File tree Expand file tree Collapse file tree 1 file changed +5
-0
lines changed Expand file tree Collapse file tree 1 file changed +5
-0
lines changed Original file line number Diff line number Diff line change @@ -104,6 +104,11 @@ You use Logstash to flatten the JSON formatted flow logs to a flow tuple level.
104
104
" protocol" => " %{[records][properties][flows][flows][flowTuples][5]}"
105
105
" trafficflow" => " %{[records][properties][flows][flows][flowTuples][6]}"
106
106
" traffic" => " %{[records][properties][flows][flows][flowTuples][7]}"
107
+ " flowstate" => " %{[records][properties][flows][flows][flowTuples][8]}"
108
+ " packetsSourceToDest" => " %{[records][properties][flows][flows][flowTuples][9]}"
109
+ " bytesSentSourceToDest" => " %{[records][properties][flows][flows][flowTuples][10]}"
110
+ " packetsDestToSource" => " %{[records][properties][flows][flows][flowTuples][11]}"
111
+ " bytesSentDestToSource" => " %{[records][properties][flows][flows][flowTuples][12]}"
107
112
}
108
113
add_field => {
109
114
" time" => " %{[records][time]}"
You can’t perform that action at this time.
0 commit comments