Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

filtering netflow fields #192

Closed
Alisher-Nabiev opened this issue May 19, 2024 · 2 comments
Closed

filtering netflow fields #192

Alisher-Nabiev opened this issue May 19, 2024 · 2 comments

Comments

@Alisher-Nabiev
Copy link

Hi, I am using NetFlow to receive data from a port. I am trying to filter the data and output certain fields to Elasticsearch.

This is the information that I am trying to read off :
"last_switched",
"first_switched",
"in_pkts",
"input_snmp",
"output_snmp",
"src_tos",
"ipv4_next_hop",
"dst_mask",
"src_mask",
"tcp_flags",
"in_dst_mac",
"out_src_mac",
"postNATSourceIPv4Address",
"postNATDestinationIPv4Address",
"postNAPTSourceTransportPort",
"postNAPTDestinationTransportPort",
"fsId",

but didn't find any way to filter the incoming data.
can someone pls guide me on how can i achieve this?

@lmangani
Copy link
Member

Hello @Alisher-Nabiev
You should be able to use the omit filter for this task

@Alisher-Nabiev
Copy link
Author

thanks helped a lot!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants