metron-docker/compose/hbase/conf/enrichment-extractor.json

{
  "config" : {
    "columns" : {
      "ip" : 0
    ,"message" : 1
    }
  ,"indicator_column" : "ip"
  ,"type" : "sample"
  ,"separator" : ","
  }
,"extractor" : "CSV"
}