# Netflow disable pipeline.yml

**URL:** <https://discuss.elastic.co/t/netflow-disable-pipeline-yml/137852>\
**Category:** Logstash\
**Created:** [June 28, 2018, 7:18pm UTC](https://discuss.elastic.co/t/netflow-disable-pipeline-yml/137852 "2018-06-28T19:18:59Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![paulo\_bruck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/paulo_bruck/32/22285_2.png) [@paulo\_bruck](https://discuss.elastic.co/u/paulo_bruck)\
**Post date:** [June 28, 2018, 7:18pm UTC](https://discuss.elastic.co/t/netflow-disable-pipeline-yml/137852/1 "2018-06-28T19:18:59Z")

</div>

Hi

Using debian 9.4  
logstash 6.3.0-1  
kibana 6.3.0  
elasticsearch 6.3.0

When I install netflow by comnand it disable all configs via pipeline.yml and all others logstashs output that is under /etc/logstash/conf.d/\*,conf stops working.

root@zeus:~# /usr/share/logstash/bin/logstash --modules netflow --setup \

> -M "netflow.var.kibana.host=$(hostname -f):5601"   
> -M "netflow.var.kibana.scheme=https"   
> -M "netflow.var.kibana.ssl.enabled=true"   
> -M "netflow.var.kibana.ssl.certificate=/etc/ssl/$(hostname -d)/newcerts/$(hostname -f).crt.pem"   
> -M "netflow.var.kibana.ssl.key=/etc/ssl/$(hostname -d)/private/$(hostname -f).key.pem"   
> -M "netflow.var.kibana.ssl.certificate\_authority=/etc/ssl/$(hostname -d)/cacert.pem"   
> -M "netflow.var.elasticsearch.hosts=127.0.0.1:9200"  
> WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults  
> Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console  
> **[WARN] 2018-06-28 16:06:50.723 [LogStash::Runner] multilocal - Ignoring the 'pipelines.yml' file because modules or command line options are specified**

a) Is there a way to use netflow with others logstash arqchives under /etc/logstash/conf/\*.conf ?

best regards

---

<div class="post-metadata">

**Author:** ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)\
**Post date:** [June 28, 2018, 7:52pm UTC](https://discuss.elastic.co/t/netflow-disable-pipeline-yml/137852/2 "2018-06-28T19:52:17Z")

</div>

I am using netflow with elasticflow and it works great!!! You use the pipelines.yml to configure where to find the .conf files and you can put them anywhere. You just install the plugin with this, not install.

---

<div class="post-metadata">

**Author:** ![paulo\_bruck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/paulo_bruck/32/22285_2.png) [@paulo\_bruck](https://discuss.elastic.co/u/paulo_bruck)\
**Post date:** [June 28, 2018, 8:32pm UTC](https://discuss.elastic.co/t/netflow-disable-pipeline-yml/137852/3 "2018-06-28T20:32:30Z")

</div>

Hi Dalamar

Using netflow via command or into logstash.yml give me errors...8(

Could you copy adn paste your logstash.yml to see where I wrong?

thanks in advanced

---

<div class="post-metadata">

**Author:** ![dalamar666](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@dalamar666](https://discuss.elastic.co/u/dalamar666)\
**Post date:** [June 28, 2018, 8:37pm UTC](https://discuss.elastic.co/t/netflow-disable-pipeline-yml/137852/4 "2018-06-28T20:37:21Z")

</div>

Sure thing,

This is the only config I have as far as pipelines and logstash. The conf files I have are the ones from the project page just adjusted for my environment.  
- pipeline.id: elastiflow  
path.config: "/etc/logstash/elastiflow/conf.d/\*.conf"

> **[robcowart/elastiflow](https://github.com/robcowart/elastiflow)**
>
> elastiflow - Network flow Monitoring (Netflow, sFlow and IPFIX) with the Elastic Stack

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 26, 2018, 8:45pm UTC](https://discuss.elastic.co/t/netflow-disable-pipeline-yml/137852/5 "2018-07-26T20:45:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.