# NOOB, Elastic Stack (Search/Logstash) Netflow Cisco SD-WAN

**URL:** <https://discuss.elastic.co/t/noob-elastic-stack-search-logstash-netflow-cisco-sd-wan/338687>\
**Category:** Logstash\
**Created:** [July 18, 2023, 2:01pm UTC](https://discuss.elastic.co/t/noob-elastic-stack-search-logstash-netflow-cisco-sd-wan/338687 "2023-07-18T14:01:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mhollingsworth1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mhollingsworth1/32/123591_2.png) [@mhollingsworth1](https://discuss.elastic.co/u/mhollingsworth1)\
**Post date:** [July 18, 2023, 2:01pm UTC](https://discuss.elastic.co/t/noob-elastic-stack-search-logstash-netflow-cisco-sd-wan/338687/1 "2023-07-18T14:01:36Z")

</div>

I've been using an ELK stack for Netflow collection for roughly 1.5yr with my Cisco environment. Recently I've migrated onto SD-WAN and am sending my netflow data to the collector but for whatever reason all I'm seeing is ICMP flows... and most recently it has bombed out and now I'm not seeing anything. I've restarted both logstash and kibana but still no output. Looking for assistance, Thanks in advance!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 15, 2023, 2:01pm UTC](https://discuss.elastic.co/t/noob-elastic-stack-search-logstash-netflow-cisco-sd-wan/338687/2 "2023-08-15T14:01:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.