Filebeat module netflow doesn't exist

[bunico (Nico)]

I am trying to enable netflow module on my VM but I can't seem to able to do so. I have installed the whole ELK stack with the latest versions available.

Does anyone have any idea how can I enable this module or how can I get it to be shown on the available module list?
list|471x460

[ChrsMark (Chris Mark)]

Hi!

Can you confirm that you are not using OSS version?
https://www.elastic.co/downloads/past-releases

netflow is under basic license so you need to download Filebeat 7.6.0 and not Filebeat OSS 7.6.0

C.

[bunico (Nico)]

Hi! I doubt I'm using an OSS version. Seems like I'm using 6.8.6 which seems different from thee version number you have provided me with. All I did was to install Filebeat using APT with the command (sudo apt-get install filebeat). How do I install Filebeat 7.6.0?

[ChrsMark (Chris Mark)]

Hey here is how I did it:

root@e51c9d6044ff:/# curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.6.0-amd64.deb
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 23.9M  100 23.9M    0     0  1494k      0  0:00:16  0:00:16 --:--:-- 1595k
root@e51c9d6044ff:/# dpkg -i filebeat-7.6.0-amd64.deb
Selecting previously unselected package filebeat.
(Reading database ... 4570 files and directories currently installed.)
Preparing to unpack filebeat-7.6.0-amd64.deb ...
Unpacking filebeat (7.6.0) ...
Setting up filebeat (7.6.0) ...
root@e51c9d6044ff:/# filebeat version
filebeat version 7.6.0 (amd64), libbeat 7.6.0 [6a23e8f8f30f5001ba344e4e54d8d9cb82cb107c built 2020-02-05 23:06:45 +0000 UTC]
root@e51c9d6044ff:/# filebeat modules list
Enabled:

Disabled:
activemq
apache
auditd
aws
azure
cef
cisco
coredns
elasticsearch
envoyproxy
googlecloud
haproxy
ibmmq
icinga
iis
iptables
kafka
kibana
logstash
misp
mongodb
mssql
mysql
nats
netflow
nginx
osquery
panw
postgresql
rabbitmq
redis
santa
suricata
system
traefik
zeek
root@e51c9d6044ff:/# filebeat modules enable netflow
Enabled netflow

[bunico (Nico)]

Omg thank you so much! It worked!