IP Address Enrichment

Overview

ElastiFlow NetObserv Flow provides the ability to enrich flow records based on IP address. Enrichment attributes fetched for a particular IP address will be cached by the collector.

Configurations

EF_PROCESSOR_ENRICH_IPADDR_TTL

The length of time the IP address enrichment attributes will be cached after they are initially fetched. This value is in units of seconds.

  • Default

    • 7200 (2 hours)

Last updated

Was this helpful?