Chapter 4. Analyzing Enriched Data Using Apache Zeppelin
Apache Zeppelin is a web-based notebook that supports interactive data exploration, visualization, sharing and collaboration. Hortonworks Cybersecurity Platform (HCP) users will use Zeppelin at two levels:
Senior analysts and data scientists can use Zeppelin to produce workbooks to analyze data and to create recreatable investigations or runbooks for junior analysts.
Junior analysts can use recreatable investigations or runbooks in Zeppelin to discover cybersecurity issues much like they do with the Metron Dashboard. However, Zeppelin can perform more complex calculations and handle larger groups of data.
This chapter describes how to analyze enriched data from HCP using the Zeppelin dashboard. This chapter contains the following sections: