search

robcowart / elastiflow

Network flow analytics (Netflow, sFlow and IPFIX) with the Elastic Stack
Other
2.48k stars 592 forks source link

IPFIX field #95 (applicationId) type incorrect in ipfix.yml #235

Closed westafari closed 5 years ago

westafari commented 5 years ago

In elastiflow/logstash/elastiflow/definitions/ipfix.yml the application ID field is configured as follows:

95:

It should be:

95:

Using :string, Logstash 6.5.4, netflow codec 4.2.1 ingests field like this: "applicationId" => "\r\x00\x01\xC5"

robcowart commented 5 years ago

Thanks. I have committed the change for this in my development branch and will include it in the next release.