Skip to content

Instantly share code, notes, and snippets.

@gt50
Created October 24, 2014 02:11
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save gt50/7cadde47cbbb5a7a1fee to your computer and use it in GitHub Desktop.
Save gt50/7cadde47cbbb5a7a1fee to your computer and use it in GitHub Desktop.
netflow.conf for logstash (not working with ASA)
input {
udp {
port => 6343
codec => netflow { versions => [ 5, 9] }
type => "netflow"
}
}
output {
if [type] == "netflow" {
elasticsearch { host => localhost }
file {
path => "/var/log/logstash/rawdata.log"
type => "netflow"
}
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment