SnortParser? is ok , It will parse snort log file become my specific form.
Next step will code SnortBase? to upload the parsed file into Hbase;