metron-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "George Vetticaden (JIRA)" <>
Subject [jira] [Updated] (METRON-209) SiLK Data Services for Metron
Date Mon, 06 Jun 2016 12:02:20 GMT


George Vetticaden updated METRON-209:
    Labels: ForwardLookingEpic  (was: )

> SiLK Data Services for Metron
> -----------------------------
>                 Key: METRON-209
>                 URL:
>             Project: Metron
>          Issue Type: Wish
>            Reporter: George Vetticaden
>              Labels: ForwardLookingEpic
> All telemetry data gets stored into the security valuat of metron which is HDFS. For
this dataset, we need provide a set of data services that incorproates the SiLK tooling. 
> A SiLK installation consists of two categories of applications: the packing system and
the analysis suite. The packing system collects IPFIX, NetFlow v9, or NetFlow v5 and converts
the data into a more space efficient format, recording the packed records into service-specific
binary flat files. The analysis suite consists of tools which read these flat files and perform
various query operations, ranging from per-record filtering to statistical analysis of groups
of records. The analysis tools interoperate using pipes, allowing a user to develop a relatively
sophisticated query from a simple beginning.
> The goal should be to use thej SiLK analysis suite on the data in the Metron Security

This message was sent by Atlassian JIRA

View raw message