You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by "Jon Zeolla (JIRA)" <ji...@apache.org> on 2017/01/05 19:07:58 UTC

[jira] [Comment Edited] (METRON-571) Add stellar keywords for executing local commands

    [ https://issues.apache.org/jira/browse/METRON-571?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15802094#comment-15802094 ] 

Jon Zeolla edited comment on METRON-571 at 1/5/17 7:07 PM:
-----------------------------------------------------------

Big thanks for taking the first crack at this.  I'm going to think on this some more, but here are some initial thoughts to improve what you put together:
- Handle exit/return codes in a configurable way
- Add details to the tuple (timestamp, path, hash of path, return code)
- Provide arguments to the script* pulled from the tuple

\* This needs thoroughly vet and understood.  I'm working on the right approach for this and will report back when I have more details.


was (Author: zeolla@gmail.com):
Big thanks for taking the first crack at this.  I'm going to think on this some more, but here are some initial thoughts to improve what you put together:
- Handle exit/return codes in a configurable way
- Add details to the tuple (timestamp, path, hash of path, return code)
- Provide arguments to the script* pulled from the tuple

* This needs thoroughly vet and understood.  I'm working on the right approach for this and will report back when I have more details.

> Add stellar keywords for executing local commands
> -------------------------------------------------
>
>                 Key: METRON-571
>                 URL: https://issues.apache.org/jira/browse/METRON-571
>             Project: Metron
>          Issue Type: Improvement
>            Reporter: Jon Zeolla
>            Priority: Minor
>         Attachments: ExternalFunctions.java
>
>
> Stellar should have the ability to execute scripts on a server in order to undertake automated mitigation or alerting.  Perhaps SHELL_EXEC?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)