Netflow Logstash

I have problems processing data netflow.
I can not create index.
This is my configuration, please help me.!!!

input {
udp {
port => 1234
type => "netflow"
codec => netflow
output {
if ( [type] == "netflow" ) {
elasticsearch {
hosts => ""
index => "logstash-%{+YYYY.MM.dd}"

are you seeing any error messages in log for logstash?

It works normally but does not receive any data.

Have you tried outputting to STDOUT and verifying that the data is being processed?

You could also give the output a different index name if you have other data that is going into the logstash index

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.