Java Parsers

The Java parser is written in Java and conforms with the MessageParser interface. This kind of parser is optimized for speed and performance and is built for use with higher-velocity topologies.

Java parsers are not easily modifiable; to make changes to them, you must recompile the entire topology.

Currently, the Java adapters included with CCP are as follows:

  • org.apache.metron.parsers.ise.BasicIseParser

  • org.apache.metron.parsers.bro.BasicBroParser

  • org.apache.metron.parsers.sourcefire.BasicSourcefireParser

  • org.apache.metron.parsers.lancope.BasicLancopeParser

  • org.apache.metron.parsers.syslog.Syslog5424Parser
  • org.apache.metron.parsers.syslog.Syslog3164Parser
  • org.apache.metron.parsers.cef.CEFParser
  • org.apache.metron.parsers.leef.LEEFParser