I am not a netflow expert. I am not a codec expert. Really, not much of an expert in anything, just getting that out of the way.
I am receiving netflow events, most seem to be coming through OK. I'm not sure what to make of log entries like this, though:
[2017-01-20T13:14:55,290][WARN ][logstash.codecs.netflow ] Template length doesn't fit cleanly into flowset {:template_id=>256, :template_length=>48, :record_length=>196}
I feel like I should do something about that. Any ideas? Is this a bug or something? Netflow version mismatch? Something custom coming in?
Thanks!