You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Justin Leet (JIRA)" <ji...@apache.org> on 2016/11/02 22:30:58 UTC
[jira] [Updated] (METRON-520) /apps/metron/enrichment directory
does not get created for Metron cluster deployed via Ambari
[ https://issues.apache.org/jira/browse/METRON-520?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Justin Leet updated METRON-520:
-------------------------------
Fix Version/s: 0.2.2BETA
> /apps/metron/enrichment directory does not get created for Metron cluster deployed via Ambari
> ---------------------------------------------------------------------------------------------
>
> Key: METRON-520
> URL: https://issues.apache.org/jira/browse/METRON-520
> Project: Metron
> Issue Type: Bug
> Affects Versions: 0.2.1BETA
> Reporter: Neha Sinha
> Assignee: Justin Leet
> Fix For: 0.2.2BETA
>
>
> 1.Deploy Metron cluster via Ambari
> 2. Replay Bro logs to generate bro elasticsearch indices
> 3. The bro enriched and indexed data should be written to the HDFS at :-
> /apps/metron/enrichment
> The indexed data gets written to "/apps/metron/enrichment" for metron setups that get deployed via Ansible, however, this path does not get created for clusters deployed via Ambari.
> Output for "hdfs dfs -ls" command for clusters deployed via Ansible
> [hdfs@metron-ansible-3 ~]$ hdfs dfs -ls /apps/metron
> Found 2 items
> drwxrwxr-x - storm hadoop 0 2016-10-24 11:41 /apps/metron/enrichment
> drwxrwxr-x - hdfs hadoop 0 2016-10-24 11:03 /apps/metron/patterns
> Output for "hdfs dfs -ls" command for clusters deployed via Ambari
> [hdfs@metron-s-10 ~]$ hdfs dfs -ls /apps/metron
> Found 7 items
> -rwxr-xr-x 3 hdfs hdfs 13427 2016-10-25 10:02 /apps/metron/asa
> -rwxr-xr-x 3 hdfs hdfs 5203 2016-10-25 10:02 /apps/metron/common
> -rwxr-xr-x 3 hdfs hdfs 524 2016-10-25 10:02 /apps/metron/fireeye
> -rwxr-xr-x 3 hdfs hdfs 2552 2016-10-25 10:02 /apps/metron/sourcefire
> -rwxr-xr-x 3 hdfs hdfs 180 2016-10-25 10:02 /apps/metron/squid
> -rwxr-xr-x 3 hdfs hdfs 2221 2016-10-25 10:02 /apps/metron/websphere
> -rwxr-xr-x 3 hdfs hdfs 879 2016-10-25 10:02 /apps/metron/yaf
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)