Hello.
Looking at the documentation on the enrichment of network interfaces, it would seem that the network interfaces are uniquely identified by the exporter and the interface index.
In our case it would be necessary to also use the observation domain id as a discriminant.
Is it possible or are developments planned?
Regards,
Andrea
Hey Andrea!
As long as you can deploy a collector on each observation domain, you can achieve this alread, as the metadata enrichment file is local to the collector. If that isn’t the case, we have a feature request open for this already to allow more granularity in enrichment within the same collector. I’m not expecting this do be done for another 2-3 months though.
Thanks for the info.
Unfortunately we have a single exporter with many observation domains.
In detail, there are some firewalls that send flow data to a central management server and then the server can export those data via Netflow/IPFIX.
Management server is the exporter and firewalls are the observation domains.
Regards,
Andrea