Processor configuration options

EF_PROCESSOR_TRAP_DSL_ENABLE

Set this to false to disable trap DSL processing. Traps will be collected and normalized, but not processed via the DSL.

• Valid Values

  • true, false
• Default

  • true

EF_PROCESSOR_TRAP_DSL_ENUM_DEFINITIONS_DIRECTORY_PATH

The DSL Processor also supports enumerations for enrichment, which are used to define a set of constants that can be used in rules. Enumerations are defined in a set of files and are used to define a set of constants that can be used in rules.

• Default

  • /etc/elastiflow/snmp/enums

EF_PROCESSOR_TRAP_DSL_RULES_DIRECTORY_PATH

The DSL Processor is powered by a set of rules that are defined in a set of files. Each rule is defined in a separate file and is composed of a set of conditions and actions. The conditions are used to filter incoming traps, while the actions are used to transform and enrich the traps.

• Default

  • /etc/elastiflow/snmp/traps/rules

EF_PROCESSOR_TRAP_DSL_GENERIC_FILE_PATH

The Generic file is used to load rules for generic traps.

• Default

  • /etc/elastiflow/snmp/traps/generic.yml

EF_PROCESSOR_TRAP_DSL_ENTERPRISE_FILE_PATH

The Enterprise file is used as a mapping between Enterprise OIDs and rules files. The enterprise OIDs are used to identify the vendor of the trap.

• Default

  • /etc/elastiflow/snmp/traps/enterprises.yml

More Options

For more process configuration options, see our list of common processor options