I have installed Metron 0.7 in centos7. After installing the metron i am able to send some messages to the kafka topic for syslog. I have also checked the kafka console and verified that the messages are received. After that I am not able to see those messages in the storm logs or in the console . When i checked the storm topology we have the kafkaspout and a parser bolt which writes to errormessagewriter. I am not able to find any connections for enrichment. Can you please guide me on the steps how to see the end to end flow in metron.
I want to see bro, snort yaf and syslog . I followed the readme and installed snort and yaf but nothing is getting published in /var/log/yaf/alerts.csv. Can you pls guide me to see snort/yaf logs .
