You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 5 Current »

Metron Streaming is a module that deals with stream processing including telemetry ingest, enrichment, threat intelligence referencing, alerting, and real-time scoring of machine learning models.  Metron Streaming is built on top of Apache Storm, which is a massively scalable stream processing engine with unique properties that make it a good fit for processing networking and logging data.  Telemetry generated by various sensors is processed by Metron's Storm topologies.  There are three topology types.  

 

Topology NameDescriptionArchitecture Reference
   
   
PCAP TopologyThe PCAP topology is designed to process telemetry produced by Metron's PCAP Probe and it's output is designed to be visualized by Metron's PCAP Service.   

 

 

 

 

 

  • No labels