Most parsers for Metron should be written as Grok Parsers except when the telemetry is either very high velocity or very complex so it's not possible to write a Grok statement for it.  All metron Java parsers should extend the Metron Parser Base and output a valid Metron JSON Object.   

  • No labels