# Netflow\_module error
**URL:** https://discuss.elastic.co/t/netflow-module-error/195723
**Category:** Logstash
**Created:** [August 19, 2019, 11:08am UTC](https://discuss.elastic.co/t/netflow-module-error/195723 "2019-08-19T11:08:34Z")
**Posts on this page:** 17
**Page:** 1
### Author:  [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [August 19, 2019, 11:08am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/1 "2019-08-19T11:08:34Z")
Hi I am trying to use logstash netflow module but when I am executing "bin/logstash --modules netflow -M netflow.var.input.udp.port=2055" then I am getting error saying:
"[WARN] 2019-08-19 16:26:18.548 [Ruby-0-Thread-4: :1] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>"[http://localhost:9200/](http://localhost:9200/)", :error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>"Elasticsearch Unreachable: [[http://localhost:9200/](http://localhost:9200/)][Manticore::SocketException] Connection refused (Connection refused)"}"...Although I have configured modules in logstash.yml..
"modules:
- name: netflow
var.input.udp.port: 2055
var.elasticsearch.hosts: "192.168.0.178:9200"
var.kibana.host: "192.168.31.205:5601"
"
still why this error??
---
### Author:  [@thirty2](https://discuss.elastic.co/u/thirty2)
#### Post date: [August 19, 2019, 11:11am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/2 "2019-08-19T11:11:21Z")
Hi,
try to add:
```
var.kibana.scheme: http
var.kibana.ssl.enabled: false
var.kibana.ssl.verification_mode: disable
```
Stop logstash and install module first by running:
> /usr/share/logstash/bin/logstash --modules netflow --setup -M netflow.var.input.udp.port=2055 -M netflow.var.elasticsearch.hosts="yourhost:port" -M netflow.var.kibana.host="yourhost:port" -M netflow.var.kibana.ssl.enabled=false -M netflow.var.kibana.ssl.verification\_mode=disable
---
### Author:  [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [August 19, 2019, 11:26am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/3 "2019-08-19T11:26:10Z")
After that what should I do?
---
### Author:  [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [August 19, 2019, 11:33am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/4 "2019-08-19T11:33:14Z")
@thirty2 I have executed the above code and I am getting output..but I have to execute multiple .conf files so how am I gonna execute those??also I have added those above lines in logstash.yml...still getting an error while executing "sudo bin/logstash --modules netflow -M netflow.var.input.udp.port=2055"
---
### Author:  [@thirty2](https://discuss.elastic.co/u/thirty2)
#### Post date: [August 19, 2019, 12:12pm UTC](https://discuss.elastic.co/t/netflow-module-error/195723/5 "2019-08-19T12:12:49Z")
@Vikash_Singh1 You should run the command i posted, the long one.
---
### Author:  [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [August 19, 2019, 1:00pm UTC](https://discuss.elastic.co/t/netflow-module-error/195723/6 "2019-08-19T13:00:42Z")
I have executed the program
---
### Author:  [@thirty2](https://discuss.elastic.co/u/thirty2)
#### Post date: [August 19, 2019, 1:04pm UTC](https://discuss.elastic.co/t/netflow-module-error/195723/7 "2019-08-19T13:04:10Z")
please be more specific....
---
### Author:  [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [August 20, 2019, 5:42am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/8 "2019-08-20T05:42:27Z")
I've executed this statement...now I have to run another instances of .conf file so how am i going to execute those .conf files??
---
### Author:  [@thirty2](https://discuss.elastic.co/u/thirty2)
#### Post date: [August 20, 2019, 6:00am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/9 "2019-08-20T06:00:48Z")
> [@Vikash\_Singh1](#):
>
> another instances of .conf file so how am i g
Just start the logstash
---
### Author:  [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [August 20, 2019, 6:04am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/10 "2019-08-20T06:04:07Z")
but the port 9600 is already busy because of the above code
---
### Author:  [@thirty2](https://discuss.elastic.co/u/thirty2)
#### Post date: [August 20, 2019, 6:17am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/11 "2019-08-20T06:17:36Z")
Once you installed module by the command, you can kill it. Then start the logstash
---
### Author:  [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [August 20, 2019, 7:03am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/12 "2019-08-20T07:03:30Z")
I am trying to run the logstash using "/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/http.conf"...but the netflow module is not working..I even tried using systemctl start logstash but still didn't getting any results
---
### Author:  [@thirty2](https://discuss.elastic.co/u/thirty2)
#### Post date: [August 20, 2019, 7:32am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/13 "2019-08-20T07:32:15Z")
netflow module configuration needs to be configured in /etc/logstash/logstash.yml.
---
### Author:  [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [August 20, 2019, 7:38am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/14 "2019-08-20T07:38:00Z")
I have configured it in logstash.yml.
modules:
- name: netflow
var.input.udp.port: 2055
var.elasticsearch.hosts: "192.168.0.178:9200"
var.kibana.host: "192.168.31.205:5601"
var.kibana.scheme: http
var.kibana.ssl.enabled: false
var.kibana.ssl.verification\_mode: disable
---
### Author:  [@thirty2](https://discuss.elastic.co/u/thirty2)
#### Post date: [August 20, 2019, 7:47am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/15 "2019-08-20T07:47:49Z")
> [@Vikash\_Singh1](#):
>
> var.elasticsearch.hosts: "192.168.0.178:9200"
> var.kibana.host: "192.168.31.205:5601"
remove your http.conf, then start logstash with systemctl. What is an error? if port is busy, what is runing on the port than?
---
### Author:  [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)
#### Post date: [August 20, 2019, 9:05am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/16 "2019-08-20T09:05:47Z")
Thanks @thirty2...It did work for me
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 17, 2019, 9:05am UTC](https://discuss.elastic.co/t/netflow-module-error/195723/17 "2019-09-17T09:05:50Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.