The documentation (Network fields) specifies the field "network.bytes" is the sum of "source.bytes" and "destination.bytes".
In my case this fields are missing. I have only this values :
- netflow.octet_delta_count
- netflow.packet_delta_count
- netflow.post_octet_delta_count
- netflow.post_packet_delta_count
On the other side, Meraki specifies (Meraki netflow overview) the netflow template sent and specially two field used to collect bytes :
- bytes
- out_bytes
I don't understand why I have differents values, the relationship between them and how the network.bytes is calculated. Is this possible to have some explication about this ?