IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
netflow
editnetflow
editThis is a community-maintained plugin!
The "netflow" codec is for decoding Netflow v5/v9 flows.
Synopsis
editThis plugin supports the following configuration options:
Required configuration options:
netflow { }
Available configuration options:
Details
edit
definitions
edit- Value type is path
- There is no default value for this setting.
Override YAML file containing Netflow field definitions
Each Netflow field is defined like so:
id: - default length in bytes - :name id: - :uintN or :ip4_addr or :ip6_addr or :mac_addr or :string - :name id: - :skip
See https://github.com/logstash-plugins/logstash-codec-netflow/blob/master/lib/logstash/codecs/netflow/netflow.yaml for the base set.