Member since
07-27-2017
10
Posts
0
Kudos Received
1
Solution
My Accepted Solutions
Title | Views | Posted |
---|---|---|
839 | 08-03-2017 08:34 AM |
08-03-2017
08:34 AM
The issue was with logs which i was using. When i injected full logs from Paloalto firewall, the logs were being parsed, enriched and indexed. Hopefully this will be helpfull for others. Thanks, Bharath
... View more
07-27-2017
01:07 PM
Hi All, I am followed the steps mentioned in below link and setup SQUID topology. The logs are getting enriched and indexed and visible in Kibana. Now i need to add BasicPaloAltoFirewallParser(Paloalto topology). Below is config json file. { "parserClassName":"org.apache.metron.parsers.paloalto.BasicPaloAltoFirewallParser", "sensorTopic":"newPalto", "parserConfig": {
"timestampField": "timestamp"
} }
I dont see any errors, but the logs are not pushed into "enrichments" topic Any help would be much appreciated. Thanks
... View more
Labels:
- Labels:
-
Apache Metron
-
Apache Storm