# Logstash stops exporting netflow data to elasticsearch

**URL:** https://discuss.elastic.co/t/logstash-stops-exporting-netflow-data-to-elasticsearch/26604
**Category:** Logstash
**Created:** [July 30, 2015, 11:41pm UTC](https://discuss.elastic.co/t/logstash-stops-exporting-netflow-data-to-elasticsearch/26604 "2015-07-30T23:41:55Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![etfeet](https://avatars.discourse-cdn.com/v4/letter/e/4da419/32.png) [@etfeet](https://discuss.elastic.co/u/etfeet)
#### Post date: [July 30, 2015, 11:41pm UTC](https://discuss.elastic.co/t/logstash-stops-exporting-netflow-data-to-elasticsearch/26604/1 "2015-07-30T23:41:55Z")

</div>

We're currently using logstash to collect and filter netflow data from network devices (switches, routers, etc). However, periodically the logstash server that the netflow data is being shipped to will stop exporting to elasticsearch. The process is still running, no errors in the logs, and we have debug turned on for the input and it still shows new netflow data coming in. However, it never makes it to elasticsearch. Is there somewhere I can look are some kind of debug logging that I can turn on for logstash-server (as opposed to the input) to determine what causing this?

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 31, 2015, 4:02am UTC](https://discuss.elastic.co/t/logstash-stops-exporting-netflow-data-to-elasticsearch/26604/2 "2015-07-31T04:02:46Z")

</div>

What version are you on.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [July 31, 2015, 8:00am UTC](https://discuss.elastic.co/t/logstash-stops-exporting-netflow-data-to-elasticsearch/26604/3 "2015-07-31T08:00:43Z")

</div>

Do you see anything in the Elasticsearch logs?

---

<div class="post-metadata">

### Author: ![etfeet](https://avatars.discourse-cdn.com/v4/letter/e/4da419/32.png) [@etfeet](https://discuss.elastic.co/u/etfeet)
#### Post date: [July 31, 2015, 9:30pm UTC](https://discuss.elastic.co/t/logstash-stops-exporting-netflow-data-to-elasticsearch/26604/4 "2015-07-31T21:30:08Z")

</div>

I'm using elasticsearch 1.1.2 and logstash 1.4.3. I don't see anything in the elasticsearch logs until after logstash resumes exporting to elasticsearch.

elasticsearch just shows logstash disconnecting after the service was restarted. logstash just shows some plugin warnings due to service restart.

logstash config is [here](https://www.scribd.com/doc/273179795/Netflow-conf)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:33am UTC](https://discuss.elastic.co/t/logstash-stops-exporting-netflow-data-to-elasticsearch/26604/5 "2017-07-06T05:33:10Z")

</div>


