,
> "cmd": "delete",
> "dst": null,
> "host": "10.249.66.185",
> "securityZone": "NA",
> "sensitivityType": "NA",
> "src": "/tmp/hive/hive/caf2438a-87fe-4889-96ac-0c1f0b5dd4e0",
> "timestamp": 1480056117845,
> "user": "hive"
> }
> },
> {code}
> GET
> http://localhost:9090/rest/entities?query=AlertService[@siteId="sandbox"]{*}&pageSize=100&startTime=2016-11-22%2001:10:00&endTime=2017-12-22%2003:10:00
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
