[GitHub] incubator-metron issue #142: METRON-204: Field Transformation Domain Specifi...

2016-06-16 Thread merrimanr
Github user merrimanr commented on the issue: https://github.com/apache/incubator-metron/pull/142 Awesome! +1 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes s

[GitHub] incubator-metron issue #142: METRON-204: Field Transformation Domain Specifi...

2016-06-16 Thread dlyle65535
Github user dlyle65535 commented on the issue: https://github.com/apache/incubator-metron/pull/142 +1, really great stuff! --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled

[GitHub] incubator-metron issue #142: METRON-204: Field Transformation Domain Specifi...

2016-06-16 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/incubator-metron/pull/142 I have modified the squid parser to use the MTL transformer to extract the subdomain-less hostname rather than using grok. So, in order to test this, you should be able to * create t

[GitHub] incubator-metron issue #142: METRON-204: Field Transformation Domain Specifi...

2016-06-13 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/incubator-metron/pull/142 So, I think the main disadvantage of using groovy or any of the scripting engine integrations is speed and expressibility. Having a targeted domain specific language is going to be

[GitHub] incubator-metron issue #142: METRON-204: Field Transformation Domain Specifi...

2016-06-13 Thread nickwallen
Github user nickwallen commented on the issue: https://github.com/apache/incubator-metron/pull/142 Love the functionality that you are creating with this. I am curious if it would make more sense to provide this functionality via an existing JVM-capable language like Groovy, etc, rat

[GitHub] incubator-metron issue #142: METRON-204: Field Transformation Domain Specifi...

2016-06-03 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/incubator-metron/pull/142 I uploaded a design doc to the JIRA. --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feat

[GitHub] incubator-metron issue #142: METRON-204: Field Transformation Domain Specifi...

2016-06-03 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/incubator-metron/pull/142 Also, it seems like a big PR, but honestly it's deceptive. There was a lot of file moving and the generated Antlr code inflates the size. --- If your project is set up for it, you can re

[GitHub] incubator-metron issue #142: METRON-204: Field Transformation Domain Specifi...

2016-06-03 Thread cestella
Github user cestella commented on the issue: https://github.com/apache/incubator-metron/pull/142 I will definitely create a doc on the JIRA about the DSL and would be happy to discuss. It's really just the extraction of the existing transformation functions from the query DSL into th

[GitHub] incubator-metron issue #142: METRON-204: Field Transformation Domain Specifi...

2016-06-03 Thread ddutta
Github user ddutta commented on the issue: https://github.com/apache/incubator-metron/pull/142 Nice contribution a DSL is very useful for setting rules/triggers etc * is there a doc in the JIRA for this? * would be gr8 to discuss design on the dev list the dev list is