Filebeats NetFlow: Events dropped due to out of range of long value

[stephenb (Stephen Brown)]

Closed Dup Of

Netflow.flow_id data type incorrectly set to long instead of unsigned-long

In /etc/filebeats/fields.yaml file, netflow.flow_id is set to type long. - name: flow_id type: long As per NetFlow standard, it should be unsigned long. Because of this, events are getting dropped with error: (status=400): {\"type\":\"document_parsing_exception\",\"reason\":\"[1:1477] failed to parse field [netflow.flow_id] of type [long] in document with id 'Lba4XZYB_Zr7jpsbS6pn'. Preview of field's value: '11133470846251699209'\",\"caused_by\":{\"type\":\"x_content_parse…