Netflow Logstash

Elastic Stack Logstash
1

Hi,
I have problems processing data netflow.
I can not create index.
This is my configuration, please help me.!!!

input {
udp {
port => 1234
type => "netflow"
codec => netflow
}
}
output {
if ( [type] == "netflow" ) {
elasticsearch {
hosts => "10.10.1.162:9200"
index => "logstash-%{+YYYY.MM.dd}"
}
}
}

2

are you seeing any error messages in log for logstash?

3

It works normally but does not receive any data.

4

Have you tried outputting to STDOUT and verifying that the data is being processed?

https://www.elastic.co/guide/en/logstash/current/plugins-outputs-stdout.html

You could also give the output a different index name if you have other data that is going into the logstash index

1 Like
5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.