Hortonworks Cybersecurity Platform
Also available as:

Switching to Unified Enrichment Topology (Technical Preview)

Switching from the current split-join enrichment topology to the new unified enrichment topology can reduce the latency of enrichment messages and avoid overloading the enrichment cache during times of heavy traffic.

  1. Stop the Metron enrichment topology in Ambari.
    1. Click Metron Enrichment in the Summary list.
    2. Choose Stop from the menu next to Metron Enrichment / Metron.
  2. In the Enrichment tab, choose Unified from the Enrichment Topology menu.

    Where appropriate, the unified topology reuses the same settings from the split-join topology.
  3. Restart the enrichment topology in Ambari.
    Switching to the unified enrichment topology will require some tuning changes for your system.