Hi,
I am trying to test the REST_GET stellar function with the example provided in
the document
https://metron.apache.org/current-book/metron-stellar/stellar-common/index.html.
I am getting the below while trying the same..
[Stellar]>>> REST_GET('http://httpbin.org/get')
[!] Unable to parse: REST_GET('http://httpbin.org/get') due to: Unable to
resolve function named 'REST_GET'. Valid functions are
IS_DOMAIN,MONTH,TRIM,FORMAT,WEEK_OF_MONTH,LOG10,TO_INTEGER,FLOOR,YEAR,PROTOCOL_TO_NAME,FILL_LEFT,GET_FIRST,GROK_PREDICT,DECODE,PROFILE_FIXED,THREAT_TRIAGE_SCORE,DOMAIN_REMOVE_SUBDOMAINS,REGEXP_REPLACE,KAFKA_SEEK,STATS_SUM_SQUARES,SET_ADD,STATS_INIT,SET_INIT,MIN,CONFIG_GET,IS_INTEGER,DAY_OF_WEEK,SET_MERGE,ENCODE,IS_EMPTY,DAY_OF_YEAR,STATS_SKEWNESS,ENRICHMENT_EXISTS,IN_SUBNET,HDFS_READ,SPLIT,GEOHASH_CENTROID,ABS,SET_REMOVE,STATS_VARIANCE,LOCAL_RM,STATS_ADD,TO_UPPER,PARSER_STELLAR_TRANSFORM_PRINT,MAAS_GET_ENDPOINT,BLOOM_EXISTS,GET_SUPPORTED_ENCODINGS,BLOOM_INIT,ENRICHMENT_STELLAR_TRANSFORM_ADD,URL_TO_PATH,LOCAL_READ,OUTLIER_MAD_ADD,TO_FLOAT,STATS_SUM_LOGS,HDFS_LS,IS_IP,TO_LONG,CHOMP,THREAT_TRIAGE_CONFIG,KAFKA_GET,ENDS_WITH,BYTEARRAY_MATCHER,TO_STRING,INDEXING_SET_INDEX,HLLP_MERGE,OBJECT_GET,APPEND_IF_MISSING,BLOOM_MERGE,SAMPLE_GET,GEOHASH_MAX_DIST,KAFKA_PROPS,THREAT_TRIAGE_INIT,STATS_KURTOSIS,DOMAIN_REMOVE_TLD,GROK_EVAL,MULTISET_INIT,TO_JSON_MAP,CEILING,HLLP_ADD,SIN,REDUCE,URL_TO_PORT,SAMPLE_MERGE,MULTISET_ADD,HDFS_WRITE,THREAT_TRIAGE_REMOVE,STATS_POPULATION_VARIANCE,SYSTEM_PROPERTY_GET,INDEXING_SET_BATCH,KAFKA_PUT,IT_ENTROPY,FILTER,BIN,BLOOM_ADD,STATS_QUADRATIC_MEAN,STATS_MIN,SHELL_GET_EXPRESSION,ZIP_LONGEST,STATS_SUM,STATS_MERGE,STATS_PERCENTILE,SHELL_EDIT,GEOHASH_DIST,TO_DOUBLE,CONFIG_PUT,IS_DATE,ZIP,SQRT,JOIN,FUZZY_LANGS,LOCAL_LS,MAP_GET,OUTLIER_MAD_SCORE,GEOHASH_FROM_LATLONG,WEEK_OF_YEAR,STATS_MAX,CHOP,FUZZY_SCORE,SHELL_LIST_VARS,IS_NAN,SHELL_VARS2MAP,REGEXP_GROUP_VAL,SHODAN,ENRICHMENT_GET,STATS_SD,HASH,GEOHASH_FROM_LOC,MULTISET_MERGE,HLLP_INIT,GEO_GET,GET,STATS_COUNT,MAP,MAP_EXISTS,TO_LOWER,MAX,DAY_OF_MONTH,LENGTH,MAAS_MODEL_APPLY,GEOHASH_TO_LATLONG,PROFILER_APPLY,PROFILER_FLUSH,THREAT_TRIAGE_SET_AGGREGATOR,KAFKA_FIND,OUTLIER_MAD_STATE_MERGE,TO_EPOCH_TIMESTAMP,COS,URL_TO_PROTOCOL,THREAT_TRIAGE_ADD,PARSER_STELLAR_TRANSFORM_ADD,TO_JSON_OBJECT,STATS_MEAN,PROFILE_GET,TAN,LN,PARSER_STELLAR_TRANSFORM_REMOVE,SUBSTRING,MULTISET_REMOVE,HDFS_READ_LINES,LIST_ADD,MULTISET_TO_SET,PROFILER_INIT,DOMAIN_TYPOSQUAT,DOMAIN_TO_TLD,GET_HASHES_AVAILABLE,COUNT_MATCHES,HLLP_CARDINALITY,STARTS_WITH,ENRICHMENT_STELLAR_TRANSFORM_PRINT,SYSTEM_ENV_GET,LOG2,SAMPLE_INIT,HDFS_RM,STATS_BIN,TO_JSON_LIST,IS_EMAIL,INDEXING_SET_ENABLED,LOCAL_WRITE,REGEXP_MATCH,PROFILE_WINDOW,LOCAL_READ_LINES,ROUND,GET_LAST,THREAT_TRIAGE_PRINT,FILL_RIGHT,ENRICHMENT_STELLAR_TRANSFORM_REMOVE,IS_ENCODING,KAFKA_TAIL,SAMPLE_ADD,STATS_GEOMETRIC_MEAN,PREPEND_IF_MISSING,URL_TO_HOST,TLSH_DIST,MSEXCH_GET_USERID,IS_URL,SHELL_MAP2TABLE,EXP,STRING_ENTROPY
org.apache.metron.stellar.dsl.ParseException: Unable to parse:
REST_GET('http://httpbin.org/get') due to: Unable to resolve function named
'REST_GET'. Valid functions are
IS_DOMAIN,MONTH,TRIM,FORMAT,WEEK_OF_MONTH,LOG10,TO_INTEGER,FLOOR,YEAR,PROTOCOL_TO_NAME,FILL_LEFT,GET_FIRST,GROK_PREDICT,DECODE,PROFILE_FIXED,THREAT_TRIAGE_SCORE,DOMAIN_REMOVE_SUBDOMAINS,REGEXP_REPLACE,KAFKA_SEEK,STATS_SUM_SQUARES,SET_ADD,STATS_INIT,SET_INIT,MIN,CONFIG_GET,IS_INTEGER,DAY_OF_WEEK,SET_MERGE,ENCODE,IS_EMPTY,DAY_OF_YEAR,STATS_SKEWNESS,ENRICHMENT_EXISTS,IN_SUBNET,HDFS_READ,SPLIT,GEOHASH_CENTROID,ABS,SET_REMOVE,STATS_VARIANCE,LOCAL_RM,STATS_ADD,TO_UPPER,PARSER_STELLAR_TRANSFORM_PRINT,MAAS_GET_ENDPOINT,BLOOM_EXISTS,GET_SUPPORTED_ENCODINGS,BLOOM_INIT,ENRICHMENT_STELLAR_TRANSFORM_ADD,URL_TO_PATH,LOCAL_READ,OUTLIER_MAD_ADD,TO_FLOAT,STATS_SUM_LOGS,HDFS_LS,IS_IP,TO_LONG,CHOMP,THREAT_TRIAGE_CONFIG,KAFKA_GET,ENDS_WITH,BYTEARRAY_MATCHER,TO_STRING,INDEXING_SET_INDEX,HLLP_MERGE,OBJECT_GET,APPEND_IF_MISSING,BLOOM_MERGE,SAMPLE_GET,GEOHASH_MAX_DIST,KAFKA_PROPS,THREAT_TRIAGE_INIT,STATS_KURTOSIS,DOMAIN_REMOVE_TLD,GROK_EVAL,MULTISET_INIT,TO_JSON_MAP,CEILING,HLLP_ADD,SIN,REDUCE,URL_TO_PORT,SAMPLE_MERGE,MULTISET_ADD,HDFS_WRITE,THREAT_TRIAGE_REMOVE,STATS_POPULATION_VARIANCE,SYSTEM_PROPERTY_GET,INDEXING_SET_BATCH,KAFKA_PUT,IT_ENTROPY,FILTER,BIN,BLOOM_ADD,STATS_QUADRATIC_MEAN,STATS_MIN,SHELL_GET_EXPRESSION,ZIP_LONGEST,STATS_SUM,STATS_MERGE,STATS_PERCENTILE,SHELL_EDIT,GEOHASH_DIST,TO_DOUBLE,CONFIG_PUT,IS_DATE,ZIP,SQRT,JOIN,FUZZY_LANGS,LOCAL_LS,MAP_GET,OUTLIER_MAD_SCORE,GEOHASH_FROM_LATLONG,WEEK_OF_YEAR,STATS_MAX,CHOP,FUZZY_SCORE,SHELL_LIST_VARS,IS_NAN,SHELL_VARS2MAP,REGEXP_GROUP_VAL,SHODAN,ENRICHMENT_GET,STATS_SD,HASH,GEOHASH_FROM_LOC,MULTISET_MERGE,HLLP_INIT,GEO_GET,GET,STATS_COUNT,MAP,MAP_EXISTS,TO_LOWER,MAX,DAY_OF_MONTH,LENGTH,MAAS_MODEL_APPLY,GEOHASH_TO_LATLONG,PROFILER_APPLY,PROFILER_FLUSH,THREAT_TRIAGE_SET_AGGREGATOR,KAFKA_FIND,OUTLIER_MAD_STATE_MERGE,TO_EPOCH_TIMESTAMP,COS,URL_TO_PROTOCOL,THREAT_TRIAGE_ADD,PARSER_STELLAR_TRANSFORM_ADD,TO_JSON_OBJECT,STATS_MEAN,PROFILE_GET,TAN,LN,PARSER_STELLAR_TRANSFORM_REMOVE,SUBSTRING,MULTISET_REMOVE,HDFS_READ_LINES,LIST_ADD,MULTISET_TO_SET,PROFILER_INIT,DOMAIN_TYPOSQUAT,DOMAIN_TO_TLD,GET_HASHES_AVAILABLE,COUNT_MATCHES,HLLP_CARDINALITY,STARTS_WITH,ENRICHMENT_STELLAR_TRANSFORM_PRINT,SYSTEM_ENV_GET,LOG2,SAMPLE_INIT,HDFS_RM,STATS_BIN,TO_JSON_LIST,IS_EMAIL,INDEXING_SET_ENABLED,LOCAL_WRITE,REGEXP_MATCH,PROFILE_WINDOW,LOCAL_READ_LINES,ROUND,GET_LAST,THREAT_TRIAGE_PRINT,FILL_RIGHT,ENRICHMENT_STELLAR_TRANSFORM_REMOVE,IS_ENCODING,KAFKA_TAIL,SAMPLE_ADD,STATS_GEOMETRIC_MEAN,PREPEND_IF_MISSING,URL_TO_HOST,TLSH_DIST,MSEXCH_GET_USERID,IS_URL,SHELL_MAP2TABLE,EXP,STRING_ENTROPY
at
org.apache.metron.stellar.common.BaseStellarProcessor.createException(BaseStellarProcessor.java:166)
at
org.apache.metron.stellar.common.BaseStellarProcessor.parse(BaseStellarProcessor.java:154)
at
org.apache.metron.stellar.common.shell.DefaultStellarShellExecutor.executeStellar(DefaultStellarShellExecutor.java:405)
at
org.apache.metron.stellar.common.shell.DefaultStellarShellExecutor.execute(DefaultStellarShellExecutor.java:257)
at
org.apache.metron.stellar.common.shell.cli.StellarShell.execute(StellarShell.java:357)
at org.jboss.aesh.console.AeshProcess.run(AeshProcess.java:53)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at java.lang.Thread.run(Thread.java:748)
May I get help to resolve the issue.
Thanks,
Anil.
