# Logstash-netflow-codec **URL:** \ **Category:** Logstash\ **Created:** [July 14, 2016, 3:41pm UTC](https://discuss.elastic.co/t/logstash-netflow-codec/55539 "2016-07-14T15:41:13Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![abdalians](https://avatars.discourse-cdn.com/v4/letter/a/8baadc/32.png) [@abdalians](https://discuss.elastic.co/u/abdalians)\ **Post date:** [July 14, 2016, 3:41pm UTC](https://discuss.elastic.co/t/logstash-netflow-codec/55539/1 "2016-07-14T15:41:13Z")
Hi We are testing out the netflow input plugin for logstash but cant seem to get logstash to output anything. input { udp { port =\> 1963 codec =\> netflow { ipfix\_definitions =\> "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-netflow-2.1.0/lib/logstash/codecs/netflow/ipfix.yaml" netflow\_definitions =\> "/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-codec-netflow-2.1.0/lib/logstash/codecs/netflow/ipfix.yaml" } } } output { rabbitmq { host =\> "192.168.130.75" user =\> "logstash" password =\> "\*\*\*\*\*\*\*\*" exchange =\> "logstash-exchg1" key =\> "logstash-key1" durable =\> true exchange\_type =\> direct vhost =\> "logstash" persistent =\> true } } /var/log/logstash/logstash.log {:timestamp=\>"2016-07-13T12:12:51.976000-0500", :message=\>"No matching template for flow id 260", :level=\>:warn} {:timestamp=\>"2016-07-13T12:12:51.980000-0500", :message=\>"No matching template for flow id 266", :level=\>:warn} ^^ keeps repeating.. and we also see .. {:timestamp=\>"2016-07-13T12:12:42.886000-0500", :message=\>"Unsupported field", :type=\>89, :length=\>1, :level=\>:warn} Version: logstash-2.3.4-1.noarch logstash-codec-netflow version 2.1.1 data sources: 1 x ASR 9010 running IOSXR ver 5.3.3 1 x Nexus 6004 running NXOS ver 7.1(3)N1(2) The messages never make it to rabbitmq, I also added a file output but it never gets written to. So my guess is logstash is not getting past the parsing the message state and to the output. Any help is appreciated. Thanks Saqi ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [July 14, 2016, 9:50pm UTC](https://discuss.elastic.co/t/logstash-netflow-codec/55539/2 "2016-07-14T21:50:33Z")
What about a basic stdout? ---
**Author:** ![abdalians](https://avatars.discourse-cdn.com/v4/letter/a/8baadc/32.png) [@abdalians](https://discuss.elastic.co/u/abdalians)\ **Post date:** [July 26, 2016, 4:56pm UTC](https://discuss.elastic.co/t/logstash-netflow-codec/55539/3 "2016-07-26T16:56:31Z")
I get the same no matching template for flow id, Are the ASR 9k Nexus 6k supported? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 4:46am UTC](https://discuss.elastic.co/t/logstash-netflow-codec/55539/4 "2017-07-06T04:46:26Z")