Input UDP/ netflow no listenning

Elastic Stack Logstash
1

hey,

i have a problem with UDP

this is my configuration :

input {
  udp {
    port => 2055
    type => "Netflow"
    codec => netflow {
      versions => [9]
    }
  }
}

output {
    if ( [type] == "Netflow" ) {
        elasticsearch {
                hosts => ["localhost:9200"]
                index => "netflow-%{+YYYY.MM.dd}"
          }
    }     
}

when i run tcpdump i can see my flow comming
with netstat i can't see the port on listenning so i run logstash in debug and i see this :

15:34:34.448 [[main]<udp] INFO  logstash.inputs.udp - Starting UDP listener {:address=>"0.0.0.0:2055"}
15:34:34.450 [[main]<udp] WARN  logstash.inputs.udp - UDP listener died {:exception=>#<SocketError: bind: name or service not known>, :backtrace=>["org/jruby/ext/socket/RubyUDPSocket.java:160:in `bind'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-udp-3.1.0/lib/logstash/inputs/udp.rb:82:in `udp_listener'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-udp-3.1.0/lib/logstash/inputs/udp.rb:56:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:365:in `inputworker'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:359:in `start_input'"]}

plz help me :slight_smile:

2

Up !
Help plz

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.