You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Nick Allen (JIRA)" <ji...@apache.org> on 2018/11/15 20:40:00 UTC

[jira] [Updated] (METRON-1874) Create a Parser Debugger

     [ https://issues.apache.org/jira/browse/METRON-1874?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Nick Allen updated METRON-1874:
-------------------------------
    Description: 
Users need a way to test their parser configurations in a controlled environment. This would allow a user to tweak and test the parser configuration before deploying it into a live Metron cluster.  The user could also use the REPL to understand why a particular message failed to parse correctly.

This could follow the pattern of the [Profiler Debugger|https://github.com/apache/metron/tree/master/metron-analytics/metron-profiler#creating-profiles] and [Threat Triage Simulator|https://github.com/apache/metron/tree/master/metron-platform/metron-management#simulate-threat-triage-rules]. This allows a user to apply canned messages against a configuration and inspect the output, all within the REPL.

  was:
Users need a way to test their parser configurations in a controlled environment. This would allow a user to tweak and test the parser configuration before deploying it into a live Metron cluster.  The user could also use the REPL to understand why a particular message failed to parse correctly.

This could follow the pattern of the [Profiler Debugger|https://github.com/apache/metron/tree/master/metron-analytics/metron-profiler#creating-profiles] and [Threat Triage Simulator|https://github.com/apache/metron/tree/master/metron-platform/metron-management#simulate-threat-triage-rules]. This allows a user to apply canned messages against a configuration and inspect the output, all within the REPL.

These tools can also help users build up their configuration without having to write as much JSON.


> Create a Parser Debugger
> ------------------------
>
>                 Key: METRON-1874
>                 URL: https://issues.apache.org/jira/browse/METRON-1874
>             Project: Metron
>          Issue Type: Bug
>            Reporter: Nick Allen
>            Assignee: Nick Allen
>            Priority: Major
>
> Users need a way to test their parser configurations in a controlled environment. This would allow a user to tweak and test the parser configuration before deploying it into a live Metron cluster.  The user could also use the REPL to understand why a particular message failed to parse correctly.
> This could follow the pattern of the [Profiler Debugger|https://github.com/apache/metron/tree/master/metron-analytics/metron-profiler#creating-profiles] and [Threat Triage Simulator|https://github.com/apache/metron/tree/master/metron-platform/metron-management#simulate-threat-triage-rules]. This allows a user to apply canned messages against a configuration and inspect the output, all within the REPL.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)