Known Differences Between HCP 1.3.2 and Apache Metron 0.4.1
The following Apache bugs identify known differences between HCP 1.3.2 and Apache Metron 0.4.1.
Table 1.5. Known Differences Between HCP 1.3.2 and Apache Metron 0.4.1
| Feature | Description |
|---|---|
| Added validation of "shew.enrichmentType" and "shew.keyColumns" closes apache/incubator-metron#732 | |
| "service metron-rest start <password>" does not work on CentOS 7. (justinleet) closes apache/metron#757 | |
| Add forensic similarity hash functions to Stellar closes apache/incubator-metron#781 | |
| Metron 0.4.0 manual installation guide for CentOS 6 updates (lvets via ottobackwards) closes apache/metron#661 | |
| Address checkstyle warning AvoidStarImport in metron-stellar (dbist via ottobackwards) closes apache/metron#664 | |
| Address javadoc warnings in metron-stellar (dbist via ottobackwards) closes apache/metron#668 | |
| STELLAR NaN should be a keyword (ottobackwards) closes apache/metron#681 | |
| Fix Alerts and Ops UI Notices file (james-sirota) closes apache/metron#682 | |
| METRON-1081 | Fix Alerts and Ops UI Notices file (james-sirota) closes apache/metron#682 |
| Add filters using faceted search capabilities of metron-rest-api (iraghumitra via james-sirota) closes apache/metron#710 | |
| Add REST endpoint to save a user profile for the Alerts UI (merrimanr) closes apache/metron#694 | |
| Add group by capabilities to search REST endpoint (merrimanr) closes apache/metron#702 | |
| Add group by option using faceted search capabilities of metron-rest-api (iraghumitra via james-sirota) closes apache/metron#768 | |
| Add ability to parse JSON string into JSONObject for stellar closes apache/incubator-metron#727 | |
| METRON-1153 | HDFS HdfsWriter never recovers from exceptions closes apache/incubator-metron#741 |
| Simulate Triage Rules in the Stellar REPL (nickwallen) closes apache/metron#733 | |
| Build backend for grouping alerts into meta alerts (justinleet) closes apache/metron#734 | |
| Add ability to edit parser command line options in the management UI (merrimanr) closes apache/metron#737 | |
| METRON-1163 | RAT failures for metron-interface/metron-alerts closes apache/incubator-metron#743 |
| Define Session Specific Global Configuration Values in the REPL (nickwallen) closes apache/metron#740 | |
| METRON-1168 | Add SUBSTRING method to stellar this closes apache/incubator-metron#742 |
| METRON-1169 | Dependency checker has not been running in travis closes apache/incubator-metron#744 |
| METRON-1171 | Better validation for the SUBSTRING stellar function closes apache/incubator-metron#745 |
| Fix pointers to old stellar docs closes apache/incubator-metron#746 | |
| REST: HDFS Service should support setting permissions on files when writing (ottobackwards) closes apache/metron#749 | |
| METRON-1177 | Stale running topologies seen post-kerberization and cause exceptions (nickwallen) closes apache/metron#748 |
| Make STATS_ADD to take a list closes apache/incubator-metron#750 | |
| Make Stellar Shell accept zookeeper quorum as a CSV list and not require a port closes apache/incubator-metron#751 | |
| Refactor Code in alert list to accommodate new view types (iraghumitra via merrimanr) closes apache/metron#756 | |
| Improve KDC Setup Instructions (nickwallen) closes apache/metron#753 | |
| Stellar REPL does not work on a kerberized cluster when calling functions interacting with HBase closes apache/incubator-metron#755 | |
| Profiler Functions use classutils from shaded storm closes apache/incubator-metron#758 | |
| Indexing/Profiler Kafka ACL Groups Not Setup Correctly (nickwallen) closes apache/metron#759 | |
| Ambari global configuration management (mmiklavc) closes apache/metron#760 | |
| Add alert escalation to the Alerts UI (merrimanr) closes apache/metron#762 | |
| Fix Meta Alert Type handling in calculation of scores (justinleet) closes apache/metron#763 | |
| Update public web site to point at 0.4.1 new release (mattf-horton) closes apache/metron#764 | |
| Add Profiler Debug Functions to Profiler README (nickwallen via ottobackwards) closes apache/metron#765 | |
| Meta alerts improperly handle updates to non-alert fields (justinleet) closes apache/metron#766 | |
| METRON-1196 | Increment master version number to 0.4.2 for on-going development (mattf-horton) closes apache/metron#767 |
| Pycapa - No such configuration property 'sasl.kerberos.principal' (nickwallen) closes apache/metron#769 | |
| ElasticsearchDao Has extraneous sleep call (justinleet) closes apache/metron#770 | |
| UI does not time out after being idle, but stops functioning (merrimanr) closes apache/metron#771 | |
| Make alerts UI conform to ops UI for install (merrimanr) closes apache/metron#773 | |
| Make RPMs for Alerts UI (merrimanr) closes apache/metron#777 | |
| MPack for Alerts UI (merrimanr) closes apache/metron#778 | |
| Make stellar repl take logging properties, like other CLI apps in metron closes apache/incubator-metron#772 | |
| Fix link to RPMs chapter (DimDroll via justinleet) closes apache/metron#776 | |
| Metron REST should return better error messages (merrimanr) closes apache/metron#779 | |
| Create documentation around alert nested field (justinleet) closes apache/metron#780 | |
| Fix warning for The expression ${parent.version} is deprecated. Please use ${project.parent.version} instead. (dbist via mmiklavc) closes apache/metron#782 | |
| Add support to add comments for alerts (iraghumitra via james-sirota) closes apache/metron#788 | |
| Add time range selection to search control (iraghumitra via james-sirota) closes apache/metron#796 | |
| Searching Can Errantly Query the Wrong Indices (nickwallen) closes apache/metron#793 | |
| Configuration Management PUSH immediately does DUMP after (mmiklavc via mmiklavc) closes apache/metron#783 | |
| Management UI type is part of the declarations of 2 modules (merrimanr) closes apache/metron#784 | |
| Alert status changes are not reflected in list view (iraghumitra via merrimanr) closes apache/metron#787 | |
| Fix for WARNING 'dependencies.dependency.(groupId:artifactId:type:classifier)' must be unique: org.apache.hadoop:hadoop-yarn-api:jar (dbist via mmiklavc) closes apache/metron#790 | |
| Document the properties pulled from the global configuration closes apache/incubator-metron#791 | |
| Address javadoc warnings in metron-maas-common (dbist via james-sirota) closes apache/metron#792 | |
| Address javadoc warnings in metron-platform and metron-analytics (dbist via james-sirota) closes apache/metron#794 | |
| Enable the REST API to use a cache for the zookeeper config similar to the Bolts closes apache/incubator-metron#795 | |
| Add a REST endpoint which allows us to get a list of all indice closes apache/incubator-metron#797 | |
| REST search and findOne endpoints return unexpected or incorrect results for guids (justinleet) closes apache/metron#798 | |
| Improve Metron MPack Service Checks (nickwallen) closes apache/metron#799 | |
| Typo and formatting fixes for metron-rest README closes apache/incubator-metron#800 | |
| METRON-1252 | Bug fixes |
| METRON-1254 | Conditionals as map keys do not function in Stellar closes apache/incubator-metron#801 |
| MetaAlert search is not filtering on status (merrimanr) closes apache/metron#802 | |
| Include Alerts UI in Ambari Service Check (nickwallen) closes apache/metron#804 | |
| METRON-1261 | Apply Bro security patch (JonZeolla via ottobackwards) closes apache/metron#805 |
| Unable to add comment for a alert in a meta-alert (merrimanr) closes apache/metron#806 | |
| Start Alerts UI service after Metron REST (anandsubbu via nickwallen) closes apache/metron#807 | |
| Profiler - SASL Authentication Failed (nickwallen) closes apache/metron#809 | |
| Alerts UI returns a 404 when refreshing the alerts-list page (merrimanr) closes apache/metron#808 | |
| Fix for warnings missing @return tag argument in metron-analytics/metron-profiler-common and metron-profiler-client closes apache/incubator-metron#810 | |
| Hide child alerts from searches and grouping if they belong to meta alerts (justinleet) closes apache/metron#811 | |
| Master has failure in StormControllerIntegrationTest (merrimanr) closes apache/metron#813 | |
| METRON-1275 | Fix Metron Documentation closes apache/incubator-metron#833 |
| Strip "Build Status" widget from root README.md in site-book build (mattf-horton) closes apache/metron#815 | |
| METRON-1280 | 0.4.1 -> 0.4.2 missed a couple of projects (cestella via justinleet) closes apache/metron#816 |
| METRON-1282 | Remove hard-coded indices from the Alerts UI (merrimanr) closes apache/metron#821 |
| METRON-1283 | Install Elasticsearch template as a part of the mpack startup scripts (anandsubbu via nickwallen) closes apache/metron#817 |
| METRON-1284 | Remove extraneous dead query in ElasticsearchDao (justinleet) closes apache/metron#818 |
| METRON-1287 | Full Dev Fails When Installing EPEL Repository (nickwallen) closes apache/metron#820 |
| METRON-1289 | Alert fields are lost when a MetaAlert is created (merrimanr) closes apache/metron#824 |
| METRON-1290 | Only first 10 alerts are update when a MetaAlert status is changed to inactive (justinleet) closes apache/metron#842 |
| METRON-1291 | Kafka produce REST endpoint does not work in a Kerberized cluster (merrimanr) closes apache/metron#826 |
| METRON-1294 | IP addresses are not formatted correctly in facet and group results (merrimanr) closes apache/metron#827 |
| METRON-1295 | Unable to Configure Logging for REST API (nickwallen) closes apache/metron#828 |
| METRON-1296 | Full Dev Fails to Deploy Index Templates (nickwallen via cestella) closes apache/incubator-metron#829 |
| METRON-1301 | Alerts UI - Sorting on Triage Score Unexpectedly Filters Some Records (nickwallen) closes apache/metron#832 |
| METRON-1307 | Orce install of java8 since java9 does not appear to work with the scripts (brianhurley via ottobackwards) closes apache/metron#835 |
| METRON-1309 | Change metron-deployment to pull the plugin from apache/metron-bro-plugin-kafka (JonZeolla) closes apache/metron#837 |
| METRON-1310 | Template Delete Action Deletes Search Indices (nickwallen) closes apache/metron#838 |
| METRON-1311 | Service Check Should Check Elasticsearch Index Templates (nickwallen) closes apache/metron#839 |
| METRON-1319 | Column Metadata REST service should use default indices on empty input (merrimanr) closes apache/metron#843 |
| METRON-1321 | Metaalert Threat Score Type Does Not Match Sensor Indices (nickwallen) closes apache/metron#845 |