Masahiro Nakagawa

Another way is adding `whitelist_for` like parameter to specify field for `whitelist_keys`

You seems correct. @cosmo0920 how about this?

Removing `require` is not enough? If in_flume works with older flume, we can provide it.

@tagomoris How about this?

I don't have a maintenance motivation because we now have fluent-bit. If anyone interested in this plugin, I can transfer.

I released v0.2.4 including #22 patch. Please try this version.

I'm not familiar with Huawei AR2204-S. Your device seems to send original format logs. You need to define your template for it. Here is an example: https://github.com/repeatedly/fluent-plugin-netflow#field-definition-for-netflow-v9 https://github.com/repeatedly/fluent-plugin-netflow#paloalto-netflow

Using https://github.com/logstash-plugins/logstash-codec-netflow/issues/12#issuecomment-102987676 approach doesn't work?

Use definition parameter with your rules. ``` @type netflow #... definitions /path/to/your_netflow_def.yml ```

@zhaohangbo Could you try https://github.com/repeatedly/fluent-plugin-netflow/pull/14 patch for your case?