Ipfix data isn't showed up in Kibana dashboard

Elastic Stack Kibana
1

Hello, I'm a newer in ELK and started support already deployed environment.
The thing is we have netflow and ipfix data. Both are correct found in Kibana discovery, but only netlow is visualized in Dashboard. I've tried to find any filters which can or should manage it, but without success.
So I need your help or at least a hyperlink to article.

Thank you in advance!

2

Hey @Big_Ben, Dashboards contains visualizations, which themselves display the data which is stored in Elasticsearch. Is there a specific Visualization which isn't displaying the data you're looking for? Are you using the Dashboards which filebeat automatically created for you? If so, these Visualizations are likely built to only pull in data from the filebeat-* indices, so they're missing the ipfix data.

3

My colleague has just found out that there was a necessary filter on Logstash which was disabled.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.