Netifs.yml is not adding metadata to my records

Here is the contents of my netifs.yml:
192.168.2.78:
  56001:
    ifName: Et56/1
    ifDescr: Lumen
    ifAlias: Lumen
    ifSpeed: 100000000000
    tags:
      - ISP

I restart flowcoll, and I confirm that records with a host.ip of 192.168.2.78 are populating the index, but none of these additional parameters are seen in any of the documents.

Is EF_PROCESSOR_ENRICH_NETIF_METADATA_ENABLE set to true?
Is EF_PROCESSOR_ENRICH_NETIF_METADATA_USERDEF_PATH set to /etc/elastiflow/metadata/netifs.yml? (“If this value is undefined or empty, metadata enrichment will be disabled”)
Any issues reported in the flowcoll.log related to reading the netifs.yml file?

Do you have any records for that specific ifIndex after the restart?

Could the ifIndex have changed?

Regards,

Dexter

Thank you. I assumed if the USERDEF_PATH was not set it would just use the default location.

It should :slight_smile:

I have a bug ticket opened for that!

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.