I'm having this issue with logstash with netflow module active:
If I ran it from CLI with this command :
./logstash --modules netflow
It work perfect , Kibana get the index patter netflow-* and I can see populated graphs , etc, etc...
Now if I start it with systemctl :
$systemctl start logstash.service
Them kibana can't find the index pattern .