You can pull the Docker image for the new collector HERE
PLEASE NOTE: This repository remains for historical purposes, however no part of this legacy solution is shared with the next generation of ElastiFlow™. To install the new solution please refer to the documentation at docs.elastiflow.com. For assistance with the new solution, please join the ElastiFlow Community Slack.
Now that the new ElastiFlow™ Unified Flow Collector is generally available, the legacy Logstash-based solution in this repository is deprecated. It will remain here for historical purposes, but will not receive updates. You are encouraged to try out the new collector. See more details below.
The next generation of ElastiFlow™ introduces the new ElastiFlow Unified Flow Collector for Netflow, IPFIX, sFlow and AWS VPC Flow Logs.
Enhancements provided in the all-new collector include:
Proper management templates from different devices. - NO MORE template conflicts!
Improved Scalability - Over 20x more flows/sec than Logstash, over 6x more than Filebeat!
Support for Option Templates - Dynamic enrichment of network interface name and application names and more!
Telemetry Support - sFlow Counter Samples and other metrics from Cisco, Calix and more!
Gracefully handles “unknown” Fields - No more dropped flows when a single unsupported field is encountered.
Fully decodes and translates all available data - DSCP, TCP Options, ECN, Fragmentation Flags, and more.
Get Started with the next generation of ElastiFlow... HERE
You can also join the ElastiFlow community Slack... HERE