# \[logstash.codecs.netflow \] Template length exceeds flowset length, skipping {:template\_id=\>256, :template\_length=\>53, :record\_length=\>48}

**URL:** https://discuss.elastic.co/t/logstash-codecs-netflow-template-length-exceeds-flowset-length-skipping-template-id-256-template-length-53-record-length-48/163895
**Category:** Logstash
**Created:** [January 11, 2019, 11:49am UTC](https://discuss.elastic.co/t/logstash-codecs-netflow-template-length-exceeds-flowset-length-skipping-template-id-256-template-length-53-record-length-48/163895 "2019-01-11T11:49:14Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![geriko2019](https://avatars.discourse-cdn.com/v4/letter/g/a9a28c/32.png) [@geriko2019](https://discuss.elastic.co/u/geriko2019)
#### Post date: [January 11, 2019, 11:49am UTC](https://discuss.elastic.co/t/logstash-codecs-netflow-template-length-exceeds-flowset-length-skipping-template-id-256-template-length-53-record-length-48/163895/1 "2019-01-11T11:49:15Z")

</div>

Hi,  
I have a running implementation of the ELK stack (6.X), with elastiflow module configured (with Elastiflow Dashboard configured on Kibana). I however get the following error on running logstash. The netflow logs are coming directly from network devices (routers) that are on the local network. I have read a number of threads concerning this issue, and they all seem to attribute this problem to the logstash-codec-netflow codec,and its tendency to assign the same Template ID (in this case 256). I have updated the 'logstash-codec-netflow' , but that seems not to solve the problem. Any ideas on how to resolve this issue?

[2019-01-11T10:03:37,755][WARN][logstash.codecs.netflow] Template length exceeds flowset length, skipping {:template\_id=\>256, :template\_length=\>53, :record\_length=\>48}  
[2019-01-11T10:04:56,749][WARN][logstash.codecs.netflow] Template length exceeds flowset length, skipping {:template\_id=\>256, :template\_length=\>53, :record\_length=\>48}  
[2019-01-11T10:10:47,725][WARN][logstash.codecs.netflow] Template length exceeds flowset length, skipping {:template\_id=\>256, :template\_length=\>53, :record\_length=\>48}  
[2019-01-11T10:18:00,694][WARN][logstash.codecs.netflow] Template length exceeds flowset length, skipping {:template\_id=\>256, :template\_length=\>53, :record\_length=\>48}

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 8, 2019, 11:52am UTC](https://discuss.elastic.co/t/logstash-codecs-netflow-template-length-exceeds-flowset-length-skipping-template-id-256-template-length-53-record-length-48/163895/2 "2019-02-08T11:52:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
