Need help about eagle's data flow.Thanks!

[绿飕飕 <qi...@gmail.com>]

*1.* For Install 'Hdfs Audit Log Monitor', I have set following config:

    1.create two kafka topics: *hdfs_audit_log_sandbox*,
*hdfs_audit_log_enriched_sandbox*

    2.stream audit log into topic *hdfs_audit_log_sandbox*

    3.Kafka Consumer Topic for HDFS Auditlog : *hdfs_audit_log_sandbox*

    4. Kafka Topic for Auditlog Event Sink:
*hdfs_audit_log_enriched_sandbox*

    5. The Policy is from *HDFS_AUDIT_LOG_ENRICHED_STREAM_SANDBOX* insert
into *hdfs_audit_log_enriched_stream_out*


(a).  But the monitor not work, are there any error about set these config?

(b). I think some topic such as hdfs_audit_log_enriched_stream_out will be
create by eagle, is it right?


*2.* Is it right of the data flow?Or I miss some steps ?

data flow:   a-b-c-d-e-f

a. hdfa --> *hdfs_audit_log*

b. kafka topic -->  *hdfs_audit_log_sandbox*


 c.* HDFS_AUDIT_LOG_ENRICHED_STREAM_SANDBOX :*

        storm Spouts --> parserBolt

        storm Bolts --> sensitivityJoin

        storm Bolts --> ipZoneJoin

        storm Bolts -->kafkaSink

d. kafka topic --> *hdfs_audit_log_enriched_sandbox*​


e. the Policy handle the *hdfs_audit_log_enriched_sandbox* and send the
alert result to *hdfs_audit_log_enriched_stream_out*

f. the error message would put into the storage



*3. *could you recommend the version about the dependence of eagle v0.5.0?


Thanks,

    Qilv Wu