Enriching Telemetry Events
Also available as:

Switching to Unified Enrichment Topology

Switching from the split-join enrichment topology to the unified enrichment topology can reduce the latency of enrichment messages and avoid overloading the enrichment cache during times of heavy traffic.

  1. Stop the Metron enrichment topology in Ambari.
    1. Click Metron Enrichment in the Summary list.
    2. Choose Stop from the menu next to Metron Enrichment / Metron.
  2. In the Enrichment tab, choose Unified from the Enrichment Topology menu.

    Where appropriate, the unified topology reuses the same settings from the split-join topology.
  3. Verify that the unified topology settings are appropriate for your system.
  4. Restart the enrichment topology in Ambari.