The legacy ElastiFlow is deprecated. TRY THE NEW ELASTIFLOW!!!

[robcowart]

This legacy version of ElastiFlow™ is now deprecated.

Try the new ElastiFlow™!!!

PLEASE NOTE: This repository remains for historical purposes, however no part of this legacy solution is shared with the next generation of ElastiFlow™. To install the new solution please refer to the documentation at docs.elastiflow.com. For assistance with the new solution, please join the ElastiFlow Community Slack.

Now that the new ElastiFlow™ Unified Flow Collector is generally available, the legacy Logstash-based solution in this repository is deprecated. It will remain here for historical purposes, but will not receive updates. You are encouraged to try out the new collector. See more details below.

We have released the next generation of ElastiFlow™ which introduces the new ElastiFlow Unified Flow Collector for Netflow, IPFIX and sFlow.

Some of the enhancements included in the all-new collector include:

• Proper management templates from different devices. - NO MORE template conflicts!
• Improved Scalability - Over 10x more flows/sec than Logstash, over 3x more than Filebeat!
• Support for Option Templates - Dynamic enrichment of network interface name and application names and more!
• Telemetry Support - sFlow Counter Samples and other metrics from Cisco, Calix and more!
• Gracefully handles “unknown” Fields - No more dropped flows when a single unsupported field is encountered.
• Fully decodes and translates all available data - DSCP, TCP Options, ECN, Fragmentation Flags, and more.

Get Started with the next generation of ElastiFlow... HERE

You can also join the ElastiFlow community Slack... HERE