Netflow v9 not being recieved over UDP

[Sjaak01 (Sjaak)]

Found your topic after opening mine. I have the same issue after updating from 5.4 to 5.6.

5.6.1 Netflow not working

Hi, I've updated from 5.4 to 5.6.1 so I could use the latest netflow codec with support for Fortigate devices but now I got no netflow data coming in anymore. I did not change the config and logstash log shows no errors. config input { udp { port => 9995 type => "netflow" codec => netflow { } } } filter { mutate { add_field => { "[netflow][ipv4_dst_host]" => "%{[netflow][ipv4_dst_addr]}" "[netflow][ipv4_src_host]" => "%{[netflow][ipv4_src_addr]}" } } if…

Lets hope somebody can help...