Netflow codec - ipfix documentation?


(Sliddjur) #1

According to this https://github.com/logstash-plugins/logstash-codec-netflow/commit/1ce994c643d32f4db1f0301f789b659c61c8accc it seems ipfix is supported in the codec.

The official documentation says nothing about it though, could someone point me to some examples on how to use them?

My logstash log just spits

[2016-12-14T10:51:13,531][WARN ][logstash.codecs.netflow  ] Invalid netflow packet received (End of file reached)
[2016-12-14T10:51:14,537][WARN ][logstash.codecs.netflow  ] Invalid netflow packet received (End of file reached)
[2016-12-14T10:51:15,531][WARN ][logstash.codecs.netflow  ] Invalid netflow packet received (End of file reached)

My test input filter

udp {
        port => 5044
        tags => ["netflow"]
        type => "netflow"
        codec => netflow {
                versions => [5,9,10]
                target => ipfix
        }
}

(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.