Hi. I am trying to use Humio to collect logs from my Sophos UTM 9 firewall. This works well except I have a wrinkle when looking at authentication failures. I can easily see authentication failures, as they are logged, however the reason for the failure…

I have recently installed the newest version of ELK stack 6.0.x and I receive this errors in logstash-plain.log: `[2017-11-30T11:27:11,235][WARN`` ][logstash.codecs.netflow ] Can't (yet) decode flowset id 260 from observation domain id 1, because no…