Configuration Reference Overview

This section provides a reference of all configuration options. This includes the following categories:

Common

• Licensing
• Logging
• API
• Outputs
  • stdout
  • Monitor
  • Cribl Stream
  • Elasticsearch
  • Generic HTTP
  • Kafka
  • OpenSearch
  • Splunk HEC

NetObserv Flow

• Upgrading to 6.0
• Licensing
• Inputs
  • UDP Server
  • AWS VPC Flow Logs - Firehose
  • AWS VPC Flow Logs - S3
  • Benchmark
• Decoder/Processor
• Sampling Rates
• Enrichment
  • General Settings
  • Application Attributes
  • IP Addresses
    • ElastiFlow NetIntel
    • Name Resolution
    • Maxmind ASN & GeoIP
    • User-Defined Metadata
  • Network Interfaces
    • Option Records
    • SNMP
    • User-Defined Metadata
  • Community & Conversation IDs

NetObserv SNMP

• Licensing
• SNMP Poller
• Processor
• Enrichment
  • IP Addresses
    • Name Resolution
    • User-Defined Metadata

Further Resources

📄️ YAML Configuration Files

ElastiFlow now supports YAML configuration files for all binaries, with a default file location of /etc/elastiflow/.yml. These YAML files are compatible with all existing ElastiFlow settings, which are documented in the Configuration Reference.

📄️ Upgrading to 7.0

Upgrading to 7.0

📄️ Upgrading to 6.0

Configuration Changes

🗃️ Common Options

5 items

🗃️ NetObserv Flow

5 items

🗃️ NetObserv SNMP

4 items