Hi all,
I've configured the dell sonicwall to send it's ipfix through port 2055 to our collector.
I am seeing the regular sonicwall events, but when i do index=sonicwall, i only see events like this:
tid=555 total_data_count=0 total_data_size_kb=0 total_discard_count=0
There is never any numbers above 0 or different than 555. I've read about people changing the "Source IP to use for collector on a vpn tunnel" to 0.0.0.0 (we have yet to restart firewall so maybe that'll work) but still, we aren't seeing anything.
I'm able to telnet to the collector through port 2055.. i've also verified it's listening. i've also set up the correct data input for dell_ipfix.
Please help as there is little to no support for this.
↧