# Logstash Netflow module **URL:** \ **Category:** Logstash\ **Created:** [January 4, 2018, 3:36pm UTC](https://discuss.elastic.co/t/logstash-netflow-module/114118 "2018-01-04T15:36:18Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![DarkVodka34](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/darkvodka34/32/26247_2.png) [@DarkVodka34](https://discuss.elastic.co/u/DarkVodka34)\ **Post date:** [January 4, 2018, 3:36pm UTC](https://discuss.elastic.co/t/logstash-netflow-module/114118/1 "2018-01-04T15:36:18Z")
Howdy im very new to linux and have been following a tut on getting this all working. Im having big trouble getting the module to install I get this error root@OMV-MediaServer:/usr/share/logstash# bin/logstash --modules netflow --setup -M netflow.var.input.udp.port=NNNN WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/conf ig or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.pr operties. Using default config which logs errors to the console [FATAL] 2018-01-04 15:22:16.641 [LogStash::Runner] runner - An unexpected error occurred! {:error=\>#\, :back trace=\>["/usr/share/logstash/logstash-core/lib/logstash/settings.rb:299:in `coer ce'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:256:in`set'", "/usr/share/logstash/logstash-core/lib/logstash/modules/logstash\_config.rb:45:i n `get_setting'", "/usr/share/logstash/logstash-core/lib/logstash/modules/logsta sh_config.rb:59:in`setting'", "(erb):4:in `result'", "org/jruby/RubyKernel.java :1079:in`eval'", "/usr/share/logstash/vendor/jruby/lib/ruby/1.9/erb.rb:838:in `result'", "/usr/share/logstash/logstash-core/lib/logstash/modules/logstash_confi g.rb:91:in`config\_string'", "/usr/share/logstash/logstash-core/lib/logstash/mod ules/scaffold.rb:49:in `config_string'", "/usr/share/logstash/logstash-core/lib/ logstash/config/modules_common.rb:88:in`pipeline\_configs'", "org/jruby/RubyArra y.java:1613:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/config/m odules_common.rb:56:in`pipeline\_configs'", "/usr/share/logstash/logstash-core/l ib/logstash/runner.rb:276:in `execute'", "/usr/share/logstash/vendor/bundle/jrub y/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67:in`run'", "/usr/share/logstash/l ogstash-core/lib/logstash/runner.rb:204:in `run'", "/usr/share/logstash/vendor/b undle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132:in`run'", "/usr/share /logstash/lib/bootstrap/environment.rb:71:in `(root)'"]} root@OMV-MediaServer:/usr/share/logstash# Has anyone any ideas why I get this error? Thanks ---
**Author:** ![DarkVodka34](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/darkvodka34/32/26247_2.png) [@DarkVodka34](https://discuss.elastic.co/u/DarkVodka34)\ **Post date:** [January 4, 2018, 4:12pm UTC](https://discuss.elastic.co/t/logstash-netflow-module/114118/2 "2018-01-04T16:12:56Z")
Also when sudo bin/logstash –modules netflow –setup --path.setting=/etc/logstash get this root@OMV-MediaServer:/usr/share/logstash# sudo bin/logstash –modules netflow –setup --path.setting=/etc/logstash WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults ERROR: Unknown command '–modules' See: 'bin/logstash --help' Still can't get it to work ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 7, 2018, 4:23pm UTC](https://discuss.elastic.co/t/logstash-netflow-module/114118/3 "2018-01-07T16:23:36Z")
Do you actually have "NNNN" in your Logstash command? ---
**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\ **Post date:** [January 8, 2018, 8:56am UTC](https://discuss.elastic.co/t/logstash-netflow-module/114118/4 "2018-01-08T08:56:24Z")
Use dash dash modules `--modules` and `--setup`. ---
**Author:** ![DarkVodka34](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/darkvodka34/32/26247_2.png) [@DarkVodka34](https://discuss.elastic.co/u/DarkVodka34)\ **Post date:** [January 10, 2018, 12:11am UTC](https://discuss.elastic.co/t/logstash-netflow-module/114118/5 "2018-01-10T00:11:56Z")
No sorry ---
**Author:** ![DarkVodka34](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/darkvodka34/32/26247_2.png) [@DarkVodka34](https://discuss.elastic.co/u/DarkVodka34)\ **Post date:** [January 10, 2018, 12:13am UTC](https://discuss.elastic.co/t/logstash-netflow-module/114118/6 "2018-01-10T00:13:45Z")
Can you explain abit more please. `bin/logstash --modules netflow --setup` I did add dash dash, looks like the first post didn't paste them ``` root@OMV-Media:/usr/share/logstash# bin/logstash --modules netflow --setup WARNING: Could not find logstash.yml which is typically located in $LS_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console ``` ---
**Author:** ![sdndude](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sdndude/32/24608_2.png) [@sdndude](https://discuss.elastic.co/u/sdndude)\ **Post date:** [January 10, 2018, 3:28pm UTC](https://discuss.elastic.co/t/logstash-netflow-module/114118/7 "2018-01-10T15:28:35Z")
> [@DarkVodka34](#): > > Failed to parse the module co nfiguration: [Failed to coerce value to Numeric. Received NNNN (String) That was your first error. It did have "NNNN" as the port number. Try it with an actual port number that your netflow messages will be sent to on the server and it may fix it. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 7, 2018, 3:28pm UTC](https://discuss.elastic.co/t/logstash-netflow-module/114118/8 "2018-02-07T15:28:38Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.