# Netflow and IIS with Elastic

**URL:** <https://discuss.elastic.co/t/netflow-and-iis-with-elastic/292595>\
**Category:** SIEM\
**Created:** [December 21, 2021, 6:47pm UTC](https://discuss.elastic.co/t/netflow-and-iis-with-elastic/292595 "2021-12-21T18:47:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sharjeel](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sharjeel](https://discuss.elastic.co/u/Sharjeel)\
**Post date:** [December 21, 2021, 6:47pm UTC](https://discuss.elastic.co/t/netflow-and-iis-with-elastic/292595/1 "2021-12-21T18:47:21Z")

</div>

Hi there,

I am new here and would like to clear some confusion. I would like to implement Netflow and IIS module (to capture IIS logs). Are those modules free and how can I implement them? Do I need ELK or SIEM for that? I am not looking for cloud or anything paid.

Please attach some documentation to install those and how they work.

Kind regards,  
Sharjeel

P.S. I am really sorry if I am creating my first thread in the wrong category, please move it to the appropriate category. Thanks!

---

<div class="post-metadata">

**Author:** ![fgjensen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fgjensen/32/62320_2.png) [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Post date:** [December 25, 2021, 6:07pm UTC](https://discuss.elastic.co/t/netflow-and-iis-with-elastic/292595/2 "2021-12-25T18:07:24Z")

</div>

Hi @Sharjeel

The IIS and Netflow modules are modules included in Filebeat, please consult the Filebeat documentation [here](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules.html). It is easy to set up Filebeat and enable the modules in a test environment. In production you need to configure security e.g. protect your data transfer to Elasticsearch with TLS.

You need to collect the Filebeat data with Elasticsearch and analyse it with Kibana. Depending on your use case you may choose a free or a payed version of [ELK](https://www.elastic.co/pricing/).

I would recommend you to take a closer look at the Elastic Cloud offer. For sure it a payed service, but you get at lot of value, since you can concentrate on using your data instead of managing an ELK node/cluster.

Best regards  
@fgjensen

---

<div class="post-metadata">

**Author:** ![Sharjeel](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sharjeel](https://discuss.elastic.co/u/Sharjeel)\
**Post date:** [December 27, 2021, 2:14am UTC](https://discuss.elastic.co/t/netflow-and-iis-with-elastic/292595/3 "2021-12-27T02:14:57Z")

</div>

Hello @fgjensen !

Thank you for your reply and for guiding me through. Could you please help me with the dashboard setup? It is really frustrating when it comes to setting up the dashboard. Please attach a guide if there is any.

Also, I have installed ELK but it says "License is not available." I installed the free one.

Kind regards,  
Sharjeel

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 24, 2022, 2:15am UTC](https://discuss.elastic.co/t/netflow-and-iis-with-elastic/292595/4 "2022-01-24T02:15:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.