Hello,
Messages are coming in IPFIX input:
But they are not shown up when I click on “Show received messages” button:
When the Input is changed to without any definitions paths I get the following error in graylog logs:
Missing information element definitions for private enterprise number 45346
Missing information element definitions for private enterprise number 29305
which requires file definitions for both velocloud and ipfix.
When both definition files are in place I get
2021-06-09T07:31:57.281Z ERROR [DecodingProcessor] Unable to decode raw message RawMessage{id=c54e98d0-c8f4-11eb-a11d-005056919081, journalOffset=54629489, codec=ipfix, payloadSize=1742, timestamp=2021-06-09T07:31:57.277Z, remoteAddress=/172.23.9.132:46012} on input <60af6f3b3f1dd3671d48e2fc>.
2021-06-09T07:31:57.281Z ERROR [DecodingProcessor] Error processing message RawMessage{id=c54e98d0-c8f4-11eb-a11d-005056919081, journalOffset=54629489, codec=ipfix, payloadSize=1742, timestamp=2021-06-09T07:31:57.277Z, remoteAddress=/172.23.9.132:46012}
java.lang.NullPointerException: null
I tried to use accept messages on RAW/Plaintext UDP" Input. Messages were there but they looked as follows:
