Netflow Traffic in Windows 7 Server

Elastic Stack Logstash
1

Hi-
I have installed logstash on a Windows-7 server and enabled Netflow module on UDP Port listening on 2055. I could see the dashboards got loaded in Kibana. But I don't see any data publishing it from the server.

I could see there is huge traffic getting generated from the server using Wireshark. Am really not sure what's wrong with my config. Here is my command line:

logstash --modules netflow --setup -M netflow.var.elasticsearch.hosts=localhost:9200 -M netflow.var.kibana.host=localhost:5601 -M netflow.var.input.udp.port=2055

Could someone please help.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.