# Netflow codec not working as expected

**URL:** <https://discuss.elastic.co/t/netflow-codec-not-working-as-expected/115822>\
**Category:** Logstash\
**Created:** [January 17, 2018, 4:28am UTC](https://discuss.elastic.co/t/netflow-codec-not-working-as-expected/115822 "2018-01-17T04:28:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![JustinHoMi](https://avatars.discourse-cdn.com/v4/letter/j/ce7236/32.png) [@JustinHoMi](https://discuss.elastic.co/u/JustinHoMi)\
**Post date:** [January 17, 2018, 4:28am UTC](https://discuss.elastic.co/t/netflow-codec-not-working-as-expected/115822/1 "2018-01-17T04:28:31Z")

</div>

I've just installed the logstash 6.1.1.1-1 rpm on CentOS 7 and am having trouble getting the netflow codec to work as expected. It appears as if "/usr/share/logstash/modules/netflow/configuration/logstash/netflow.conf.erb" is not getting evaluated (the netflow data model is not getting translated to the common format that happens in the filter within netflow.conf.erb). The filter works fine if I copy it to my /etc/logstash/conf.d/netflow.conf.

Any idea why it's behaving like this?

Thanks,  
Justin

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 14, 2018, 4:28am UTC](https://discuss.elastic.co/t/netflow-codec-not-working-as-expected/115822/2 "2018-02-14T04:28:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.