From 2356fb44a945a9df20333234905a66ece16db0fc Mon Sep 17 00:00:00 2001 From: tomtrenz <54180346+tomtrenz@users.noreply.github.com> Date: Fri, 16 Aug 2019 16:11:31 +0200 Subject: [PATCH] Enable Flow sequence information in IPFIX IPFIX contain this infromation in flow --- lib/logstash/codecs/netflow.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/logstash/codecs/netflow.rb b/lib/logstash/codecs/netflow.rb index 4a4b18b..b5dc738 100644 --- a/lib/logstash/codecs/netflow.rb +++ b/lib/logstash/codecs/netflow.rb @@ -45,7 +45,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base 4 => :scope_netflow_cache, 5 => :scope_template, } - IPFIX_FIELDS = ['version'] + IPFIX_FIELDS = ['version', 'flow_seq_num'] SWITCHED = /_switched$/ FLOWSET_ID = "flowset_id"