Google Cloud Flow Logs

Enable Google Cloud Flow Logs support in Configuration Center > FMC Configuration > Google Cloud Flow Logs. The system downloads logs periodically, converts them to IPFIX format, and sends them to your specified local collector port. This table shows the mapping between Google Cloud Flow Logs fields and IPFIX fields. Any fields not listed here are not mapped.

Field	Maps to, in IPFIX
connection.src_ip	IPFIX_SourceIPv4Address IPFIX_SourceIPv6Address
connection.dest_ip	IPFIX_DestinationIPv4Address IPFIX_DestinationIPv6Address
connection.src_port	IPFIX_SourceTransportPort
connection.dest_port	IPFIX_DestinationTransportPort
connection.protocol	IPFIX_protocolIdentifier
packets_sent	IPFIX_packetTotalCount
bytes_sent	IPFIX_octetTotalCount
start_time	IPFIX_flowStartMilliseconds
end_time	IPFIX_flowEndMilliseconds
src_vpc.project_id	No mapping, replaced by a generated value for IPFIX_exporterIPv4Address
src_vpc.vpc_name	No mapping, replaced by a generated value for IPFIX_exporterIPv4Address
src_vpc.subnetwork_name	No mapping, replaced by a generated value for IPFIX_ingressInterface
dest_vpc.project_id	No mapping, replaced by a generated value for IPFIX_exporterIPv4Address
dest_vpc.vpc_name	No mapping, replaced by a generated value for IPFIX_exporterIPv4Address
dest_vpc.subnetwork_name	No mapping, replaced by a generated value for IPFIX_ingressInterface
reporter	No mapping, used for generating values for IPFIX_exporterIPv4Address IPFIX_ingressInterface