Member since
09-11-2017
6
Posts
0
Kudos Received
0
Solutions
11-29-2017
02:50 AM
Dear all, I completely build apache metron cluster with MaaS instance. When I test my Metron system, I encounter with problem as below: - When I don't use MaaS, my Metron system can handle a lot of messages in high speed. - When I use MaaS, Metron system stuck after some minutes while handle a lot of message. Logs which I receive: org.apache.kafka.clients.consumer.CommitFailedException: Commit cannot be
completed since the group has already rebalanced and assigned
the partitions to another member. This means that the time between subsequent
calls to poll() was longer than the configured session.timeout.ms,
which typically implies that the poll loop is spending too much time message
processing. You can address this either by increasing the
session timeout or by reducing the maximum size of batches returned in poll()
with max.poll.records Anybody please help me to solve this problem. Thanks a lot.
... View more
Labels:
11-20-2017
01:12 AM
Dear rmerriman, thanks for your answer. I will find another solution to solve it 🙂
... View more
11-10-2017
12:30 PM
Dear all, I have just install Metron with REST API completely. Now I can query, create, delete configuration through rest api. But I wonder how I can protect my configuration. Example: userA create some parser, enrichments, indexing configuration and userB can not query, delete them. Current version of Metron support this features? Please give me an advice. Thanks.
... View more
Labels:
09-11-2017
06:58 AM
Now I following your instruction to add a Threat Intel for alerting in Metron framework: https://community.hortonworks.com/articles/31812/applying-threat-intel-feeds-to-telemetry-events-wi.html I do it successfully. But now I want to add more condition for alerting ex: if my messages have method=GET AND/OR ip_dest_addr=x.x.x.x, we will alert or something like that. Any document or another instruction to solve it. Please help me.Thanks
... View more
Labels: