Hi Logstash Megaminds, I'm using my Logstash instance as an sFlow collector, and it works great. When I read the documentation on the sFlow Codec , I see this: By default [some sFlow] fields are removed from [every] event ... You can tune the list of removed fields by setting this parameter to …

It should be an array , and it is an option for the codec, not for the input, so I would expect udp { port => 6343 codec => sflow { optional_removed_field => [] } } to work.

system (system) Closed August 13, 2020, 7:25pm 4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Sflow support Logstash	1	306	January 16, 2019
SFLOW Codec plugin input format Logstash	1	908	February 5, 2018
Logstash sflow Logstash	15	9685	July 6, 2017
Question regarding new logstash / netflow config Logstash	6	3276	July 11, 2016
Logstash sflow codec Logstash	2	3561	March 5, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash sFlow Codec Input Syntax :: Implement "optional_removed_field"?

Related topics