# Netflow Logstash

**URL:** <https://discuss.elastic.co/t/netflow-logstash/202277>\
**Category:** Logstash\
**Created:** [October 4, 2019, 4:28am UTC](https://discuss.elastic.co/t/netflow-logstash/202277 "2019-10-04T04:28:23Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheSun](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thesun/32/44614_2.png) [@TheSun](https://discuss.elastic.co/u/TheSun)\
**Post date:** [October 4, 2019, 4:28am UTC](https://discuss.elastic.co/t/netflow-logstash/202277/1 "2019-10-04T04:28:23Z")

</div>

Hi,  
I have problems processing data netflow.  
I can not create index.  
This is my configuration, please help me.!!!

input {  
udp {  
port =\> 1234  
type =\> "netflow"  
codec =\> netflow  
}  
}  
output {  
if ( [type] == "netflow" ) {  
elasticsearch {  
hosts =\> "10.10.1.162:9200"  
index =\> "logstash-%{+YYYY.MM.dd}"  
}  
}  
}

---

<div class="post-metadata">

**Author:** ![Andrew22](https://avatars.discourse-cdn.com/v4/letter/a/f6c823/32.png) [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Post date:** [October 8, 2019, 6:21pm UTC](https://discuss.elastic.co/t/netflow-logstash/202277/2 "2019-10-08T18:21:06Z")

</div>

are you seeing any error messages in log for logstash?

---

<div class="post-metadata">

**Author:** ![TheSun](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thesun/32/44614_2.png) [@TheSun](https://discuss.elastic.co/u/TheSun)\
**Post date:** [October 14, 2019, 2:17am UTC](https://discuss.elastic.co/t/netflow-logstash/202277/3 "2019-10-14T02:17:16Z")

</div>

It works normally but does not receive any data.

---

<div class="post-metadata">

**Author:** ![TechGeekNZ](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/techgeeknz/32/54697_2.png) [@TechGeekNZ](https://discuss.elastic.co/u/TechGeekNZ)\
**Post date:** [October 14, 2019, 3:10am UTC](https://discuss.elastic.co/t/netflow-logstash/202277/4 "2019-10-14T03:10:15Z")

</div>

Have you tried outputting to STDOUT and verifying that the data is being processed?

[https://www.elastic.co/guide/en/logstash/current/plugins-outputs-stdout.html](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-stdout.html)

You could also give the output a different index name if you have other data that is going into the logstash index

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 11, 2019, 3:10am UTC](https://discuss.elastic.co/t/netflow-logstash/202277/5 "2019-11-11T03:10:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.