defaulting to ingress for flow direction unless we say otherwise (#648)

kentik · Jan 4, 2024 · 2789153 · 2789153
1 parent d29731c
commit 2789153
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/inputs/flow/format.go b/pkg/inputs/flow/format.go
@@ -340,6 +340,11 @@ func (t *KentikDriver) toJCHF(fmsg *pp.ProtoProducerMessage) *kt.JCHF {
 		}
 	}
 
+	// Default in direction if its not already set. Assume its ingress unless otherwise told.
+	if _, ok := in.CustomStr["FlowDirection"]; !ok {
+		in.CustomStr["FlowDirection"] = "ingress"
+	}
+
 	// Now add some combo fields.
 	in.CustomStr["src_endpoint"] = in.SrcAddr + ":" + strconv.Itoa(int(in.L4SrcPort))
 	in.CustomStr["dst_endpoint"] = in.DstAddr + ":" + strconv.Itoa(int(in.L4DstPort))