Add New Data Source to the Metron Dashboard
After a new data telemetry source has been added to HCP, you must add it to the Metron dashboard before you can create queries and filters for it and add telemetry panels displaying its data.
Hortonworks Cybersecurity Platform
Also available as:
- Introduction to the HCP Runbook
- Adding a New Telemetry Data Source
- Transform the Squid Message
- Enriching Telemetry Events
- Enriching Threat Intelligence Information
- OPTIONAL: Create a Mock Threat Intel Feed Source
- Configure an Extractor Configuration File
- Using Stellar Data to Transform Threat Intelligence Data
- Configure Element-to-Threat Intelligence Feed Mapping
- Run the Threat Intelligence Loader
- Map Fields to HBase Enrichments
- Verify That the Threat Intel Events Are Enriched
- Prioritizing Threat Intelligence
- Configuring Indexing
- Setting Up a Profile
- Triage Squid Events
- Testing