Github user merrimanr commented on the issue: https://github.com/apache/metron/pull/1231 The latest commit changes the SearchIntegrationTest to use the ES templates that ship with Metron. There are a couple different tests that verify certain fields are defined with the correct types and I made sure the internal fields (including `alert_status`) are covered. The one potentially confusing change is that a couple test fields are added to the OOTB ES templates before these tests are run. This was necessary for the existing tests to continue working without major changes. I think this should cover it. Let me know what you think.
---