Netflow Module : Logstash geoip2.exception

Elastic Stack Logstash
1

The Kibana Dashboard is empty, despite of Logstash receives the netflow traffic.

The logstash log has the following prints :

[DEBUG][org.logstash.filters.GeoIPFilter] IP not found! exception=com.maxmind.geoip2.exception.AddressNotFoundException: The address 48.0.0.144 is not in the database., field=[netflow][src_addr], event=1970-01-02T02:50:21.000Z 192.168.100.2 %{message}

[DEBUG][logstash.filters.geoip ] IP 48.0.0.144 was not found in the database {:event=>#LogStash::Event:0xf04f397}

Everything worked fine until I restarted the computer.

before restarting I saw the sent netflow messages in Kibana :

image
image.png1273×120 28.1 KB

The logstash input config is

input {
udp {
host => "10.213.79.240"
port => 2055
codec => netflow
}
}

Could please explain, what happened and how to fix the problem

thanks

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.