# Run netflow moudules failed **URL:** \ **Category:** Logstash\ **Created:** [December 12, 2017, 5:41am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236 "2017-12-12T05:41:15Z")\ **Posts on this page:** 17\ **Page:** 1
**Author:** ![antony.y](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Post date:** [December 12, 2017, 5:41am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/1 "2017-12-12T05:41:15Z")
I have tried to using "bin/logstash --modules netlfow --setup" to start the netflow module.But it does not work.The error log is like: [ERROR] 2017-12-12 13:39:52.658 [LogStash::Runner] kibanaclient - Error when executing Kibana client request {:error=\>#\} [ERROR] 2017-12-12 13:39:52.672 [LogStash::Runner] kibanaclient - Error when executing Kibana client request {:error=\>#\} [FATAL] 2017-12-12 13:39:52.691 [LogStash::Runner] runner - An unexpected error occurred! {:error=\>#\, :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/config/modules\_common.rb:97:in `pipeline_configs'", "org/jruby/RubyArray.java:1613:in`each'", "/usr/share/logstash/logstash-core/lib/logstash/config/modules\_common.rb:56:in `pipeline_configs'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:276:in`execute'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:204:in`run'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'", "/usr/share/logstash/lib/bootstrap/environment.rb:71:in`(root)'"]} And my configuration of logstash.yml is just like modules: - name: netflow var.input.udp.port: 9996 var.elasticsearch.hosts: "10.62.18.141:9200" var.kibana.host: "10.62.18.141:5601" Is there anyone who can help me ? ---
**Author:** ![antony.y](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Post date:** [December 12, 2017, 7:31am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/2 "2017-12-12T07:31:18Z")
anyone can help me ? ---
**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\ **Post date:** [December 12, 2017, 7:54am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/3 "2017-12-12T07:54:44Z")
> [@antony.y](#): > > ```auto > Error when executing Kibana client request {:error=># > ``` It seems you are unable to connect to Kibana. Are you certain of the IP address and port? If so, do you have a firewall blocking access? ---
**Author:** ![antony.y](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Post date:** [December 12, 2017, 7:57am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/4 "2017-12-12T07:57:37Z")
yes i am sure that this ip address and port is correct ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/f/9f692893bf9e8b87932957223db17357c5bf0a0c.png) And it seems that it's strange because i set this two ip address as ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/f/bf68cc9df1f053dbbb9293a1d133c256496125fa.png) But from the error , it shows that the logstash intend to connect to "localhost:9200" instead of "10.62.18.141:9200" ---
**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\ **Post date:** [December 12, 2017, 10:16am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/5 "2017-12-12T10:16:35Z")
Try enclosing the IP-and-port string in double or single quotes. You have a colon in the string, which can be interpreted in YAML parsing. ---
**Author:** ![antony.y](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Post date:** [December 12, 2017, 10:55am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/6 "2017-12-12T10:55:20Z")
i wll try that and feedback~ ---
**Author:** ![antony.y](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Post date:** [December 13, 2017, 1:28am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/7 "2017-12-13T01:28:44Z")
still the same . ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/e/7e5193e3cdd7ea9da768759e441ce40123dcd4a6.png) i have stopped the logstash and then restart it. Now i can start the logstash,but the listening port is incorrect. First of all,i have changed the "http.host" in the logstash.yml.The configuration is as below: ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/3/13847a508cabfc5e00ab1e617046c8940cea5e06.png) but the listening port is still 127.0.0.1 instead of 10.71.59.119 Secondary,the netflow port is incorrect,the listening port is now 2055,but my configuration is ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/3/63131da8bb6a2ddc4def07f7c0b531e74eab62de.png) The last one is , i can not see any netflow index in my elasticsearch.. ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/f/0fbc7273cba04bff5aaa1fe2b6a8ae900360c362.png) Can you help me ? ---
**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\ **Post date:** [December 13, 2017, 2:05am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/8 "2017-12-13T02:05:32Z")
Oops. I forgot. The answer is simple: Remove `—modules` from your command line. It ignores the `modules` block in your configuration file when you specify that flag at the command line. ---
**Author:** ![antony.y](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Post date:** [December 13, 2017, 2:17am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/9 "2017-12-13T02:17:49Z")
if i do not specify the netflow module,i can not use --set parameter,and how can i import the kibana panel or elasticserach ? will it generate the pertinent modules automatically? ---
**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\ **Post date:** [December 13, 2017, 2:43am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/10 "2017-12-13T02:43:46Z")
`—setup` should still be used, just not `—modules` ---
**Author:** ![antony.y](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Post date:** [December 13, 2017, 2:55am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/11 "2017-12-13T02:55:13Z")
I've tried that , but i found some questions 1.if you remove the --modules and using "bin/logstash --setup",it doesn't work and shows like below ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/7/07e23c7b49a11dcacd35d4ae2f2047cfcc21929e.png) 2.So i've tried to create a sample conf.d file. ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/c/7c91a509a3730dde432b36b1d49998fa778cb3e5.png) Then i start the logstash ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/4/64bc2f9b388e785daeb0d5fcb5777832ff514020.png) the logstash start successfully,but i can not see any netflow listening port..... ---
**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\ **Post date:** [December 13, 2017, 6:22am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/12 "2017-12-13T06:22:42Z")
Then you’ll have to put those options as command line flags for the setup phase, and after that, you won’t have to do that again. ---
**Author:** ![tatdat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tatdat/32/113160_2.png) [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Post date:** [December 13, 2017, 6:25am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/13 "2017-12-13T06:25:38Z")
Hi @theuntergeek, Can you help me? I got some error when setup netflow module. here is my post [https://discuss.elastic.co/t/run-setup-netflow-module-when-ls-is-a-service-was-install-netflow-module-error/109166/16](https://discuss.elastic.co/t/run-setup-netflow-module-when-ls-is-a-service-was-install-netflow-module-error/109166/16) Thanks so much! ---
**Author:** ![antony.y](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Post date:** [December 13, 2017, 6:26am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/14 "2017-12-13T06:26:45Z")
Yes , if i using the command line flags as the way,it does work!!!! Thank you so much,but it seems that in logstash 5.x version, i can not using the netflow module and syslog input as the same time because this is now supported in this version , even if i change the pipeline.workers in the logstash.yml , is that correct ? ---
**Author:** ![theuntergeek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/theuntergeek/32/44961_2.png) [@theuntergeek](https://discuss.elastic.co/u/theuntergeek)\ **Post date:** [December 13, 2017, 11:36am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/15 "2017-12-13T11:36:10Z")
> [@antony.y](#): > > is that correct ? Yes, that is correct. ---
**Author:** ![antony.y](https://avatars.discourse-cdn.com/v4/letter/a/91b2a8/32.png) [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Post date:** [December 14, 2017, 1:00am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/16 "2017-12-14T01:00:21Z")
this is noted , thanks so much , it's been a big help,thank you~ ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 11, 2018, 1:00am UTC](https://discuss.elastic.co/t/run-netflow-moudules-failed/111236/17 "2018-01-11T01:00:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.