Joost-Eijgenbrood
commented
5 years ago Actually, this seems to be more of an Arista-issue. The logical LAG interfaces themselves export sFlow just fine, but the member interfaces seem to be causing these alerts... maybe because they're only exporting counters? As a workaround I have disabled sflow exporting on the individual LAG-members.
Here the output from one of my switches, where you can see that the members (Ethernet51 & 52) are not exporting flows;
switch#show sflow interfaces
Default sFlow configuration for an interface: Enable
sFlow Interface (s):
--------------------
Ethernet1 - running(Flow,Counter)
Ethernet2 - running(Flow,Counter)
Ethernet3 - running(Flow,Counter)
Ethernet4 - running(Flow,Counter)
Ethernet5 - running(Flow,Counter)
Ethernet6 - running(Flow,Counter)
Ethernet7 - running(Flow,Counter)
Ethernet8 - running(Flow,Counter)
Ethernet9 - running(Flow,Counter)
Ethernet10 - running(Flow,Counter)
Ethernet11 - running(Flow,Counter)
Ethernet12 - running(Flow,Counter)
Ethernet13 - running(Flow,Counter)
Ethernet14 - running(Flow,Counter)
Ethernet15 - running(Flow,Counter)
Ethernet16 - running(Flow,Counter)
Ethernet17 - running(Flow,Counter)
Ethernet18 - running(Flow,Counter)
Ethernet19 - running(Flow,Counter)
Ethernet20 - running(Flow,Counter)
Ethernet21 - running(Flow,Counter)
Ethernet22 - running(Flow,Counter)
Ethernet23 - running(Flow,Counter)
Ethernet24 - running(Flow,Counter)
Ethernet28 - running(Flow,Counter)
Ethernet31 - running(Flow,Counter)
Ethernet32 - running(Flow,Counter)
Ethernet45 - running(Flow,Counter)
Ethernet47 - running(Flow,Counter)
Ethernet48 - running(Flow,Counter)
Ethernet50 - running(Flow,Counter)
Ethernet51 - running(Counter)
Ethernet52 - running(Counter)
Port-Channel1 - running(Flow,Counter)
switch#
Hi!
I'm running version 2.0.2 of the sFlow codec, but I'm still seeing issues with LAG interfaces. My logs are full with the following message;
[2019-01-09T18:12:00,676][WARN ][logstash.codecs.sflow ] Unknown record entreprise 0, format 7This LAG-support was supposed to be added about two years ago, so I'm not sure what's going wrong here. Can you please advise?
Thanks! Joost