# Elasticstac 40min Data dealy

**URL:** <https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040>\
**Category:** Elasticsearch\
**Created:** [December 6, 2021, 12:45pm UTC](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040 "2021-12-06T12:45:27Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![HannoKuegler](https://avatars.discourse-cdn.com/v4/letter/h/bbce88/32.png) [@HannoKuegler](https://discuss.elastic.co/u/HannoKuegler)\
**Post date:** [December 6, 2021, 12:45pm UTC](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040/1 "2021-12-06T12:45:27Z")

</div>

Hey there,

We have currently running a Netflow setup with Elasticsearch. Data is collected on the Netflow router. Unfortunately it pops up at the Kibana dashboards 40 min later.

What could be the Problem there?

I'm looking forward to your help.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/9/995c4f116f540466cbed78c611730747a419c206.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 6, 2021, 9:58pm UTC](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040/2 "2021-12-06T21:58:40Z")

</div>

How does it get sent to Elasticsearch?

---

<div class="post-metadata">

**Author:** ![HannoKuegler](https://avatars.discourse-cdn.com/v4/letter/h/bbce88/32.png) [@HannoKuegler](https://discuss.elastic.co/u/HannoKuegler)\
**Post date:** [December 7, 2021, 9:49am UTC](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040/3 "2021-12-07T09:49:43Z")

</div>

Netflow Router is sending Netflow packets to Elasticsearch every 5 minutes.  
active timeout is set to 5min.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [December 7, 2021, 10:13am UTC](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040/4 "2021-12-07T10:13:12Z")

</div>

Elasticsearch does not directly accept Netflix so there must be something in between. Please describe this and the corresponding configuration and hardware used.

---

<div class="post-metadata">

**Author:** ![HannoKuegler](https://avatars.discourse-cdn.com/v4/letter/h/bbce88/32.png) [@HannoKuegler](https://discuss.elastic.co/u/HannoKuegler)\
**Post date:** [December 7, 2021, 10:23am UTC](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040/5 "2021-12-07T10:23:23Z")

</div>

Ofc., there is a Netflow module configured.

Config:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/b/8b5d3fcdf919d6f25d002d47dbcfc5571fe0741d.png)

Network plan:

 ![Schulnetzwerk-Iteration-2](https://us1.discourse-cdn.com/elastic/original/3X/5/1/51489443cd468712c2d5e8ff1d0071a22d042d74.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 4, 2022, 10:23am UTC](https://discuss.elastic.co/t/elasticstac-40min-data-dealy/291040/6 "2022-01-04T10:23:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.