Can't yet decode flowset id error when collecting netflow

I am running netflow inputs with s3 and file outputs. my output is JSON.
It's all working but I get these errors.

I'm not sure how to handle this. There is a Catalyst 6807 with Sup2T and an ASA sending the flows.

Please let me know if you need any other information. I've looked at some other similar issues but the resolutions don't seem to match up or be relevant.

I should add, these messages don't go away, even after hours.

[2019-09-20T09:14:38,316][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 257 from source id 263, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,329][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 256 from source id 262, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,338][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 256 from source id 263, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,350][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 256 from source id 257, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,364][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 257 from source id 257, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,972][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 263 from source id 0, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,981][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 263 from source id 0, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,981][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 265 from source id 0, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,988][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 256 from source id 262, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,997][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 256 from source id 262, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:38,998][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 256 from source id 262, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:39,029][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 256 from source id 262, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2019-09-20T09:14:39,031][WARN ][logstash.codecs.netflow  ] Can't (yet) decode flowset id 256 from source id 262, because no template to decode it with has been received. This message will usually go away after 1 minute.
[2```

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.