metron-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "George Vetticaden (JIRA)" <>
Subject [jira] [Created] (METRON-209) SiLK Data Services for Metron
Date Mon, 06 Jun 2016 12:01:21 GMT
George Vetticaden created METRON-209:

             Summary: SiLK Data Services for Metron
                 Key: METRON-209
             Project: Metron
          Issue Type: Wish
            Reporter: George Vetticaden

All telemetry data gets stored into the security valuat of metron which is HDFS. For this
dataset, we need provide a set of data services that incorproates the SiLK tooling. 

A SiLK installation consists of two categories of applications: the packing system and the
analysis suite. The packing system collects IPFIX, NetFlow v9, or NetFlow v5 and converts
the data into a more space efficient format, recording the packed records into service-specific
binary flat files. The analysis suite consists of tools which read these flat files and perform
various query operations, ranging from per-record filtering to statistical analysis of groups
of records. The analysis tools interoperate using pipes, allowing a user to develop a relatively
sophisticated query from a simple beginning.

The goal should be to use thej SiLK analysis suite on the data in the Metron Security Vault.

This message was sent by Atlassian JIRA

View raw message