...
{
"config" : {
"columns" : {
"domain" : 0
,"owner" : 1
,"home_country" : 2
,"registrar": 3
,"domain_created_timestamp": 4
}
,"indicator_column" : "domain"
,"type" : "whois"
,"separator" : ","
}
,"extractor" : "CSV"
}
And another config to load the zookeper reference
"zkQuorum" : "node1:2181"
,"sensorToFieldList" : {
"bro" : {
"type" : "ENRICHMENT"
,"fieldToEnrichmentTypes" : {
"url" : [ "whois" ]
}
}
}
}
Which means that the system will map the whois enrichment to the field URL. Then execute the following command:
/usr/metron/0.1BETA/bin/flatfile_loader.sh -n enrichment_config.json -i /path/to/my.csv -t enrichment -c t -e extractor_config.json
After this your enrichment data will be loaded in Hbase and a Zookeeper mapping will be established.