VNet Flowlog with Plugin

[aekanunphanphomma]

We are trying to use your plugin to visualize VNet Flowlog on Kibana via Logstash. However, we are facing a lack of input from the storage account. Not sure if this is due to the plugin still being developed or if we are having issues due to an incorrect Logstash configuration. Please assist. Thank you.

logstash.conf.json

[janmg]

This plugin does not directly have support for vnetflowlogs, you would need to parse them with the logtype raw. Because of that you need to split and filter with the correct timestamps. I don't know which parameters are supposed to be used for vnetflowlogs, but from the picture you posted, I think you are picking the date from when the logfiles are written and not the timestamp from each individual event.

I don't think the plugin drops events, unless there is some errors in the logfiles

[janmg]

please change your passwords.

when I have time, I'll add explicit support for vnetflowlogs. I already added a commit, but didn't test it yet.