Github user cestella commented on a diff in the pull request: https://github.com/apache/metron/pull/1047#discussion_r195548014 --- Diff: metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/configuration/metron-env.xml --- @@ -137,4 +137,10 @@ <value>yyyy.MM.dd.HH</value> <display-name>Elasticsearch Date Format</display-name> </property> + <property> + <name>source_type_field</name> + <display-name>Source Type Field</display-name> + <description>Name of the message field that contains the source type.</description> + <value>source.type</value> --- End diff -- Currently the default in the UI, if unspecified, is `source:type`, so I'd vote keeping it as that.
---