This could be interesting and useful. A “scalable, advanced security analytics framework” built with parts from the Hadoop ecosystem.
The Apache Software Foundation Announces Apache® Metron™ as a Top-Level Project : The Apache Software Foundation Blog
https://blogs.apache.org/foundation/entry/apache-software-foundation-announces-apache