Yes, configure your indexing. https://metron.apache.org/current-book/metron-platform/metron-indexing/index.html <https://metron.apache.org/current-book/metron-platform/metron-indexing/index.html>
Note it’s a warning, not an error, that default values are being used because you do not have a specific configuration entry for the snort indexing. Simon > On 24 Jan 2018, at 08:31, Farrukh Naveed Anjum <[email protected]> > wrote: > > Any Idea how to fix this up ? > > On Wed, Jan 24, 2018 at 1:27 PM, Farrukh Naveed Anjum > <[email protected] <mailto:[email protected]>> wrote: > Hi, > > I am getting this error while starting up squid parsing again. Upon > restarting Apache Strom Indexing Bolt is showing up this error any idea how > can I fix this ? > > java.lang.Exception: WARNING: Default and (likely) unoptimized writer config > used for hdfs writer and sensor snort > at > org.apache.metron.writer.bolt.BulkMessageWriterBolt.execute(BulkMessageWriterBolt.java:234) > [stormjar.jar:?] > at > org.apache.storm.daemon.executor$fn__6573$tuple_action_fn__6575.invoke(executor.clj:734) > [storm-core-1.0.1.2.5.3.0-37.jar:1.0.1.2.5.3.0-37] > at > org.apache.storm.daemon.executor$mk_task_receiver$fn__6494.invoke(executor.clj:466) > [storm-core-1.0.1.2.5.3.0-37.jar:1.0.1.2.5.3.0-37] > at > org.apache.storm.disruptor$clojure_handler$reify__6007.onEvent(disruptor.clj:40) > [storm-core-1.0.1.2.5.3.0-37.jar:1.0.1.2.5.3.0-37] > at > org.apache.storm.utils.DisruptorQueue.consumeBatchToCursor(DisruptorQueue.java:451) > [storm-core-1.0.1.2.5.3.0-37.jar:1.0.1.2.5.3.0-37] > at > org.apache.storm.utils.DisruptorQueue.consumeBatchWhenAvailable(DisruptorQueue.java:430) > [storm-core-1.0.1.2.5.3.0-37.jar:1.0.1.2.5.3.0-37] > at > org.apache.storm.disruptor$consume_batch_when_available.invoke(disruptor.clj:73) > [storm-core-1.0.1.2.5.3.0-37.jar:1.0.1.2.5.3.0-37] > at > org.apache.storm.daemon.executor$fn__6573$fn__6586$fn__6639.invoke(executor.clj:853) > [storm-core-1.0.1.2.5.3.0-37.jar:1.0.1.2.5.3.0-37] > at org.apache.storm.util$async_loop$fn__554.invoke(util.clj:484) > [storm-core-1.0.1.2.5.3.0-37.jar:1.0.1.2.5.3.0-37] > at clojure.lang.AFn.run(AFn.java:22) [clojure-1.7.0.jar:?] > at java.lang.Thread.run(Thread.java:745) [?:1.8.0_77] > > -- > With Regards > Farrukh Naveed Anjum > > > > -- > With Regards > Farrukh Naveed Anjum
