# How can I modify the netflow module?

**URL:** <https://discuss.elastic.co/t/how-can-i-modify-the-netflow-module/113644>\
**Category:** Logstash\
**Created:** [December 30, 2017, 11:20pm UTC](https://discuss.elastic.co/t/how-can-i-modify-the-netflow-module/113644 "2017-12-30T23:20:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Michael\_Tsikerdekis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_tsikerdekis/32/25950_2.png) [@Michael\_Tsikerdekis](https://discuss.elastic.co/u/Michael_Tsikerdekis)\
**Post date:** [December 30, 2017, 11:20pm UTC](https://discuss.elastic.co/t/how-can-i-modify-the-netflow-module/113644/1 "2017-12-30T23:20:16Z")

</div>

I have been editing the file /usr/share/logstash/modules/netflow/configuration/elasticsearch/netflow.json and even changed the meta version among other fields. Problem is that when I call

```
sudo systemctl stop logstash.service
curl -XDELETE 'localhost:9200/netflow-*?pretty'

```

and then  
`sudo systemctl start logstash.service`

The netflow-\* index is created but the configuration is the default one. Even the version says 5.5 when I have changed it to 5.6 (all of my installation is updated to 5.6 versions and I am running SELKS).

What I am doing wrong?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 27, 2018, 11:20pm UTC](https://discuss.elastic.co/t/how-can-i-modify-the-netflow-module/113644/2 "2018-01-27T23:20:16Z")

</div>

Closed on January 27, 2018, 11:20pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.