Dear all, I completely build apache metron cluster with MaaS instance. When I test my Metron system, I encounter with problem as below: - When I don't use MaaS, my Metron system can handle a lot of messages in high speed. - When I use MaaS, Metron system stuck after some minutes while handle a lot of message. Logs which I receive: org.apache.kafka.clients.consumer.CommitFailedException: Commit cannot be completed since the group has already rebalanced and assigned the partitions to another member. This means that the time between subsequent calls to poll() was longer than the configured session.timeout.ms, which typically implies that the poll loop is spending too much time message processing. You can address this either by increasing the session timeout or by reducing the maximum size of batches returned in poll() with max.poll.records Anybody please help me to solve this problem. Thanks a lot. ... View more

Dear all, I have just install Metron with REST API completely. Now I can query, create, delete configuration through rest api. But I wonder how I can protect my configuration. Example: userA create some parser, enrichments, indexing configuration and userB can not query, delete them. Current version of Metron support this features? Please give me an advice. Thanks. ... View more

Now I following your instruction to add a Threat Intel for alerting in Metron framework: https://community.hortonworks.com/articles/31812/applying-threat-intel-feeds-to-telemetry-events-wi.html I do it successfully. But now I want to add more condition for alerting ex: if my messages have method=GET AND/OR ip_dest_addr=x.x.x.x, we will alert or something like that. Any document or another instruction to solve it. Please help me.Thanks ... View more