[ 
https://issues.apache.org/jira/browse/METRON-520?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Justin Leet reassigned METRON-520:
----------------------------------

    Assignee: Justin Leet

> /apps/metron/enrichment directory does not get created for Metron cluster 
> deployed via Ambari
> ---------------------------------------------------------------------------------------------
>
>                 Key: METRON-520
>                 URL: https://issues.apache.org/jira/browse/METRON-520
>             Project: Metron
>          Issue Type: Bug
>    Affects Versions: 0.2.1BETA
>            Reporter: Neha Sinha
>            Assignee: Justin Leet
>
> 1.Deploy Metron cluster via Ambari
> 2. Replay Bro logs to generate bro elasticsearch indices
> 3. The bro enriched and indexed data should be written to the HDFS at :-
> /apps/metron/enrichment
> The indexed data gets written to "/apps/metron/enrichment" for metron setups 
> that get deployed via Ansible, however, this path does not get created for 
> clusters deployed via Ambari.
> Output for "hdfs dfs -ls" command for clusters deployed via Ansible
> [hdfs@metron-ansible-3 ~]$ hdfs dfs -ls /apps/metron
> Found 2 items
> drwxrwxr-x   - storm hadoop          0 2016-10-24 11:41 
> /apps/metron/enrichment
> drwxrwxr-x   - hdfs  hadoop          0 2016-10-24 11:03 /apps/metron/patterns
> Output for "hdfs dfs -ls" command for clusters deployed via Ambari
> [hdfs@metron-s-10 ~]$ hdfs dfs -ls /apps/metron
> Found 7 items
> -rwxr-xr-x   3 hdfs hdfs      13427 2016-10-25 10:02 /apps/metron/asa
> -rwxr-xr-x   3 hdfs hdfs       5203 2016-10-25 10:02 /apps/metron/common
> -rwxr-xr-x   3 hdfs hdfs        524 2016-10-25 10:02 /apps/metron/fireeye
> -rwxr-xr-x   3 hdfs hdfs       2552 2016-10-25 10:02 /apps/metron/sourcefire
> -rwxr-xr-x   3 hdfs hdfs        180 2016-10-25 10:02 /apps/metron/squid
> -rwxr-xr-x   3 hdfs hdfs       2221 2016-10-25 10:02 /apps/metron/websphere
> -rwxr-xr-x   3 hdfs hdfs        879 2016-10-25 10:02 /apps/metron/yaf



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to