This is sample session logged in syslog, check the field name here local_local_ip and service_service_port.
Looks like now agent is also using local_ip(seen in agent log file) and analytics is also prefixing it with local.
same for service_port.
SessionData: [ vmi = default-domain:ctest-SessionLogging-99290639:2d0ac14b-55cc-4f35-ac8a-8d20bd13693a vn = default-domain:ctest-SessionLogging-99290639:ctest-vn-79357828 ] security_policy_rule = 00000000-0000-0000-0000-000000000001 remote_vn = default-domain:ctest-SessionLogging-99290639:ctest-vn-70028635 is_client_session = 1 is_si = 0 vrouter_ip = 10.204.216.69 local_local_ip = 74.233.135.3 service_service_port = 0 protocol = 1 sampled_forward_bytes = 98 sampled_forward_pkts = 1 sampled_reverse_bytes = 98 sampled_reverse_pkts = 1 ip = 50.160.97.3 port = 2764 forward_flow_info= [ sampled_bytes = 98 sampled_pkts = 1 flow_uuid = af63661b-7ea9-44d3-b014-3b35d28f43de tcp_flags = 0 setup_time = 1512045150458989 action = pass sg_rule_uuid = a77a7e56-bfb1-4e61-a19e-d0a2a21ecfb2 nw_ace_uuid = d1df64ab-8a1f-4327-b082-2e55a2daa487 underlay_source_port = 50385 ] reverse_flow_info= [ sampled_bytes = 98 sampled_pkts = 1 flow_uuid = e0fd2b74-14e7-4a9e-9c78-93f4946161e7 tcp_flags = 0 setup_time = 1512045150458989 action = pass sg_rule_uuid = deb4e390-4017-4b87-a338-ce0ae9a0529d nw_ace_uuid = d1df64ab-8a1f-4327-b082-2e55a2daa487 underlay_source_port = 62979 ] vm = a46ad3f5-f461-4105-ab1f-4cd68335451e other_vrouter_ip = 10.204.216.69 underlay_proto = 0 ]
Review in progress for https:/ /review. opencontrail. org/38020
Submitter: Arvind (<email address hidden>)