Hello Metron community,

Hoping for some help. I published this on the Metron slack channel, and
thought to also post in this user forum in case there might be someone here
that could help out.

We have set up two Metron instance, one as a dev environment and another as
a user acceptance testing (uat) environment. Both of these instances are
integrated with the same kafka instance.

We are observing that data is being indexed in both of these environments.
For example, if we push data on the dev environment, it is indexing in the
dev elasticsearch cluster as well as the uat elasticsearch cluster (even if
Metron does not have that specific sensor in the uat instance/environment).

We have tried to change the kafka group.id's, the kafka topic names for
enrichment and indexing and have updated the topic names in the
random_access remote.yml file (and also for batch indexing) with respect to
flux, as well as updating the relevant properties in the files which start
the various storm topologies (i.e. start_elasticsearch_topology.sh, etc).

Could anyone provide some help/guidance on how to stop the indexing in both
elasticsearch clusters?

Thanking you in advance for any support.

Reply via email to