You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 3 Next »

Metron Streaming is a module that deals with stream processing including telemetry ingest, enrichment, threat intelligence referencing, alerting, and real-time scoring of machine learning models.  Metron Streaming is built on top of Apache Storm, which is a massively scalable stream processing engine with unique properties that make it a good fit for processing networking and logging data.  Telemetry generated by various sensors is processed by Metron's Storm topologies.  There are three topology types.  The first type is a PCAP topology, which is a topology dedicated to capturing and storing network packets.  The PCAP topology is designed to process telemetry produced by Metron's PCAP Probe and it's output is designed to be visualized by Metron's PCAP Service.  

 

 

  • No labels