Netflow.conf.erb need help updating

Elastic Stack Logstash
1

Hi,

There is some code I need help updating with this file. According to a log from cisco they have changed the format they are sending the bytes in. instead of in_permanent like in the file, they are using another format. How can this file get updated to reflect the changes?

New fields 231 (initiatorOctets) and 232 (responderOctets) will replace

field 85 (IN_PERMANENT_BYTES) along with real-time flow update support in

8.4(5) and later software. However, it may take a bit for third-party Netflow

Collectors to pick up these new fields as they come from IPFIX rather than

legacy Netflow V9 world.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.