IP Address Enrichment

Overview

ElastiFlow NetObserv Flow provides the ability to enrich flow records based on IP address. Enrichment attributes fetched for a particular IP address will be cached by the collector.

Configurations

EF_PROCESSOR_ENRICH_IPADDR_TTL

The length of time the IP address enrichment attributes will be cached after they are initially fetched. This value is in units of seconds.

• Default

  • 7200 (2 hours)