Hello, Hope all of you are fine,
I recently started learning Apache Metron and I have been performing the squid tutorial for the last week.
(I installed HDP 3.1.4 on Ambari 2.7.3 with HCP 2.0.0.0)
The problem I am facing is that my logs aren't showing the the alerts UI.
I have already defined a elasticsearch index template with the two fields "metron_alert" and "alert"
Here is the sensor information
parser logs are being created in kibana
Below is the index template
when you run
GET alert_ui_test_*
Below is the sensor and enrichment config
When I see the logs at /var/log/metron/metron-rest.log
I see this error , but not sure about what it is