# Netflow Module (--setup) Broken

**URL:** <https://discuss.elastic.co/t/netflow-module-setup-broken/151652>\
**Category:** Logstash\
**Created:** [October 9, 2018, 2:42pm UTC](https://discuss.elastic.co/t/netflow-module-setup-broken/151652 "2018-10-09T14:42:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Clay\_Curtis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/clay_curtis/32/78343_2.png) [@Clay\_Curtis](https://discuss.elastic.co/u/Clay_Curtis)\
**Post date:** [October 9, 2018, 2:42pm UTC](https://discuss.elastic.co/t/netflow-module-setup-broken/151652/1 "2018-10-09T14:42:16Z")

</div>

I have been messing with the most basic thing for two days now and cannot get it to function.

I am trying to run `bin/logstash --modules netflow --setup` and it fails. Without `--setup` it doesn't crash, but I need it to configure ES and Kibana to make all the dashboards and such. I originally was trying to use the netflow collector on a device and ship the logs directly to an ESaas instance in Amazon AWS. This kept failing out and I thought it might be due to AWS' custom build of that service.

So then I tried docker-elk and it still failed so I just followed the docs and installed ELK on my local ubuntu machine (not containerized) from the elastic repo as the docs show. Even with a clean install with everything running on localhost, running `bin/logstash --modules netflow --setup` fails with the following logs.

[https://gist.github.com/clay584/22d6f5fd689e8223f94bd2a81fadc4db](https://gist.github.com/clay584/22d6f5fd689e8223f94bd2a81fadc4db)

At this point, I can only assume it is a bug. Has anybody else run into this issue?

---

<div class="post-metadata">

**Author:** ![rcowart](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rcowart/32/88091_2.png) [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Post date:** [October 25, 2018, 11:31am UTC](https://discuss.elastic.co/t/netflow-module-setup-broken/151652/2 "2018-10-25T11:31:28Z")

</div>

You may want to try ElastiFlow...

> **[robcowart/elastiflow](https://github.com/robcowart/elastiflow)**
>
> Network flow Monitoring (Netflow, sFlow and IPFIX) with the Elastic Stack - robcowart/elastiflow

The Logstash Netflow Module was based on ElastiFlow 1.0.0 and is quite dated now.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 22, 2018, 11:45am UTC](https://discuss.elastic.co/t/netflow-module-setup-broken/151652/3 "2018-11-22T11:45:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.