Get fresh updates from Hortonworks by email

Once a month, receive latest insights, trends, analytics information and knowledge of Big Data.


Sign up for the Developers Newsletter

Once a month, receive latest insights, trends, analytics information and knowledge of Big Data.


Get Started


Ready to Get Started?

Download sandbox

How can we help you?

* I understand I can unsubscribe at any time. I also acknowledge the additional information found in Hortonworks Privacy Policy.
closeClose button
June 27, 2016
prev slideNext slide

Apache Metron Tech Preview 2 Available Now!

Accelerated Threat Triage and Expanded Deployment Options

Two months ago, the Metron Engineering and PM team  released  Technical Preview 1 of Apache Metron based on the 0.1 release. We shared our vision for an open community based cybersecurity solution that provides real-time, cross-referenced and contextualized big data to combat cyber threats.

Apache Metron Reference Architecture

Metron Architecture - 12

As the above diagram illustrates, Apache Metron provides a real-time security stream processing pipeline to parse, enrich, apply threat intel, triage and store telemetry events generated from the diverse classes of data sources.

Metron exposes a Telemetry Ingest Buffer as a gateway into the pipeline which allows tools like Apache NiFi to stream data into the platform or with custom performant network data collectors that are part of Metron that stream data like pcap and netflow into the platform. Once the processing pipeline completes, Metron exposes a set of data services and integration that powers or will power a set of extensible modules that support the following capabilities:

  • Security Data Vault – Long Term Storage of All Telemetry Data ingested, parsed, and enriched by Metron
  • Search Portal – Index Store that indexes the Telemetry Events and an UI portal to search for the events
  • Provisioning, Management and Monitoring Tooling – Tooling to provision, manage and monitor the platform
  • Community Analytical Models – A set of analytical models and packs developed in the community

What’s new in Apache Metron TP2?

Since the first tech preview released on April 19 2016, the Apache Metron community has been hard at work on Apache Metron Technical Preview 2 (TP2) which is based on the Apache Metron 0.2 release. Apache Metron is designed on four core functional themes to meet the specific user needs of SOC personnel and we are excited to announce today that Metron TP2 has new areas of functionality to address these personas. New capabilities available through TP2 are: accelerated threat triage capability, that alleviates the time-consuming, serial nature of threat triage today, and expanded deployment options that allows Metron to be installed anywhere – on-prem, or in the cloud.

Metron TP2 Features & Enhancements

With TP2, we  focused on 3  user personas: SOC Analyst, Investigator and the Security Platform Engineer. For these 3 personas, TP2 delivers the following capabilities across the 4 functional themes described above.  

TP2 Feaures

How do I get Started with TP2?

With support of provisioning Metron on any Ambari managed HDP 2.4 cluster, you can now spin up Metron TP2 in two ways:

  • Ansible based Vagrant Single Node VM Install – This is a great place to start as an introduction to Apache Metron. Detailed installation instructions can be found here: Dev VM Install
  • Cloud-based install for a complete 10 Node Metron Cluster using Ambari Blueprints and AWS APIs – If you want a more realistic setup of the Metron app, you can install it on AWS. Keep in mind that this install will spin up 10 m4.xlarge EC2 instances by default. Detailed installation instructions can be found here: Cloud Install
  • Fully Automated Installation of  Metron on any HDP 2.4  cluster managed by Ambari. The cluster can be running on bare-metal, public/private cloud provider, etc. Detailed instructions can be found here: Metron Installation on an Ambari Managed Cluster

Where do I get Help?

Hortonworks has created a new Community Cybersecurity Track in HCC.  Metron subject matter experts are answering questions and moderating the new Track for anything related to Apache Metron and Cybersecurity. When asking a question about Metron TP2, select “CyberSecurity” Track and add the following tags: “Metron” and “tech-preview”.

See below for more details:

Metron HCS Help


Funtaastic says:

Very Nice Article. Thanx For Sharing. Funtaastic | A Blog for Quotes & Status

Lyricab | A Platform for Lyrics

Best Christmas Status & Quotes Status

Happy New Year Quotes & Status

Happy Anniversary Quotes & Status

Angry Quotes & Status

Alone Quotes & Status

Attitude Quotes & Status

Awkward Moments Quotes & Status

Awesome Moments Quotes & Status

Adventurous Quotes & Status

jinay says:

Thanks for your best informative post.APACHE METRON TECH PREVIEW 2 just i love it thanks for the share.

imessage for pc
imessage for windows

SSS says:

ipl 2018

ico list says:

ico calendar platform to provide further assurance of the highest quality.current ico will also provide more useful data for specific customers to facilitate.

aaa says:

ipl match


BTC Wires BTC Wires is an online digital media platform which provides information for the crypto and blockchain technology fraternity. Our focus is to provide readers and experts with the latest developments and news related to the crypto world.

Filmywap says:

Watch full Bollywood movies Filmywap
Watch full Bollywood movies Filmywap 2018
Watch full Bollywood movies Filmywap Movies
Watch full Bollywood movies Filmywap 2017

Adam says:

Do check out

Vidmate says:


php training in gurgoan says:

php training in gurgoan
php training in delhi
We have partnership with companies, industries and individuals for their needs, providing training and skill
development programs with live projects that helps working professionals and fresher’s to achieve their career
goals. Now a days, getting a good job is as difficult as beating the crowd because being in the corporate world
demands a lot from the applicant because every company wants a skilled and trained professional.

Cosine Rule says:

Cosine Rule

Shyam verma says:

online quiz
Quizwave is an online exam software for coaching institute, colleges, university, and can be accessed on laptop, tablet, mobile phone.

percantage increase formula says:

Percentage Increase Formula

percantage increase formula says:

Percentage Increase Formula

percantage increase formula says:

Percentage Increase Formula

percantage increase formula says:

Percentage Increase Formula

uc mini says:

nice one keep going well says:

Filmywap says:

Filmywap Filmywap is a brand of movies where you can download and also watch all Bollywood and Hollywood movies. Filmywap is so famous website in India and also people love this website.

garmin nuvi says:

cheap flight to denver

cheap flights vegas

cheap flights to vancouver

cheap flights to florida

Install garmin express

garmin express not working

mobile app development in dubai says:

mobile app development in dubai Dubai is a developed country in the world. As, technology is growing day by day, mobile app dependency is also increasing by its users. Nowadays, there is mostly an app available for everything like transportation, buying & selling, entertainments and food ordering. Therefore, making each and everything smooth, software companies are always looking for creative fields to outgrow their business.

Leave a Reply

Your email address will not be published. Required fields are marked *

If you have specific technical questions, please post them in the Forums