[jira] [Commented] (METRON-348) bro-plugin-kafka is missing an important update

["Jon Zeolla (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/METRON-348?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15607144#comment-15607144 ] 

Jon Zeolla commented on METRON-348:
-----------------------------------

Another note regarding this - the looping approach in logs-to-kafka.bro will not work if you want to add a predicate, as is necessary right now because of the IPv6 issues, and send more than just one log to kafka.  IMO the best solution is to focus on the IPv6 support.  

> bro-plugin-kafka is missing an important update
> -----------------------------------------------
>
>                 Key: METRON-348
>                 URL: https://issues.apache.org/jira/browse/METRON-348
>             Project: Metron
>          Issue Type: Bug
>            Reporter: Jon Zeolla
>             Fix For: 0.2.1BETA
>
>         Attachments: logs-to-kafka.bro
>
>   Original Estimate: 2h
>  Remaining Estimate: 2h
>
> Metron's bro-plugin-kafka (https://github.com/apache/incubator-metron/tree/master/metron-sensors/bro-plugin-kafka) is missing an important update (https://github.com/bro/bro-plugins/commit/b9f1f35415cb0db065348da0a5043a8353b4a0a8).  I have opened a ticket with the bro devs in order to seek a long term resolution to this issue (https://github.com/bro/bro-plugins/issues/31).  
> My suggestion was to have the bro team update the bro/bro-plugins repo to turn folders (plugins) into individual branches so that they could be referenced and updated easily in Metron and other projects as a submodule.  I was going to wait to hear back before filing a PR, but I'm not against a short term fix of simply updating kafka/src/KafkaWriter.cc and kafka/src/KafkaWriter.h.  



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)