NetFlow

The netflow log type records NetFlow events used during integration testing.

The following code snippet contains all the raw_field and ecs mappings for this log type:

"mappings": [
    {
      "raw_field":"netflow.source_ipv4_address",
      "ecs":"source.ip"
    },
    {
      "raw_field":"netflow.source_transport_port",
      "ecs":"source.port"
    },
    {
      "raw_field":"netflow.destination_ipv4_address",
      "ecs":"destination.ip"
    },
    {
      "raw_field":"netflow.destination_transport_port",
      "ecs":"destination.port"
    },
    {
      "raw_field":"http.request.method",
      "ecs":"http.request.method"
    },
    {
      "raw_field":"http.response.status_code",
      "ecs":"http.response.status_code"
    },
    {
      "raw_field":"timestamp",
      "ecs":"timestamp"
    }
  ]