Filebeat netflow template missing

I have configured filebeat netflow.yml to receive netflow data

my filebeat.yml input


# filestream is an input for collecting log messages from files.
- type: filestream

  # Unique ID among all inputs, an ID is required.
  id: my-filestream-id

  # Change to true to enable this input configuration.
  enabled: false

  # Paths that should be crawled and fetched. Glob based paths.
    - /var/log/*.log
    #- c:\programdata\elasticsearch\logs\*

  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml

  # Set to true to enable config reloading
  reload.enabled: true

  # Period on which files under path should be checked for changes
  #reload.period: 10s


# Module: netflow
# Docs:

- module: netflow
    enabled: true
      max_message_size: 500KiB
      netflow_port: 9995
      queue_size: 8000
      time_out: 1200
      expiration_timeout: 0

and I'm getting this error in logs getting data from huawei AR devices (cisco devices work well),

{"":"netflow/input.go","file.line":81},"message":"[netflow-v9] No template for ID 1315","":"filebeat","ecs.version":"1.6.0"}

Is there any workaround for this? How do I manually add this template if possible ?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.