Closed
Description
For all general issues, please provide the following details for fast resolution:
- Version: 6.3.2
- Operating System: Redhat
- Config File (if you have sensitive info, please remove it):
input {
udp {
port => "4001"
codec => netflow {
versions => 10
cache_save_path => "/tmp/netflow_template"
include_flowset_id => true
cache_ttl => 999999999
}
type => "ipfix"
}
}
Hi, I'm trying to ingest netflow data from IXIA packet broker into elastic, but it seems that the plugin cannot find the template in the traffic.
I've aldready verify using a wireshark capture that the template is arriving.
Continously I get:
Can't (yet) decode flowset id 256 from observation domain id 0, because no template to decode it with has been received. This message will usually go away after 1 minute.
Netflow is generated with IXIA packet broker.
Regards
Ana
Metadata
Metadata
Assignees
Labels
No labels