Netflow module (7.6): only one of two exporters is being parsed

I'm having trouble with receiving netflow from two different exporters by Filebeats Netflow module, ver 7.6. While one works just fine, the other one is completely ignored. I don't see any errors when it comes to parsing, or anything at all about the second one, even with debug logging. Confirmed with tcpdump the flows are being received from both, on the same port of the same interface. Exporters are different, but both are using v10 (IPFIX).

I'm lost how to troubleshoot this.

--Alex

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.