Configuration Reference Overview

This section provides a reference of all configuration options. This includes the following categories:

Common

• Licensing
• Logging
• API
• Outputs
  • stdout
  • Monitor
  • Cribl Stream
  • Elasticsearch
  • Generic HTTP
  • Kafka
  • OpenSearch
  • Splunk HEC

The Unified Flow Collector

• Upgrading to 6.0
• Licensing
• Inputs
  • UDP Server
  • AWS VPC FLow Logs
  • Benchmark
• Decoder/Processor
• Sampling Rates
• Enrichment
  • General Settings
  • Application Attributes
  • IP Addresses
    • Name Resolution
    • Maxmind ASN & GeoIP
    • RiskIQ PassiveTotal
    • User-Defined Metadata
  • Network Interfaces
    • Option Records
    • SNMP
    • User-Defined Metadata
  • Community & Conversation IDs

The Unified SNMP Collector

• Licensing
• SNMP Poller
• Processor
• Enrichment
  • IP Addresses
    • Name Resolution
    • User-Defined Metadata

Further Resources

📄️ YAML Configuration Files

While we have added support for configuration via YAML files in 6.3.0, the default method of configuration remains the use of environment variables set in the systemd unit file for the collector daemon. For example, /etc/systemd/system/flowcoll.service.d/flowcoll.conf for the Unified Flow Collector binary flowcoll.

🗃️ Common Options

5 items

🗃️ Unified Flow Collector

6 items

🗃️ Unified SNMP Collector

4 items