# Kibana will not start with netflow module **URL:** \ **Category:** Kibana\ **Created:** [September 5, 2018, 10:43am UTC](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374 "2018-09-05T10:43:24Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![thekikzz](https://avatars.discourse-cdn.com/v4/letter/t/a88e57/32.png) [@thekikzz](https://discuss.elastic.co/u/thekikzz)\ **Post date:** [September 5, 2018, 10:43am UTC](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374/1 "2018-09-05T10:43:24Z")
[root@localhost ~]# /usr/share/logstash/bin/logstash --modules netflow --setup -M netflow.var.input.udp.port=9996 -M netflow.var.kibana.host="localhost:5601" -M netflow.var.elasticsearch.hosts="localhost:9200" OpenJDK 64-Bit Server VM warning: If the number of processors is expected to increase from one, then you should configure the number of parallel GC threads appropriately using -XX:ParallelGCThreads=N WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console [WARN] 2018-09-05 17:20:15.471 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified [INFO] 2018-09-05 17:20:16.750 [LogStash::Runner] runner - Starting Logstash {"logstash.version"=\>"6.4.0"} [INFO] 2018-09-05 17:20:16.989 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] modulescommon - Setting up the netflow module [INFO] 2018-09-05 17:20:50.118 [Converge PipelineAction::Create] pipeline - Starting pipeline {:pipeline\_id=\>"module-netflow", "pipeline.workers"=\>1, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>50} [INFO] 2018-09-05 17:20:50.603 [[module-netflow]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=\>{:removed=\>[], :added=\>[[http://localhost](http://localhost)😥:9200/]}} [INFO] 2018-09-05 17:20:50.627 [[module-netflow]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck\_url=\>[http://localhost:9200/](http://localhost:9200/), :path=\>"/"} [WARN] 2018-09-05 17:20:50.863 [[module-netflow]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=\>"[http://localhost:9200/](http://localhost:9200/)"} [INFO] 2018-09-05 17:20:50.888 [[module-netflow]-pipeline-manager] elasticsearch - ES Output version determined {:es\_version=\>6} [WARN] 2018-09-05 17:20:50.915 [[module-netflow]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document \_type {:es\_version=\>6} [INFO] 2018-09-05 17:20:50.987 [[module-netflow]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=\>"LogStash::Outputs::ElasticSearch", :hosts=\>["[//localhost:9200](https://localhost:9200)"]} [INFO] 2018-09-05 17:20:52.558 [[module-netflow]-pipeline-manager] geoip - Using geoip database {:path=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/GeoLite2-City.mmdb"} [INFO] 2018-09-05 17:20:52.726 [[module-netflow]-pipeline-manager] geoip - Using geoip database {:path=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/GeoLite2-ASN.mmdb"} [INFO] 2018-09-05 17:20:52.811 [[module-netflow]-pipeline-manager] geoip - Using geoip database {:path=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/GeoLite2-City.mmdb"} [INFO] 2018-09-05 17:20:52.812 [[module-netflow]-pipeline-manager] geoip - Using geoip database {:path=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/GeoLite2-ASN.mmdb"} [INFO] 2018-09-05 17:20:52.813 [[module-netflow]-pipeline-manager] geoip - Using geoip database {:path=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/GeoLite2-City.mmdb"} [INFO] 2018-09-05 17:20:52.813 [[module-netflow]-pipeline-manager] geoip - Using geoip database {:path=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/GeoLite2-ASN.mmdb"} [INFO] 2018-09-05 17:20:52.815 [[module-netflow]-pipeline-manager] geoip - Using geoip database {:path=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/GeoLite2-City.mmdb"} [INFO] 2018-09-05 17:20:52.815 [[module-netflow]-pipeline-manager] geoip - Using geoip database {:path=\>"/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-filter-geoip-5.0.3-java/vendor/GeoLite2-ASN.mmdb"} [INFO] 2018-09-05 17:20:53.027 [Converge PipelineAction::Create] pipeline - Pipeline started successfully {:pipeline\_id=\>"module-netflow", :thread=\>"#\"} [INFO] 2018-09-05 17:20:53.107 [[module-netflow]\"0.0.0.0:9996"} [INFO] 2018-09-05 17:20:53.303 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] agent - Pipelines running {:count=\>1, :running\_pipelines=\>[:"module-netflow"], :non\_running\_pipelines=\>[]} [INFO] 2018-09-05 17:20:53.604 [[module-netflow]\"0.0.0.0:9996", :receive\_buffer\_bytes=\>"212992", :queue\_size=\>"2000"} [INFO] 2018-09-05 17:20:54.022 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=\>9600} [WARN] 2018-09-05 17:21:01.424 [\ **Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Post date:** [September 5, 2018, 12:39pm UTC](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374/2 "2018-09-05T12:39:22Z") What version of kibana and logstash are you using? The error message provided looks like the output of the logstash process. Can you provide the output of the Kibana process? ---
**Author:** ![thekikzz](https://avatars.discourse-cdn.com/v4/letter/t/a88e57/32.png) [@thekikzz](https://discuss.elastic.co/u/thekikzz)\ **Post date:** [September 6, 2018, 4:10am UTC](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374/3 "2018-09-06T04:10:58Z")
kibana and logstash version are 6.4.0-1 ![kibana](https://us1.discourse-cdn.com/elastic/original/3X/8/6/86c4cd96da2107f79e31ed508ca39756fffcd836.png) ---
**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Post date:** [September 6, 2018, 1:51pm UTC](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374/4 "2018-09-06T13:51:04Z")
So it looks like Kibana has successfully started based on the screen shot. What is the error you are seeing? ---
**Author:** ![thekikzz](https://avatars.discourse-cdn.com/v4/letter/t/a88e57/32.png) [@thekikzz](https://discuss.elastic.co/u/thekikzz)\ **Post date:** [September 7, 2018, 11:03am UTC](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374/6 "2018-09-07T11:03:02Z")
i have already config logstash netflow module but not show on kibana ---
**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\ **Post date:** [September 21, 2018, 12:21pm UTC](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374/7 "2018-09-21T12:21:34Z")
You may want to consider using ElastiFlow. The Logstash Netflow Module was based on ElastiFlow 1.0.0 and is very behind now. You will be able to handle a larger variety of flows sources and get more value from the data by using ElastiFlow. > **[robcowart/elastiflow](https://github.com/robcowart/elastiflow)** > > Network flow Monitoring (Netflow, sFlow and IPFIX) with the Elastic Stack - robcowart/elastiflow ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 19, 2018, 12:21pm UTC](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374/8 "2018-10-19T12:21:34Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.