stephenb
April 22, 2025, 2:42pm
2
Hi @vjineo Welcome to the community.
What version are you on?
Looks like a duplicate of this... Please be patient new users it take a few minutes for topics to show up. I will close that one.
Most of the events are dropped with below error:
{\"type\":\"document_parsing_exception\",\"reason\":\"[1:1475] failed to parse field [netflow.flow_id] of type [long] in document with id 'M7a4XZYB_Zr7jpsbS6pn'. Preview of field's value: '11133470849011551241'\",\"caused_by\":{\"type\":\"x_content_parse_exception\",\"reason\":\"[1:1495] Numeric value (11133470849011551241) out of range of long (-9223372036854775808 - 9223372036854775807)\\n
As per standard, netflow.flow_id is unsigned64. But Fi…
Ohhh I think you will need to set that to keyword, I see on the other modules it is set to keyword
- name: flow_id
type: keyword
It might be worth opening an Issue....