search

logstash-plugins / logstash-codec-netflow

Apache License 2.0
78 stars 88 forks source link

netflow - Can't (yet) decode flowset id 8000 from source id 258 #170

Closed zmeng20171123 closed 5 years ago

zmeng20171123 commented 5 years ago

input { udp { port => 6000 codec => netflow { versions => [9] type => netflow } } }

output { stdout { codec => rubydebug } if ( [host] =~ "10.30.30].[0-2][0-9][0-9]" ) { elasticsearch { index => "Router_Switch_NF-%{+YYYY.MM.dd}" } } else { elasticsearch { index => "Router_Switch_NF_Other-%{+YYYY.MM.dd}" } } }