3 ms·

Sure, just gotta spin up an elastic stack and find the right netflow parser! I know you know. Netflow to me is like snmp, supposedly easy but really not. Maybe

• Jedd 3y ago
  I played with Elastiflow extensively some years ago - it was excellent, if a little hungry on memory, but I suspect most of that was the logstash & elasticsearch overhead. Rob did a big rewrite about 4 years ago, I think, licensing the new codebase in a way that led us to look elsewhere. There's some alternatives that aren't elastic under the hood, of course. The hard-to-type Akvorado looks very promising, especially given its heritage: https://github.com/akvorado/akvorado https://github.com/akvorado/akvorado Because we're moving to opentel / prometheus, this project (seems quite active) is especially interesting, with the promise of integrating OS & app metrics, tracing, and netflow insights: https://github.com/netobserv/flowlogs-pipeline https://github.com/netobserv/flowlogs-pipeline