Google Cloud Flow Logs

Enable Google Cloud Flow Logs support in Configuration Center > FMC Configuration > Google Cloud Flow Logs. The system downloads logs periodically, converts them to IPFIX format, and sends them to your specified local collector port. This table shows the mapping between Google Cloud Flow Logs fields and IPFIX fields. Any fields not listed here are not mapped.

Field	Maps to, in IPFIX	Collector Configuration
connection.src_ip	IPFIX_SourceIPv4Address IPFIX_SourceIPv6Address	Collected by default
connection.dest_ip	IPFIX_DestinationIPv4Address IPFIX_DestinationIPv6Address	Collected by default
connection.src_port	IPFIX_SourceTransportPort	Collected by default
connection.dest_port	IPFIX_DestinationTransportPort	Collected by default
connection.protocol	IPFIX_protocolIdentifier	Collected by default
packets_sent	IPFIX_packetTotalCount	Collected by default
bytes_sent	IPFIX_octetTotalCount	Collected by default
start_time	IPFIX_flowStartMilliseconds	Collected by default
end_time	IPFIX_flowEndMilliseconds	Collected by default
src_vpc.project_id	No mapping, replaced by a generated value for IPFIX_exporterIPv4Address	Collected by default
src_vpc.vpc_name	No mapping, replaced by a generated value for IPFIX_exporterIPv4Address	Collected by default
src_vpc.subnetwork_name	No mapping, replaced by a generated value for IPFIX_ingressInterface	Collected by default
dest_vpc.project_id	No mapping, replaced by a generated value for IPFIX_exporterIPv4Address	Collected by default
dest_vpc.vpc_name	No mapping, replaced by a generated value for IPFIX_exporterIPv4Address	Collected by default
dest_vpc.subnetwork_name	No mapping, replaced by a generated value for IPFIX_ingressInterface	Collected by default
reporter	No mapping, used for generating values for IPFIX_exporterIPv4Address IPFIX_ingressInterface	Collected by default