search

robcowart / elastiflow

Network flow analytics (Netflow, sFlow and IPFIX) with the Elastic Stack
Other
2.49k stars 596 forks source link

Can I just enable one protocol? #680

Closed silenceleaf closed 3 years ago

silenceleaf commented 3 years ago

ElastiFlow support NetFlow, sFlow, IPFIX, to save memory, can I just enable one protocol?

robcowart commented 3 years ago

Unfortunately you cannot. Logstash doesn't allow for selective loading of parts of a pipeline. If you are looking for something that will use significantly less resources while still delivering better performance, you may want to try the beta release of the next-generation ElastiFlow collector.