# Unable to Process VPC Flow Logs using filebeat 7.8.0

**URL:** <https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229>\
**Category:** Beats\
**Tags:** beats-module, filebeat\
**Created:** [July 22, 2020, 3:54pm UTC](https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229 "2020-07-22T15:54:05Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![nikhilv](https://avatars.discourse-cdn.com/v4/letter/n/ce73a5/32.png) [@nikhilv](https://discuss.elastic.co/u/nikhilv)\
**Post date:** [July 22, 2020, 3:54pm UTC](https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229/1 "2020-07-22T15:54:05Z")

</div>

Hello Team,

I'm using filebeat 8.0 and deployed on AWS EKS to ship aws logs to ECK for analysis. I'm using AWS module in filebeat and i didn't face any issues with cloudtrail&elb logs but only facing issues with vpc flowlogs. I'm geeting error like "context deadline exceed", i have increased visibility time out to 45 min but still getting same error. Please help me on this.

---

<div class="post-metadata">

**Author:** ![nikhilv](https://avatars.discourse-cdn.com/v4/letter/n/ce73a5/32.png) [@nikhilv](https://discuss.elastic.co/u/nikhilv)\
**Post date:** [July 25, 2020, 1:47pm UTC](https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229/2 "2020-07-25T13:47:02Z")

</div>

Sorry I'm using file beat 7.8.0 version.

---

<div class="post-metadata">

**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\
**Post date:** [July 27, 2020, 8:58am UTC](https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229/3 "2020-07-27T08:58:08Z")

</div>

You need to provide a more detailed error. Did you configure properly network permissions? Are ES endpoints accessible?

---

<div class="post-metadata">

**Author:** ![nikhilv](https://avatars.discourse-cdn.com/v4/letter/n/ce73a5/32.png) [@nikhilv](https://discuss.elastic.co/u/nikhilv)\
**Post date:** [July 28, 2020, 1:52pm UTC](https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229/4 "2020-07-28T13:52:45Z")

</div>

Hey Mtojek,

Issue got resolved, i'm able to view all the logs now.

Thanks.

---

<div class="post-metadata">

**Author:** ![mtojek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mtojek/32/63863_2.png) [@mtojek](https://discuss.elastic.co/u/mtojek)\
**Post date:** [July 28, 2020, 3:08pm UTC](https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229/5 "2020-07-28T15:08:44Z")

</div>

It would be cool to post a solution though 😉 I'm glad you solved your issue.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 25, 2020, 5:08pm UTC](https://discuss.elastic.co/t/unable-to-process-vpc-flow-logs-using-filebeat-7-8-0/242229/6 "2020-08-25T17:08:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
