Logstash Netflow module remote setup ERROR

Elastic Stack Logstash
1

# /usr/share/logstash/bin/logstash --modules netflow --setup -M "netflow.var.input.udp.port=9996" -M "netflow.var.elasticsearch.hosts=http://192.168.0.133:9200" -M "netflow.var.kibana.host=192.168.0.135:5601" -M "netflow.var.kibana.scheme=http"

    [INFO ] 2018-10-12 15:18:14.529 [LogStash::Runner] runner - Starting Logstash {"logstash.version"=>"6.4.2"}
    [INFO ] 2018-10-12 15:18:14.769 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] modulescommon - Setting up the netflow module
    [ERROR] 2018-10-12 15:18:15.679 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] kibanaclient - Error when executing Kibana client request {:error=>#<Manticore::UnknownException: Unrecognized SSL message, plaintext connection?>}
    [ERROR] 2018-10-12 15:18:15.898 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] kibanaclient - Error when executing Kibana client request {:error=>#<Manticore::UnknownException: Unrecognized SSL message, plaintext connection?>}
    [ERROR] 2018-10-12 15:18:16.264 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] sourceloader - Could not fetch all the sources {:exception=>LogStash::ConfigLoadingError, :message=>"Failed to import module configurations to Elasticsearch and/or Kibana. Module: netflow has Elasticsearch hosts: [\"http://192.168.0.133:9200\"] and Kibana hosts: [\"192.168.0.135:5601\"]", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/config/modules_common.rb:108:in `block in pipeline_configs'", "org/jruby/RubyArray.java:1734:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/config/modules_common.rb:54:in `pipeline_configs'", "/usr/share/logstash/logstash-core/lib/logstash/config/source/modules.rb:14:in `pipeline_configs'", "/usr/share/logstash/logstash-core/lib/logstash/config/source_loader.rb:61:in `block in fetch'", "org/jruby/RubyArray.java:2481:in `collect'", "/usr/share/logstash/logstash-core/lib/logstash/config/source_loader.rb:60:in `fetch'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:142:in `converge_state_and_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:93:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:362:in `block in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:in `block in initialize'"]}
    [ERROR] 2018-10-12 15:18:16.280 [Ruby-0-Thread-1: /usr/share/logstash/lib/bootstrap/environment.rb:6] agent - An exception happened when converging configuration {:exception=>RuntimeError, :message=>"Could not fetch the configuration, message: Failed to import module configurations to Elasticsearch and/or Kibana. Module: netflow has Elasticsearch hosts: [\"http://192.168.0.133:9200\"] and Kibana hosts: [\"192.168.0.135:5601\"]", :backtrace=>["/usr/share/logstash/logstash-core/lib/logstash/agent.rb:149:in `converge_state_and_update'", "/usr/share/logstash/logstash-core/lib/logstash/agent.rb:93:in `execute'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:362:in `block in execute'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb:24:in `block in initialize'"]}
    [INFO ] 2018-10-12 15:18:16.708 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9600}

CRASH

> Runnig as root. curl get data from elastic and kibana. security disabled. Without --setup netflow working and send, but --setup need to import visualization, dashboard and search.

2

**-M "netflow.var.kibana.ssl.enabled=false"**

adding this and worked setup

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.