[METRON-1742] Improve CEF log management throughout

• Type: Improvement
• Status: To Do
• Priority: Minor
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Jon Zeolla
• Created: 23/Aug/18 14:37
• Updated: 23/Aug/18 14:37

Description

There are numerous potential improvements to the CEF parser.

• A confusing test URL here<https://github.com/apache/metron/blob/9fdccba371c1f1e0dcb79e00a7207a934b79b64c/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/cef/CEFParserTest.java#L199>
• A noop test here<https://github.com/apache/metron/blob/9fdccba371c1f1e0dcb79e00a7207a934b79b64c/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/cef/CEFParserTest.java#L225-L228>
• An unclear test based on the prior bullet here<https://github.com/apache/metron/blob/9fdccba371c1f1e0dcb79e00a7207a934b79b64c/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/cef/CEFParserTest.java#L187>
• A lack of an ES template here<https://github.com/apache/metron/tree/9fdccba371c1f1e0dcb79e00a7207a934b79b64c/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/package/files>
• A lack of integration tests here<https://github.com/apache/metron/tree/9fdccba371c1f1e0dcb79e00a7207a934b79b64c/metron-platform/metron-integration-test/src/main/sample/data>

Sub-Tasks

• CEF testPaloAltoCEF test using a confusing variable name: Done
• CEF test runTest doesn't consider targetJson: To Do
• CEF runTest test isn't properly leveraging an explicit json sample: To Do
• CEF lacks an ES template: To Do
• CEF has no integration tests: To Do