Netflow integration not listening on port 2055

Elastic Stack Elastic Agent
1

hi
i have installed elastic 8 and kibana 8.
I have installed the netflow from integration but when i check for open ports on server i do not see port 2055 open.

when installing the integration it says to use elasticagent. i want to collect data from network swtiches that do not have this feature to install agent.

please if someone can give me some directions what i need to do to have it to collect netflow.
regards

2

Hi!

Elastic Agent is a bit of a misnomor sometimes. On some systems you will use Elastic Agent as an "Agent" but for other systems you will use Elastic Agent as a "Collector".

When running as an Agent, you'll collect data about the local system -- that is, the system the Agent is installed on. For example, CPU usage on a Linux System or Security Logs from a Windows system.

When running as a Collector, you'll install Elastic Agent on a device but its primary job will be collecting data from other systems (like Network switches), transforming it, and sending it to Elasticsearch so you can search and visualize it.

Now, Elastic Agent doesnt actually have a Collector Mode or an Agent Mode, it is always able to do both jobs at the same time.

So for collecting Netflow, you want to setup an Elastic Agent on a system, add the Netflow integration to the Elastic Agent policy, and then on your network switches you will have them send Netflow data (and maybe Syslog if you also want to set that up) to the address of the Elastic Agent running the Netflow Integration.