[METRON-514] Snort kafka topic fails to get any data on a setup running for several days

• Type: Bug
• Status: Done
• Priority: Major
• Resolution: Done
• Fix Version/s: 0.3.0
• Assignee: Ryan Merriman
• Reporter: Ryan Merriman
• Created: 25/Oct/16 13:57
• Updated: 11/Nov/16 15:03
• Resolved: 07/Nov/16 16:40

Description

After a cluster has been running for a while, data will suddenly stop being written to the snort Kafka topic. Other topics like yaf and bro continue to work. The difference between those sensors and snort is that snort logs are fed into Kafka with Flume.

Issue Links

• links to: GitHub Pull Request #323