# Netflow in Logstash does not find the logstash.yml file **URL:** \ **Category:** Logstash\ **Created:** [September 11, 2019, 5:38pm UTC](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115 "2019-09-11T17:38:20Z")\ **Posts on this page:** 6\ **Page:** 2
**Author:** ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Post date:** [September 25, 2019, 9:25pm UTC](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115/22 "2019-09-25T21:25:31Z")
that is good sign. it is running. what is your log file says. mine has this [2019-09-25T16:17:52,971][INFO][logstash.javapipeline] Starting pipeline {:pipeline\_id=\>"module-netflow", "pipeline.workers"=\>16, "pipeline.batch.size"=\>125, "pipeline.batch.delay"=\>50, "pipeline.max\_inflight"=\>2000, :thread=\>"#\"} [2019-09-25T16:17:53,054][INFO][logstash.javapipeline] Pipeline started {"pipeline.id"=\>"module-netflow"} [2019-09-25T16:17:53,103][INFO][logstash.inputs.udp] Starting UDP listener {:address=\>"0.0.0.0:2055"} [2019-09-25T16:17:53,139][INFO][logstash.agent] Pipelines running {:count=\>1, :running\_pipelines=\>[:"module-netflow"], :non\_running\_pipelines=\>} [2019-09-25T16:17:53,168][INFO][logstash.inputs.udp] UDP listener started {:address=\>"0.0.0.0:2055", :receive\_buffer\_bytes=\>"212992", :queue\_size=\>"2000"} [2019-09-25T16:17:53,400][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600} I have this on logstash.yml file. I try both ip\_address/name and both combination none is working ``` modules: - name: netflow var.elasticsearch.hosts: 10.29.111.1:9200 var.elasticsearch.ssl.enabled: false var.kibana.host: elktst10:5601 var.kibana.scheme: http var.kibana.ssl.enabled: false var.kibana.ssl.verification_mode: disable ``` ---
**Author:** ![eemtzc](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eemtzc/32/54095_2.png) [@eemtzc](https://discuss.elastic.co/u/eemtzc)\ **Post date:** [September 25, 2019, 9:29pm UTC](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115/23 "2019-09-25T21:29:32Z")
My log says 2019-09-25T00:07:09,781][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit [2019-09-25T00:08:11,461][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified [2019-09-25T00:08:11,486][FATAL][logstash.runner] Logstash could not be started because there is already another instance using the configured data directory. If you wish to run multiple instances, you must change the "path.data" setting. And I think this was caused because I stopped the logstash service then ran bin/logstash --modules netflow --setup --path.settings /etc/logstash before I started logstash, then all the Netflow thing got installed and setup, same way that happened to you, but on my end the logstash service did not start and I dont have a clue what to do because I have another pipeline on the same logstash server and now is not working ---
**Author:** ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Post date:** [September 25, 2019, 9:39pm UTC](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115/24 "2019-09-25T21:39:07Z")
> [@eemtzc](#): > > e a clue what to do because I have another pipeline on the same logstash server and now is not working you have to remove that -module thing from logstash.yml file and restart logstash and it will start up. I just tested it and it works. ---
**Author:** ![elasticforme](https://avatars.discourse-cdn.com/v4/letter/e/f05b48/32.png) [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Post date:** [September 25, 2019, 9:39pm UTC](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115/25 "2019-09-25T21:39:31Z")
but it still does not solve both of our problem that no data is coming in from netflow ---
**Author:** ![Andrew22](https://avatars.discourse-cdn.com/v4/letter/a/f6c823/32.png) [@Andrew22](https://discuss.elastic.co/u/Andrew22)\ **Post date:** [September 26, 2019, 2:21am UTC](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115/26 "2019-09-26T02:21:37Z")
Im guessing that you have not yet received a template for the netflow. If you run journalctl -fu logstash you will probably see a message about not having received a template yet. Let it run for a bit and see if it starts indexing into elasticaearch ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [October 24, 2019, 2:32am UTC](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115/27 "2019-10-24T02:32:37Z")
Closed on October 24, 2019, 2:32am UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed. [Previous page](https://discuss.elastic.co/t/netflow-in-logstash-does-not-find-the-logstash-yml-file/199115.md?page=1)