Logstash receives the attached packets (template and flow packets) but it seems to drop the flow packet with the error
[WARN ][logstash.codecs.netflow ] Can't (yet) decode flowset id 2048 from observation domain id 1010, because no template to decode it with has been received. This message will usually go away after 1 minute.
Subsequent flow packets seem to parsed and it is showing up in kibana UI.
I need help in figuring out why this first flow packet alone is dropped even though template packet is coming before the flow packet.
I'm using these versions
I have a netflow codec configuration for UDP messages similar to this
** versions => [5,9,10]**
** target => "ipfix"**
** cache_save_path => "/usr/..."**
** ipfix_definitions => "...path to ipfix.yml file"**
Always, the first flow packet for a new domain ID is dropped by logstash.