I am trying to enable netflow module on my VM but I can't seem to able to do so. I have installed the whole ELK stack with the latest versions available.
Does anyone have any idea how can I enable this module or how can I get it to be shown on the available module list?
Can you confirm that you are not using OSS version?
netflow is under basic license so you need to download
Filebeat 7.6.0 and not
Filebeat OSS 7.6.0
Hi! I doubt I'm using an OSS version. Seems like I'm using 6.8.6 which seems different from thee version number you have provided me with. All I did was to install Filebeat using APT with the command (sudo apt-get install filebeat). How do I install Filebeat 7.6.0?
Hey here is how I did it:
root@e51c9d6044ff:/# curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.6.0-amd64.deb
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 23.9M 100 23.9M 0 0 1494k 0 0:00:16 0:00:16 --:--:-- 1595k
root@e51c9d6044ff:/# dpkg -i filebeat-7.6.0-amd64.deb
Selecting previously unselected package filebeat.
(Reading database ... 4570 files and directories currently installed.)
Preparing to unpack filebeat-7.6.0-amd64.deb ...
Unpacking filebeat (7.6.0) ...
Setting up filebeat (7.6.0) ...
root@e51c9d6044ff:/# filebeat version
filebeat version 7.6.0 (amd64), libbeat 7.6.0 [6a23e8f8f30f5001ba344e4e54d8d9cb82cb107c built 2020-02-05 23:06:45 +0000 UTC]
root@e51c9d6044ff:/# filebeat modules list
root@e51c9d6044ff:/# filebeat modules enable netflow
Omg thank you so much! It worked!
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.