# Logstash with a netflow module AND other config files

**URL:** <https://discuss.elastic.co/t/logstash-with-a-netflow-module-and-other-config-files/141763>\
**Category:** Logstash\
**Created:** [July 26, 2018, 12:31pm UTC](https://discuss.elastic.co/t/logstash-with-a-netflow-module-and-other-config-files/141763 "2018-07-26T12:31:54Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![samia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/samia/32/29046_2.png) [@samia](https://discuss.elastic.co/u/samia)\
**Post date:** [July 26, 2018, 12:31pm UTC](https://discuss.elastic.co/t/logstash-with-a-netflow-module-and-other-config-files/141763/1 "2018-07-26T12:31:54Z")

</div>

Hello,

I'm wandering if it's possible to use logstash with an imported _module_ along side with other configuration files.

I'm using the netflow module. After a first setup (described here : [https://www.elastic.co/guide/en/logstash/current/netflow-module.html](https://www.elastic.co/guide/en/logstash/current/netflow-module.html)).

I added in my logstash.yml the following lines :

//////////// logstash.yml /////////

modules:

- name: netflow  
//////////////////////////////

Every thing worked finely.

Then I tried to add my own config files :

1. If I use the "path.config" inside the logstash.yml file ( path.config: /etc/logstash/conf.d/\*.conf) , I get an error in my logs :

[2018-07-26T12:16:49,669][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

1. If I remove the "path.config" directive from logstash.yml and use the pipeline.yml file to do so :

- pipeline.id: main  
path.config: "/etc/logstash/conf.d/\*.conf"

The file is ignored :  
[2018-07-26T12:52:01,041][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified  
[2018-07-26T12:52:01,589][INFO][logstash.runner] Starting Logstash {"logstash.version"=\>"6.3.0"}  
[2018-07-26T12:52:01,697][INFO][logstash.config.modulescommon] Starting the netflow module  
[2018-07-26T12:52:14,264][INFO][logstash.pipeline] Starting pipeline {:pipeline\_id=\>"module-netflow", "pipeline.workers"=\>48, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>5  
0}

How to do to have Logstash running module sources along with other sources (with their own config files) ?

Thank you in advance.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 28, 2018, 7:17pm UTC](https://discuss.elastic.co/t/logstash-with-a-netflow-module-and-other-config-files/141763/2 "2018-07-28T19:17:25Z")

</div>

> I'm wandering if it's possible to use logstash with an imported module along side with other configuration files.

I don't think that's allowed.

---

<div class="post-metadata">

**Author:** ![samia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/samia/32/29046_2.png) [@samia](https://discuss.elastic.co/u/samia)\
**Post date:** [July 31, 2018, 8:49am UTC](https://discuss.elastic.co/t/logstash-with-a-netflow-module-and-other-config-files/141763/3 "2018-07-31T08:49:59Z")

</div>

Thank you.  
I finally went with 2 instances of logstash and it works.

---

<div class="post-metadata">

**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Post date:** [August 4, 2018, 10:42am UTC](https://discuss.elastic.co/t/logstash-with-a-netflow-module-and-other-config-files/141763/4 "2018-08-04T10:42:42Z")

</div>

@samia, you may want to consider ElastiFlow ([https://github.com/robcowart/elastiflow](https://github.com/robcowart/elastiflow)) for your netflow collection. The Logstash Netflow Module was based on v1.0.0 of ElastiFlow and is now quite old. ElastiFlow can also be configured using pipelines.yml and run together with other pipelines in a single logstash instance.

---

<div class="post-metadata">

**Author:** ![samia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/samia/32/29046_2.png) [@samia](https://discuss.elastic.co/u/samia)\
**Post date:** [August 7, 2018, 8:40am UTC](https://discuss.elastic.co/t/logstash-with-a-netflow-module-and-other-config-files/141763/5 "2018-08-07T08:40:26Z")

</div>

@rcowart Thank you for your advice !  
I'll test your solution.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 4, 2018, 8:40am UTC](https://discuss.elastic.co/t/logstash-with-a-netflow-module-and-other-config-files/141763/6 "2018-09-04T08:40:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
