Closed westafari closed 5 years ago
In elastiflow/logstash/elastiflow/definitions/ipfix.yml the application ID field is configured as follows:
95:
It should be:
Using :string, Logstash 6.5.4, netflow codec 4.2.1 ingests field like this: "applicationId" => "\r\x00\x01\xC5"
Thanks. I have committed the change for this in my development branch and will include it in the next release.
In elastiflow/logstash/elastiflow/definitions/ipfix.yml the application ID field is configured as follows:
95:
It should be:
95:
Using :string, Logstash 6.5.4, netflow codec 4.2.1 ingests field like this: "applicationId" => "\r\x00\x01\xC5"