Also look in the error indexing topic if Solr or ES. And there should also be data written to HDFS, even in case of error. hdfs dfs -ls /apps/metron/indexing
On Wed, Sep 4, 2019 at 10:17 AM Hema malini <[email protected]> wrote: > Hi, > > I am using Metron 0.7.2. I have setup of three node cluster in centos 7. I > am sending syslog and bro logs to corresponding Kafka topic but it is not > reaching the bro or syslog storm topology. I could see the messages in the > consumer of kafka. But itis neither reaching the enrichment or bro nor > syslog3164. I couldn't find any error logs in storm(worker -artifacts not > updated with any logs) nor no error messages in Kafka. Can someone please > help to debug this issue. I could see only syslog5674 topic created. I > created manually the other syslog3164 Kafka topic. I was able to send logs > to syslog3164 and I could seethe messages in Kafka consumer. But nothing > has reached storm.can someone please help. > > Thanks and regards, > Hema >
