How to Define Elastic Search Templates for Apache Metron

When you onboard a new data source on Apache Metron and you use Elastic Search (ES) as your indexing + search engine you need to specify and submit an ES template before the indexing topology attempts the first write to the ES cluster. The template should contain the following items: Dynamic fields for possible geo enrichments of any ip address field, dynamic fields for other kinds … Continue reading How to Define Elastic Search Templates for Apache Metron