To my knowledge, we haven't seen this issue before. If you're not getting anything in enrichment I'd look for exceptions in the parser logs. It sounds like messages aren't making it to the enrichment topic. Afa the indexing topology you might double check that you have enough Storm slots available.
On Sun, Mar 24, 2019, 10:26 AM Farrukh Naveed Anjum <anjum.farr...@gmail.com> wrote: > Hi, Can you please approve and answer this question? I know user support > is optional and voluntary > > On Sun, Mar 24, 2019 at 7:35 PM Farrukh Naveed Anjum < > anjum.farr...@gmail.com> wrote: > >> Furthermore, Metron Indexing Process Shows Stopped in Ambari after >> starting for few minutes. But in Storm UI random_access_indexing >> <http://192.168.1.149:8744/topology.html?id=random_access_indexing-5-1553437501> >> and batch_indexing topologies keeps running. God knows what is problem. >> with this.. >> >> >> I build 0.7.0 successfully and deployed a month ago but right no neither >> 0.7.0 and 0.7.1 are working. I installed it on baremetal machine. >> >> >> >> On Sun, Mar 24, 2019 at 7:32 PM Farrukh Naveed Anjum < >> anjum.farr...@gmail.com> wrote: >> >>> Hi, >>> >>> I am experiencing the bug in meanwhile getting data from KAFKA to >>> METRON... It does not show any thing in management console of metron. >>> Neither creates the index. >>> >>> However, I can confirm I am able to see Snort, Bro Data coming to the >>> Kafka. >>> /usr/hdp/current/kafka-broker/bin/kafka-console-consumer.sh --zookeeper >>> localhost:2181 --topic snort --from-beginning >>> >>> Can some one please guide me where shall I look for problem. There is no >>> logging for enrichment, bro, indexing processes. I have checked Storm UI >>> but no error there. >>> >>> >>> -- >>> With Regards >>> Farrukh Naveed Anjum >>> >> >> >> -- >> With Regards >> Farrukh Naveed Anjum >> > > > -- > With Regards > Farrukh Naveed Anjum >
