Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can the Kibana dashboard decode the flowType to a string? #2056

Closed
antoninbas opened this issue Apr 9, 2021 · 3 comments · Fixed by #2102
Closed

Can the Kibana dashboard decode the flowType to a string? #2056

antoninbas opened this issue Apr 9, 2021 · 3 comments · Fixed by #2102
Assignees
Labels
kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence.

Comments

@antoninbas
Copy link
Contributor

Describe the problem/challenge you have
I was playing around with the latest flow visualization code. I realized that the Kibana dashboards we provide do not decode the flowType and display it as an integer:
image

Describe the solution you'd like
Is it possible to transform it to a string: "PodToExternal", etc. IIRC the protocol identifier is also encoded as an integer (e.g. 6) but displayed as a string in Kibana (e.g. TCP).
We may also want to document the different values for this field in https://github.com/vmware-tanzu/antrea/blob/main/docs/network-flow-visibility.md#ies-from-antrea-ie-registry. Even though this is provided by go-ipfix, I think users would expect to find that information in this document.

@antoninbas antoninbas added kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence. labels Apr 9, 2021
@srikartati
Copy link
Member

I think this is possible. Tagging @zyiou as she is more familiar with elk-flow-collector config code.

@zyiou
Copy link
Contributor

zyiou commented Apr 9, 2021

I think this is possible. Tagging @zyiou as she is more familiar with elk-flow-collector config code.

Yes we can do that. Do we also need a new filter for flow type?

@zyiou zyiou self-assigned this Apr 9, 2021
@srikartati
Copy link
Member

I think this is possible. Tagging @zyiou as she is more familiar with elk-flow-collector config code.

Yes we can do that. Do we also need a new filter for flow type?

Yes, that would be good. However, in the current dashboard with Pod-To-Pod and Pod-To-Service flows, only IntraNode and InterNode are applicable. We need to think of ways to display Pod-To-External flows.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants