https://community.cloudera.com/t5/Archives-of-Support-Questions/Error-Ingesting-Snort-data-into-Metron/m-p/128995#M43437 <P>Have setup an instance of Metron in a single instance VM, bro and yaf data is flowing through into elastic search indexes, however there seems to be an error with flume starting up to ingest the snort logs.</P><P>I am getting the below error in the flume logs, however I cannot see a reference to a /snort folder in the flume-snort.conf file.</P><PRE>13 Oct 2016 14:06:33,238 ERROR [main] (org.apache.flume.node.Application.main:307) - A fatal error occurred while running. Exception follows. org.apache.commons.cli.ParseException: The specified configuration file does not exist: /snort </PRE><P>Any help would be greatly appreciated.</P> Thu, 13 Oct 2016 21:27:29 GMT aaron_harris 2016-10-13T21:27:29Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Error-Ingesting-Snort-data-into-Metron/m-p/128995#M43437 <P>Have setup an instance of Metron in a single instance VM, bro and yaf data is flowing through into elastic search indexes, however there seems to be an error with flume starting up to ingest the snort logs.</P><P>I am getting the below error in the flume logs, however I cannot see a reference to a /snort folder in the flume-snort.conf file.</P><PRE>13 Oct 2016 14:06:33,238 ERROR [main] (org.apache.flume.node.Application.main:307) - A fatal error occurred while running. Exception follows. org.apache.commons.cli.ParseException: The specified configuration file does not exist: /snort </PRE><P>Any help would be greatly appreciated.</P> Thu, 13 Oct 2016 21:27:29 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Error-Ingesting-Snort-data-into-Metron/m-p/128995#M43437 aaron_harris 2016-10-13T21:27:29Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Error-Ingesting-Snort-data-into-Metron/m-p/128996#M43438 <P>In case anyone has the same issue I resolved by manually starting flume via shell access to the node;</P><PRE>/usr/hdp/current/flume-server/bin/flume-ng agent -n snort -c /usr/hdp/current/flume-server/conf -f /usr/hdp/current/flume-server/conf/flume-snort.conf</PRE> Fri, 14 Oct 2016 20:05:12 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Error-Ingesting-Snort-data-into-Metron/m-p/128996#M43438 aaron_harris 2016-10-14T20:05:12Z