# Send J-flow(Net-flow) to my Logstash to visualize on Kibana

**URL:** <https://discuss.elastic.co/t/send-j-flow-net-flow-to-my-logstash-to-visualize-on-kibana/45198>\
**Category:** Logstash\
**Created:** [March 23, 2016, 9:26am UTC](https://discuss.elastic.co/t/send-j-flow-net-flow-to-my-logstash-to-visualize-on-kibana/45198 "2016-03-23T09:26:18Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![brayndasilva](https://avatars.discourse-cdn.com/v4/letter/b/2bfe46/32.png) [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Post date:** [March 23, 2016, 9:26am UTC](https://discuss.elastic.co/t/send-j-flow-net-flow-to-my-logstash-to-visualize-on-kibana/45198/1 "2016-03-23T09:26:18Z")

</div>

Hi,

I have set up an ELK server along with a Client Server that are working fine. I configured the client to send Syslogs to Logstash and can visualize it on Kibana and it works fine.

I'm not done yet! I decided to include a Juniper SRX210 router to see if I could send Syslogs and J-Flow to Logstash/ELK Server as well and visualize them with Kibana just like I do with the logs from my Client Server.

How would this be done? I configured my router for J-Flow version 9 by following the following guide; [http://kb.juniper.net/InfoCenter/index?page=content&id=kb16677&actp=search](http://kb.juniper.net/InfoCenter/index?page=content&id=kb16677&actp=search)

So, it should be sending it's flow to port 2222 if I'm correct, but how would I be able to check that? I assume that I will need to edit Logstash's input config file so it accepts port's 2222 flow.

Anyone who can help me out with this one?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [March 25, 2016, 1:48pm UTC](https://discuss.elastic.co/t/send-j-flow-net-flow-to-my-logstash-to-visualize-on-kibana/45198/2 "2016-03-25T13:48:15Z")

</div>

I'm not familiar with Netflow, but how about a tcp input with a netflow codec?

```auto
input {
  tcp {
    port => 2222
    codec => netflow
    type => "netflow"
  }
}

```

---

<div class="post-metadata">

**Author:** ![brayndasilva](https://avatars.discourse-cdn.com/v4/letter/b/2bfe46/32.png) [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Post date:** [April 1, 2016, 12:56pm UTC](https://discuss.elastic.co/t/send-j-flow-net-flow-to-my-logstash-to-visualize-on-kibana/45198/3 "2016-04-01T12:56:12Z")

</div>

Yup, that worked.

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:04am UTC](https://discuss.elastic.co/t/send-j-flow-net-flow-to-my-logstash-to-visualize-on-kibana/45198/4 "2017-07-06T05:04:19Z")

</div>