Netflow codec not working as expected

Elastic Stack Logstash
1

I've just installed the logstash 6.1.1.1-1 rpm on CentOS 7 and am having trouble getting the netflow codec to work as expected. It appears as if "/usr/share/logstash/modules/netflow/configuration/logstash/netflow.conf.erb" is not getting evaluated (the netflow data model is not getting translated to the common format that happens in the filter within netflow.conf.erb). The filter works fine if I copy it to my /etc/logstash/conf.d/netflow.conf.

Any idea why it's behaving like this?

Thanks,
Justin

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.