Fix detect_sequence_reset flag in netflow module (#24270) (#24458)

This flag was not passed to the input unless set to true, which is the default. It was impossible to turn it off. Fixes #24268 (cherry picked from commit 22e20a1)
elastic · Mar 22, 2021 · 5bac682 · 5bac682
1 parent bf4fdb2
commit 5bac682
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 2 deletions.
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -257,6 +257,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Fix default `scope` in `add_nomad_metadata`. {issue}24559[24559]
 - Fix Cisco ASA parser for message 722051. {pull}24410[24410]
 - Fix `google_workspace` pagination. {pull}24668[24668]
+- Fix netflow module ignoring detect_sequence_reset flag. {issue}24268[24268] {pull}24270[24270]
 
 *Heartbeat*
 

diff --git a/x-pack/filebeat/module/netflow/log/config/netflow.yml b/x-pack/filebeat/module/netflow/log/config/netflow.yml
@@ -27,9 +27,7 @@ custom_definitions:
 {{end}}
 {{end}}
 
-{{ if .detect_sequence_reset}}
 detect_sequence_reset: {{.detect_sequence_reset}}
-{{end}}
 
 tags: {{.tags | tojson}}
 publisher_pipeline.disable_host: {{ inList .tags "forwarded" }}

diff --git a/x-pack/filebeat/module/netflow/log/manifest.yml b/x-pack/filebeat/module/netflow/log/manifest.yml
@@ -15,6 +15,7 @@ var:
   - name: timeout
   - name: custom_definitions
   - name: detect_sequence_reset
+    default: true
   - name: tags
     default: [forwarded]
   - name: internal_networks