From 6206693f0ccbc76fb3a69a75e134c1f1995352c0 Mon Sep 17 00:00:00 2001
From: Sven Rebhan <36194019+srebhan@users.noreply.github.com>
Date: Wed, 8 May 2024 12:13:49 -0400
Subject: [PATCH] fix(inputs.netflow): Log unknown fields only once (#15323)

---
 plugins/inputs/netflow/netflow_decoder.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/plugins/inputs/netflow/netflow_decoder.go b/plugins/inputs/netflow/netflow_decoder.go
index 91d870ccb..80bcd7421 100644
--- a/plugins/inputs/netflow/netflow_decoder.go
+++ b/plugins/inputs/netflow/netflow_decoder.go
@@ -756,6 +756,7 @@ func (d *netflowDecoder) decodeValueV9(field netflow.DataField) ([]telegraf.Fiel
 	key := fmt.Sprintf("type_%d", elementID)
 	if !d.logged[key] {
 		d.Log.Debugf("unknown Netflow v9 data field %v", field)
+		d.logged[key] = true
 	}
 	v, err := decodeHex(raw)
 	if err != nil {
@@ -789,6 +790,7 @@ func (d *netflowDecoder) decodeValueIPFIX(field netflow.DataField) ([]telegraf.F
 		}
 		if !d.logged[key] {
 			d.Log.Debugf("unknown IPFIX PEN data field %v", field)
+			d.logged[key] = true
 		}
 		name := fmt.Sprintf("type_%d_%s%d", field.Pen, prefix, elementID)
 		v, err := decodeHex(raw)
@@ -837,6 +839,7 @@ func (d *netflowDecoder) decodeValueIPFIX(field netflow.DataField) ([]telegraf.F
 	key := fmt.Sprintf("type_%d", elementID)
 	if !d.logged[key] {
 		d.Log.Debugf("unknown IPFIX data field %v", field)
+		d.logged[key] = true
 	}
 	v, err := decodeHex(raw)
 	if err != nil {