[GitHub] incubator-metron pull request #276: METRON-363 Fix Cisco ASA Parser

2016-10-14 Thread mattf-horton
Github user mattf-horton commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/276#discussion_r83523155 --- Diff: metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/utils/SyslogUtilsTest.java --- @@ -0,0 +1,61 @@ +/**

Re: [GitHub] incubator-metron issue #310: METRON-495: Upgrade Storm to 1.0.x

2016-10-14 Thread Otto Fowler
I would think pulling the band-aid off and getting to HDP 2.5 and HDF 2.0 would be worth it. Then jiras around taking advantage of the improvements in Storm can start. On October 14, 2016 at 18:11:32, justinleet (g...@git.apache.org) wrote: Github user justinleet commented on the issue:

[DISCUSS] Time-base flushing of all Writer queues

2016-10-14 Thread Matt Foley
Hi all, METRON-227 “Add Time-Based Flushing to Writer Bolt”, and METRON-322 “Global Batching & flushing” have been dormant since July, but contain some very valuable ideas.  The basic idea is that Metron’s Writer queues in general will flush on queue size, but not on time.  As a result,

[GitHub] incubator-metron pull request #276: METRON-363 Fix Cisco ASA Parser

2016-10-14 Thread kylerichardson
Github user kylerichardson commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/276#discussion_r83520638 --- Diff: metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/utils/SyslogUtilsTest.java --- @@ -0,0 +1,61 @@ +/**

[GitHub] incubator-metron pull request #276: METRON-363 Fix Cisco ASA Parser

2016-10-14 Thread kylerichardson
Github user kylerichardson commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/276#discussion_r83520042 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/utils/SyslogUtils.java --- @@ -0,0 +1,89 @@ +/** +

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread mattf-horton
Github user mattf-horton commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83513633 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@

[GitHub] incubator-metron issue #310: METRON-495: Upgrade Storm to 1.0.x

2016-10-14 Thread justinleet
Github user justinleet commented on the issue: https://github.com/apache/incubator-metron/pull/310 As an aside, the reason for attempting to bump the version of Kafka is that there seems to be a bit of a catch where moving Storm to 1.0.1 causes problems with Kafka, but leaving it

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread mattf-horton
Github user mattf-horton commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83505093 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@

Re: [DISCUSS] Metron REST API Architecture and Design

2016-10-14 Thread Ryan Merriman
Jon, It wasn't intentional, I ran out of time and wanted to get something out there. I think it certainly could be open ended though. Where should the REST API project be located? Ryan On Thu, Oct 13, 2016 at 7:32 PM, zeo...@gmail.com wrote: > Along the lines of: > • Must

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread merrimanr
Github user merrimanr commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83497449 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@ *

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread mattf-horton
Github user mattf-horton commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83489303 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@

Re: [VOTE] Casey Stella as a second release manager

2016-10-14 Thread James Sirota
+1 (binding) 14.10.2016, 09:39, "James Sirota" : > I would like to nominate Casey as our second release manager. This way we > don't have a single person who is a bottle neck in doing releases. Also, if > anyone other committer or PPMC wants to volunteer please post so on

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread merrimanr
Github user merrimanr commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83484585 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@ *

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread merrimanr
Github user merrimanr commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83483522 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/GrokParser.java --- @@ -150,8 +149,8 @@ public void init() {

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread mattf-horton
Github user mattf-horton commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83480785 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@

Re: [DISCUSS] Improving quick-dev

2016-10-14 Thread Ryan Merriman
+1 I like it. Just to clarify, the scripts to run Storm topologies locally in an IDE should be available independent of the environment running. No need for a separate build/image. On Fri, Oct 14, 2016 at 9:12 AM, Otto Fowler wrote: > Going forward, the Demo env and

[GitHub] incubator-metron issue #308: Metron-498 Grok patterns are now read from zook...

2016-10-14 Thread kylerichardson
Github user kylerichardson commented on the issue: https://github.com/apache/incubator-metron/pull/308 The ASA patterns file `/incubator-metron/metron-platform/metron-parsers/src/main/resources/patterns/asa` is being used (or soon will be) by PR #276. --- If your project is set up

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread mattf-horton
Github user mattf-horton commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83462598 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/GrokParser.java --- @@ -150,8 +149,8 @@ public void init() {

Re: [VOTE] Casey Stella as a second release manager

2016-10-14 Thread Ryan Merriman
+1 (binding) On Fri, Oct 14, 2016 at 11:56 AM, David Lyle wrote: > +1 (binding) > > On Fri, Oct 14, 2016 at 12:47 PM, Matt Foley > wrote: > > > +1 (non-binding) > > > > On 10/14/16, 9:39 AM, "James Sirota" wrote: > > > > I

Re: [VOTE] Casey Stella as a second release manager

2016-10-14 Thread David Lyle
+1 (binding) On Fri, Oct 14, 2016 at 12:47 PM, Matt Foley wrote: > +1 (non-binding) > > On 10/14/16, 9:39 AM, "James Sirota" wrote: > > I would like to nominate Casey as our second release manager. This > way we don't have a single person who is

Re: [VOTE] Casey Stella as a second release manager

2016-10-14 Thread Matt Foley
+1 (non-binding) On 10/14/16, 9:39 AM, "James Sirota" wrote: I would like to nominate Casey as our second release manager. This way we don't have a single person who is a bottle neck in doing releases. Also, if anyone other committer or PPMC wants to volunteer please

[VOTE] Casey Stella as a second release manager

2016-10-14 Thread James Sirota
I would like to nominate Casey as our second release manager. This way we don't have a single person who is a bottle neck in doing releases. Also, if anyone other committer or PPMC wants to volunteer please post so on the boards. The vote will run for 72 hours. Please vote +1 for yes, -1

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread merrimanr
Github user merrimanr commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83449671 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/GrokParser.java --- @@ -150,8 +149,8 @@ public void init() {

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83447207 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@ *

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread merrimanr
Github user merrimanr commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83447010 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@ *

[GitHub] incubator-metron issue #308: Metron-498 Grok patterns are now read from zook...

2016-10-14 Thread mmiklavc
Github user mmiklavc commented on the issue: https://github.com/apache/incubator-metron/pull/308 Has this been tested with the rpm and mpack stuff? Pretty sure this will break those items, so there are probably changes that would need to be made as part of this PR to keep from having

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83444303 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83432385 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@ *

[GitHub] incubator-metron pull request #304: METRON-496: Field transformations are ap...

2016-10-14 Thread asfgit
Github user asfgit closed the pull request at: https://github.com/apache/incubator-metron/pull/304 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83431135 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@ *

Re: [DISCUSS] Improving quick-dev

2016-10-14 Thread Otto Fowler
Going forward, the Demo env and data would have implications for testing as well ( gold data sets ) etc. On October 14, 2016 at 09:52:07, Nick Allen (n...@nickallen.org) wrote: I think based on everyone's input so far, we're describing 4 different builds/images/tools that would each be intended

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread cestella
Github user cestella commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83429210 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@ *

Re: [DISCUSS] Improving quick-dev

2016-10-14 Thread Nick Allen
I think based on everyone's input so far, we're describing 4 different builds/images/tools that would each be intended to run on a standard Mac/Linux/Windows laptop. Full Dev - A development environment that performs a full end-to-end deployment of Metron. This is intended for developers working

[GitHub] incubator-metron pull request #300: METRON-489: RemoveSubdomains Stellar Fun...

2016-10-14 Thread asfgit
Github user asfgit closed the pull request at: https://github.com/apache/incubator-metron/pull/300 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the

[GitHub] incubator-metron pull request #308: Metron-498 Grok patterns are now read fr...

2016-10-14 Thread nickwallen
Github user nickwallen commented on a diff in the pull request: https://github.com/apache/incubator-metron/pull/308#discussion_r83418757 --- Diff: metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java --- @@ -34,15 +34,15 @@