Hi,
after updating the stack from 7.10.2 to 7.11 the netflow module will not start anymore.
The only message we see every 10 seconds in journal is
filebeat[1976620]: 2021-02-11T17:40:01.242+0100 ERROR [reload] cfgfile/list.go:99 Error creating runner from config: Error getting config for fileset netflow/log: Error interpreting the template of the input: template: text:8:5: executing "text" at <.internal_networks>: map has no entry for key "internal_networks"
I'm running filebeat 7.11.2 in docker/docker-compose and am getting the same error still.
Error:
2021-03-12T03:38:31.569Z INFO [publisher] pipeline/module.go:113 Beat name: b0947ece6aad
2021-03-12T03:38:31.571Z INFO beater/filebeat.go:117 Enabled modules/filesets: netflow (log), ()
2021-03-12T03:38:31.571Z INFO instance/beat.go:437 filebeat stopped.
2021-03-12T03:38:31.571Z ERROR instance/beat.go:971 Exiting: Error getting config for fileset netflow/log: Error interpreting the template of the input: template: text:8:5: executing "text" at <.internal_networks>: map has no entry for key "internal_networks"
- module: netflow
log:
enabled: true
var:
netflow_host: 0.0.0.0
netflow_port: 2055
# internal_networks specifies which networks are considered internal or private
# you can specify either a CIDR block or any of the special named ranges listed
# at: https://www.elastic.co/guide/en/beats/filebeat/current/defining-processors.html#condition-network
internal_networks:
- private
Dear All,
I have a similar issue. I upgraded from 7.10.2 to 7.11.2
Netflow didn't work, but found this article and changed /etc/filebeat/modules.d/netflow.yml
This is the content:
When I run filebeat setup --modules netflow I get this error
Exiting: Error getting config for fileset netflow/log: Error interpreting the template of the input: template: text:8:5: executing "text" at <.internal_networks>: map has no entry for key "internal_networks"
thanks coming back to my question. I tried your suggestion but it didn't help. But I have a workaround. I am not sure if good or bad, but it works. I restored the file /usr/share/filebeat/module/netflow/log/config/netflow.yml from my backup before the time of upgrade. And now it's working. This is the difference which was inserted in the last release:
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.