[jira] [Commented] (EAGLE-6) group-by user between bolts and spouts for hdfs/hive audit log monitoring

["Libin, Sun (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/EAGLE-6?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15004141#comment-15004141 ] 

Libin, Sun commented on EAGLE-6:
--------------------------------

Add a pull request for it:
https://github.com/eBay/Eagle/pull/30

> group-by user between bolts and spouts for hdfs/hive audit log monitoring
> -------------------------------------------------------------------------
>
>                 Key: EAGLE-6
>                 URL: https://issues.apache.org/jira/browse/EAGLE-6
>             Project: Eagle
>          Issue Type: Bug
>         Environment: production
>            Reporter: Edward Zhang
>            Assignee: Libin, Sun
>            Priority: Minor
>
> audit events should be partitioned by user in storm so that user window-based alert can make sense. Today Eagle partitions events by user from logstash or kafka log4j appender all the way down to spout, bolt, alert etc.
> But now between spout and bolt, user is not specified as the group-by key, we need fix that.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)