The "netflow" codec is for decoding Netflow v5/v9 flows.
This plugin supports the following configuration options:
Required configuration options:
netflow {
}Available configuration options:
- Value type is path
- There is no default value for this setting.
Override YAML file containing Netflow field definitions
Each Netflow field is defined like so:
--- id: - default length in bytes - :name id: - :uintN or :ip4_addr or :ip6_addr or :mac_addr or :string - :name id: - :skip
See https://github.com/logstash/logstash/tree/v2.0.0.dev/lib/logstash/codecs/netflow/netflow.yaml for the base set.
- Value type is string
-
Default value is
"netflow"
Specify into what field you want the Netflow data.
- Value type is array
-
Default value is
[5, 9]
Specify which Netflow versions you will accept.