[
https://issues.apache.org/jira/browse/EAGLE-798?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15695405#comment-15695405
]
ASF GitHub Bot commented on EAGLE-798:
--------------------------------------
Github user asfgit closed the pull request at:
https://github.com/apache/incubator-eagle/pull/683
> Add a new alert publisher to store alerts into hbase
> ----------------------------------------------------
>
> Key: EAGLE-798
> URL: https://issues.apache.org/jira/browse/EAGLE-798
> Project: Eagle
> Issue Type: Improvement
> Affects Versions: v0.5.0
> Reporter: Zhao, Qingwen
> Assignee: Zhao, Qingwen
> Priority: Minor
> Fix For: v0.5.0
>
>
> currently, eagle stores alerts with metadata into jdbc database, which has
> performance risks under large volume of data
> POST http://localhost:9090/rest/entities?serviceName=AlertService
> {code}
> {
> "prefix": "alert_detail",
> "timestamp": 1480056123654,
> "tags": {
> "policyId": "test_all",
> "siteId": "sandbox"
> },
> "exp": null,
> "encodedRowkey": "hiCMlG8vvsd___6nZcfO-SCZKe27qlR0",
> "serializeAlias": null,
> "serializeVerbose": true,
> "appIds": [
> "HDFS_AUDIT_LOG_MONITOR_APP_SANDBOX"
> ],
> "policyValue": "from HDFS_AUDIT_LOG_ENRICHED_STREAM_SANDBOX
> select * insert into hdfs_audit_log_enriched_stream_out",
> "alertData": {
> "allowed": true,
> "cmd": "delete",
> "dst": null,
> "host": "10.249.66.185",
> "securityZone": "NA",
> "sensitivityType": "NA",
> "src": "/tmp/hive/hive/caf2438a-87fe-4889-96ac-0c1f0b5dd4e0",
> "timestamp": 1480056117845,
> "user": "hive"
> }
> },
> {code}
> GET
> http://localhost:9090/rest/entities?query=AlertService[@siteId="sandbox"]{*}&pageSize=100&startTime=2016-11-22%2001:10:00&endTime=2017-12-22%2003:10:00
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
