Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cherry-pick #13924 to 7.4: [SIEM] Fix wrong Netflow field names in template #14043

Merged
merged 1 commit into from
Oct 15, 2019
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 17 additions & 17 deletions filebeat/docs/fields.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -10180,7 +10180,7 @@ type: long
NetFlow version used.


type: long
type: integer

--

Expand Down Expand Up @@ -11549,28 +11549,28 @@ type: long

--

*`netflow.post_nast_ource_ipv4_address`*::
*`netflow.post_nat_source_ipv4_address`*::
+
--
type: ip

--

*`netflow.post_nadt_estination_ipv4_address`*::
*`netflow.post_nat_destination_ipv4_address`*::
+
--
type: ip

--

*`netflow.post_napst_ource_transport_port`*::
*`netflow.post_napt_source_transport_port`*::
+
--
type: integer

--

*`netflow.post_napdt_estination_transport_port`*::
*`netflow.post_napt_destination_transport_port`*::
+
--
type: integer
Expand Down Expand Up @@ -11941,14 +11941,14 @@ type: long

--

*`netflow.post_nast_ource_ipv6_address`*::
*`netflow.post_nat_source_ipv6_address`*::
+
--
type: ip

--

*`netflow.post_nadt_estination_ipv6_address`*::
*`netflow.post_nat_destination_ipv6_address`*::
+
--
type: ip
Expand Down Expand Up @@ -12242,14 +12242,14 @@ type: long

--

*`netflow.hash_ipp_ayload_offset`*::
*`netflow.hash_ip_payload_offset`*::
+
--
type: long

--

*`netflow.hash_ipp_ayload_size`*::
*`netflow.hash_ip_payload_size`*::
+
--
type: long
Expand Down Expand Up @@ -12305,14 +12305,14 @@ type: keyword

--

*`netflow.upper_cli_imit`*::
*`netflow.upper_ci_limit`*::
+
--
type: double

--

*`netflow.lower_cli_imit`*::
*`netflow.lower_ci_limit`*::
+
--
type: double
Expand Down Expand Up @@ -12599,14 +12599,14 @@ type: long

--

*`netflow.distinct_count_of_sourc_eipa_ddress`*::
*`netflow.distinct_count_of_source_ip_address`*::
+
--
type: long

--

*`netflow.distinct_count_of_destinatio_nipa_ddress`*::
*`netflow.distinct_count_of_destination_ip_address`*::
+
--
type: long
Expand Down Expand Up @@ -12711,14 +12711,14 @@ type: long

--

*`netflow.selector_itd_otal_flows_observed`*::
*`netflow.selector_id_total_flows_observed`*::
+
--
type: long

--

*`netflow.selector_itd_otal_flows_selected`*::
*`netflow.selector_id_total_flows_selected`*::
+
--
type: long
Expand Down Expand Up @@ -13005,7 +13005,7 @@ type: short

--

*`netflow.mib_object_valuei_pa_ddress`*::
*`netflow.mib_object_value_ip_address`*::
+
--
type: ip
Expand Down Expand Up @@ -13229,7 +13229,7 @@ type: long

--

*`netflow.max_bieb_ntries`*::
*`netflow.max_bib_entries`*::
+
--
type: long
Expand Down
2 changes: 1 addition & 1 deletion x-pack/filebeat/input/netflow/_meta/fields.header.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,6 +39,6 @@
How long the exporter process has been running, in milliseconds.

- name: version
type: int
type: integer
description: >
NetFlow version used.
34 changes: 17 additions & 17 deletions x-pack/filebeat/input/netflow/_meta/fields.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@
How long the exporter process has been running, in milliseconds.

- name: version
type: long
type: integer
description: >
NetFlow version used.

Expand Down Expand Up @@ -628,16 +628,16 @@
- name: ip_total_length
type: long

- name: post_nast_ource_ipv4_address
- name: post_nat_source_ipv4_address
type: ip

- name: post_nadt_estination_ipv4_address
- name: post_nat_destination_ipv4_address
type: ip

- name: post_napst_ource_transport_port
- name: post_napt_source_transport_port
type: integer

- name: post_napdt_estination_transport_port
- name: post_napt_destination_transport_port
type: integer

- name: nat_originating_address_realm
Expand Down Expand Up @@ -796,10 +796,10 @@
- name: connection_transaction_id
type: long

- name: post_nast_ource_ipv6_address
- name: post_nat_source_ipv6_address
type: ip

- name: post_nadt_estination_ipv6_address
- name: post_nat_destination_ipv6_address
type: ip

- name: nat_pool_id
Expand Down Expand Up @@ -925,10 +925,10 @@
- name: digest_hash_value
type: long

- name: hash_ipp_ayload_offset
- name: hash_ip_payload_offset
type: long

- name: hash_ipp_ayload_size
- name: hash_ip_payload_size
type: long

- name: hash_output_range_min
Expand All @@ -952,10 +952,10 @@
- name: selector_name
type: keyword

- name: upper_cli_imit
- name: upper_ci_limit
type: double

- name: lower_cli_imit
- name: lower_ci_limit
type: double

- name: confidence_level
Expand Down Expand Up @@ -1078,10 +1078,10 @@
- name: original_flows_completed
type: long

- name: distinct_count_of_sourc_eipa_ddress
- name: distinct_count_of_source_ip_address
type: long

- name: distinct_count_of_destinatio_nipa_ddress
- name: distinct_count_of_destination_ip_address
type: long

- name: distinct_count_of_source_ipv4_address
Expand Down Expand Up @@ -1126,10 +1126,10 @@
- name: flow_selected_flow_delta_count
type: long

- name: selector_itd_otal_flows_observed
- name: selector_id_total_flows_observed
type: long

- name: selector_itd_otal_flows_selected
- name: selector_id_total_flows_selected
type: long

- name: sampling_flow_interval
Expand Down Expand Up @@ -1252,7 +1252,7 @@
- name: mib_object_value_bits
type: short

- name: mib_object_valuei_pa_ddress
- name: mib_object_value_ip_address
type: ip

- name: mib_object_value_counter
Expand Down Expand Up @@ -1348,7 +1348,7 @@
- name: max_session_entries
type: long

- name: max_bieb_ntries
- name: max_bib_entries
type: long

- name: max_entries_per_user
Expand Down
2 changes: 1 addition & 1 deletion x-pack/filebeat/input/netflow/fields.go

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.