# Latest **URL:** https://forum.elastiflow.com/latest.md [Latest](https://forum.elastiflow.com/latest.md) · [Categories](https://forum.elastiflow.com/categories.md) · [Tags](https://forum.elastiflow.com/tags.md) --- ## [Welcome to ElastiFlow Community! 👋](https://forum.elastiflow.com/t/welcome-to-elastiflow-community/5)
**Author:** [@system](https://forum.elastiflow.com/u/system)\ **Replies:** 0\ **Last updated:** [September 16, 2023, 7:23pm UTC](https://forum.elastiflow.com/t/welcome-to-elastiflow-community/5 "2023-09-16T19:23:48Z")
Welcome to the ElastiFlow Community! We discuss ElastiFlow solutions and other topics related to networking, observability and security! Whether you’re a seasoned network administrator, a security expert, or just gett… --- ## [what kind of dashboard load times are you seeing with the large cluster setup?](https://forum.elastiflow.com/t/what-kind-of-dashboard-load-times-are-you-seeing-with-the-large-cluster-setup/400)
**Author:** [@DaringHarbor63](https://forum.elastiflow.com/u/DaringHarbor63)\ **Replies:** 1\ **Last updated:** [September 21, 2026, 7:40am UTC](https://forum.elastiflow.com/t/what-kind-of-dashboard-load-times-are-you-seeing-with-the-large-cluster-setup/400 "2026-09-21T07:40:20Z")
hi, i’m trying to get a rough feel for what normal dashboard performance looks like with the large cluster setup from the docs. if you have about a day of data coming in at close to 48k flows per second, how long do the… --- ## [Cisco ASA NSEL: firewall\_event field and fw\_ext\_event fields support](https://forum.elastiflow.com/t/cisco-asa-nsel-firewall-event-field-and-fw-ext-event-fields-support/395)
**Author:** [@Evgeny](https://forum.elastiflow.com/u/Evgeny)\ **Replies:** 2\ **Last updated:** [July 16, 2026, 5:19pm UTC](https://forum.elastiflow.com/t/cisco-asa-nsel-firewall-event-field-and-fw-ext-event-fields-support/395 "2026-07-16T17:19:36Z")
Hi everyone, I am currently testing ElastiFlow v7.26.2 in my environment and have encountered an issue with Cisco ASA NSEL (NetFlow Security Event Logging) event parsing. Specifically, during my testing, I noticed that… --- ## [Dashboards for flowcoll 7.25.0](https://forum.elastiflow.com/t/dashboards-for-flowcoll-7-25-0/394)
**Author:** [@ChIP](https://forum.elastiflow.com/u/ChIP)\ **Replies:** 2\ **Last updated:** [June 3, 2026, 12:27pm UTC](https://forum.elastiflow.com/t/dashboards-for-flowcoll-7-25-0/394 "2026-06-03T12:27:16Z")
Hi Where can i download the best/most recent dadhboards for latest flowcoll? All i can find are those on the old github site. Thanks for your time ChIP --- ## [sFlow data underreporting dramatically in Kibana/ElastiFlow compared to real traffic](https://forum.elastiflow.com/t/sflow-data-underreporting-dramatically-in-kibana-elastiflow-compared-to-real-traffic/393)
**Author:** [@nicolassteel](https://forum.elastiflow.com/u/nicolassteel)\ **Replies:** 3\ **Last updated:** [May 21, 2026, 9:11pm UTC](https://forum.elastiflow.com/t/sflow-data-underreporting-dramatically-in-kibana-elastiflow-compared-to-real-traffic/393 "2026-05-21T21:11:23Z")
Hi everyone, I am facing a massive data discrepancy issue in my ElastiFlow/Kibana setup (running on AlmaLinux) regarding sFlow data from my Extreme Networks VOSS / Fabric Engine switches. The Problem: When performing … --- ## [Flowcollector not sending data to HTTP output](https://forum.elastiflow.com/t/flowcollector-not-sending-data-to-http-output/391)
**Author:** [@alumnihawk](https://forum.elastiflow.com/u/alumnihawk)\ **Replies:** 3\ **Last updated:** [April 22, 2026, 11:57am UTC](https://forum.elastiflow.com/t/flowcollector-not-sending-data-to-http-output/391 "2026-04-22T11:57:13Z")
Hi, I’m trying to make the flow collector send/push data output to an HTTP endpoint, as per documented HTTP OUTPUT. Problem is, it doesn’t seem to ever send anything. Checking with tcpdump on the remote server, flowcoll… --- ## [Elastic Chicago User Group Meetup on April 15](https://forum.elastiflow.com/t/elastic-chicago-user-group-meetup-on-april-15/387)
**Author:** [@Sara](https://forum.elastiflow.com/u/Sara)\ **Replies:** 0\ **Last updated:** [April 1, 2026, 5:53pm UTC](https://forum.elastiflow.com/t/elastic-chicago-user-group-meetup-on-april-15/387 "2026-04-01T17:53:46Z")
We’ll be presenting at the Elastic Chicago User Group meetup on April 15 Context Engineering for Agentic Network Forensics Reginald Ross, Elastiflow In this session, we’ll explore how to use Elastic alongside Mermin (… --- ## [ElastiFlow 7.22 released!](https://forum.elastiflow.com/t/elastiflow-7-22-released/386)
**Author:** [@Sara](https://forum.elastiflow.com/u/Sara)\ **Replies:** 0\ **Last updated:** [March 24, 2026, 6:17pm UTC](https://forum.elastiflow.com/t/elastiflow-7-22-released/386 "2026-03-24T18:17:22Z")
ElastiFlow 7.22 has been released! You can read more about the latest features, updates, and fixes in the docs. Features NetObserv SNMP: Smart Object Polling - NetObserv SNMP reduces noise by changing default poll… --- ## [Flow output metrics json to file](https://forum.elastiflow.com/t/flow-output-metrics-json-to-file/384)
**Author:** [@anon16964573](https://forum.elastiflow.com/u/anon16964573)\ **Replies:** 5\ **Last updated:** [March 16, 2026, 4:07pm UTC](https://forum.elastiflow.com/t/flow-output-metrics-json-to-file/384 "2026-03-16T16:07:54Z")
Hi, I want to pipe the flow data to be consumed to a file, separate from the “status logs” displaying errors etc. Any way to accomplish this? I imagine it has something to do with stdout enabled and in json format. Want… --- ## [ElastiFlow 7.21.2 released!](https://forum.elastiflow.com/t/elastiflow-7-21-2-released/383)
**Author:** [@Sara](https://forum.elastiflow.com/u/Sara)\ **Replies:** 0\ **Last updated:** [March 12, 2026, 9:33pm UTC](https://forum.elastiflow.com/t/elastiflow-7-21-2-released/383 "2026-03-12T21:33:55Z")
ElastiFlow 7.21.2 has been released! You can read more about the latest features, updates, and fixes in the docs. Azure VNet Input - Export type labels for Azure VNet Logs are now correctly set, resolving an issue wh… --- ## [Docker Deployment guide for Netobserve flow and snmp stack](https://forum.elastiflow.com/t/docker-deployment-guide-for-netobserve-flow-and-snmp-stack/370)
**Author:** [@anshjoshi](https://forum.elastiflow.com/u/anshjoshi)\ **Replies:** 11\ **Last updated:** [March 11, 2026, 7:03pm UTC](https://forum.elastiflow.com/t/docker-deployment-guide-for-netobserve-flow-and-snmp-stack/370 "2026-03-11T19:03:39Z")
Hello, I have been looking for a guide that deploys Netobserve Flow and SNMP to monitor firewall in a docker compose environment, I would appreciate if someone provides detailed steps/guide to achieve this. Thanks, An… --- ## [Elastiflow Installation in Azure](https://forum.elastiflow.com/t/elastiflow-installation-in-azure/382)
**Author:** [@harveyk](https://forum.elastiflow.com/u/harveyk)\ **Replies:** 1\ **Last updated:** [March 2, 2026, 1:00pm UTC](https://forum.elastiflow.com/t/elastiflow-installation-in-azure/382 "2026-03-02T13:00:56Z")
Hello Our cloud team is attempting to install Elastiflow in Azure, using the instructions provided, however they are receiving the following errors. Would anyone know the cause and are there any Azure specific instruct… --- ## [Elastic 9.x update](https://forum.elastiflow.com/t/elastic-9-x-update/376)
**Author:** [@anon16964573](https://forum.elastiflow.com/u/anon16964573)\ **Replies:** 4\ **Last updated:** [February 28, 2026, 5:54pm UTC](https://forum.elastiflow.com/t/elastic-9-x-update/376 "2026-02-28T17:54:26Z")
Hi, is there an ETA for elastic 9.x? On the official docs I only see \>8.x supported. --- ## [Snmp-collector docker restarting](https://forum.elastiflow.com/t/snmp-collector-docker-restarting/372)
**Author:** [@teqo.it](https://forum.elastiflow.com/u/teqo.it)\ **Replies:** 7\ **Last updated:** [February 25, 2026, 6:16am UTC](https://forum.elastiflow.com/t/snmp-collector-docker-restarting/372 "2026-02-25T06:16:40Z")
Hello team, i have installed elastiflow with elasticsearch, kibana, and flow collector. after compose up command snmp-collector keeps restarting. i have basic license error below. tried to create .env file and store id… --- ## [We're excited to announce the GA of Mermin](https://forum.elastiflow.com/t/were-excited-to-announce-the-ga-of-mermin/369)
**Author:** [@Sara](https://forum.elastiflow.com/u/Sara)\ **Replies:** 0\ **Last updated:** [February 11, 2026, 4:34pm UTC](https://forum.elastiflow.com/t/were-excited-to-announce-the-ga-of-mermin/369 "2026-02-11T16:34:30Z")
ElastiFlow Announces General Availability of Mermin, Eliminating the Kubernetes Network Blind Spot with OpenTelemetry-Native Observability Mermin is an open source solution that leverages lightweight, eBPF-powered techn… --- ## [We launched a podcast -- Signal \> Noise](https://forum.elastiflow.com/t/we-launched-a-podcast-signal-noise/366)
**Author:** [@Sara](https://forum.elastiflow.com/u/Sara)\ **Replies:** 0\ **Last updated:** [February 6, 2026, 10:45pm UTC](https://forum.elastiflow.com/t/we-launched-a-podcast-signal-noise/366 "2026-02-06T22:45:47Z")
ICYMI on LinkedIn – We started a podcast! Find us on Spotify Find us on Apple Podcasts Find us on YouTube --- ## [The Chrysalis Backdoor](https://forum.elastiflow.com/t/the-chrysalis-backdoor/361)
**Author:** [@rob](https://forum.elastiflow.com/u/rob)\ **Replies:** 0\ **Last updated:** [February 4, 2026, 3:22pm UTC](https://forum.elastiflow.com/t/the-chrysalis-backdoor/361 "2026-02-04T15:22:08Z")
I wanted to make all of our users aware of a recent Backdoor discovered, related to the popular windows app Notepad++. You can read the details here… https://www.rapid7.com/blog/post/tr-chrysalis-backdoor-dive-into-lotus… --- ## [ElastiFlow 7.21 released! (OTel Traces, NetObserv Configuration...)](https://forum.elastiflow.com/t/elastiflow-7-21-released-otel-traces-netobserv-configuration/360)
**Author:** [@Sara](https://forum.elastiflow.com/u/Sara)\ **Replies:** 0\ **Last updated:** [February 4, 2026, 1:32am UTC](https://forum.elastiflow.com/t/elastiflow-7-21-released-otel-traces-netobserv-configuration/360 "2026-02-04T01:32:09Z")
ElastiFlow 7.21.0 has been released! You can read more about the latest features, updates, and fixes in the docs. Features NetObserv Configuration - You can now encrypt some NetObserv configuration files on disk; for… --- ## [Elastiflow error message in docker](https://forum.elastiflow.com/t/elastiflow-error-message-in-docker/355)
**Author:** [@nobo73](https://forum.elastiflow.com/u/nobo73)\ **Replies:** 3\ **Last updated:** [January 21, 2026, 12:30pm UTC](https://forum.elastiflow.com/t/elastiflow-error-message-in-docker/355 "2026-01-21T12:30:44Z")
Hi, I am new to Elastiflow. Now, I’ve just tried to install Elastiflow using docker image on TrueNAS CE 25.10. Then, I get this error-log message in docker container. What do I need to do for fixing it? {“level”:“err… --- ## [Elastiflow with Kafka as streaming and Clickhouse and Grafana for visualization](https://forum.elastiflow.com/t/elastiflow-with-kafka-as-streaming-and-clickhouse-and-grafana-for-visualization/356)
**Author:** [@kazuyuki114](https://forum.elastiflow.com/u/kazuyuki114)\ **Replies:** 2\ **Last updated:** [January 19, 2026, 11:32am UTC](https://forum.elastiflow.com/t/elastiflow-with-kafka-as-streaming-and-clickhouse-and-grafana-for-visualization/356 "2026-01-19T11:32:55Z")
In my enterprise, our team lead wants to integrate Elastiflow with our Grafana stack (include Grafana and Clickhouse) so I need someone who’ve tried this stack and give me some advice about how to visualize the data and … --- ## [How to configure network proxy?](https://forum.elastiflow.com/t/how-to-configure-network-proxy/357)
**Author:** [@milosh](https://forum.elastiflow.com/u/milosh)\ **Replies:** 1\ **Last updated:** [January 16, 2026, 1:36pm UTC](https://forum.elastiflow.com/t/how-to-configure-network-proxy/357 "2026-01-16T13:36:51Z")
I am getting several timeouts in logs as flowcoll service fail to connect to Internet. I don’t have direct Internet access, but must be used the proxy. I am running ElastiFlow on Ubuntu 24.04 and have ser the proxy env v… --- ## [ASN name shows "unknown" when using GeoLite2-ASN](https://forum.elastiflow.com/t/asn-name-shows-unknown-when-using-geolite2-asn/354)
**Author:** [@Peter\_Accuris](https://forum.elastiflow.com/u/Peter_Accuris)\ **Replies:** 4\ **Last updated:** [January 7, 2026, 12:00am UTC](https://forum.elastiflow.com/t/asn-name-shows-unknown-when-using-geolite2-asn/354 "2026-01-07T00:00:39Z")
Hello! I’ve noticed that periodically my Elastiflow ECS results when shown in Kibana will show “unknown” for an ASN’s name next to the ASN itself, while the MaxMind database on the same host reports the correct name. Fr… --- ## [ElastiFlow 7.20 released!](https://forum.elastiflow.com/t/elastiflow-7-20-released/352)
**Author:** [@Sara](https://forum.elastiflow.com/u/Sara)\ **Replies:** 0\ **Last updated:** [December 11, 2025, 11:15pm UTC](https://forum.elastiflow.com/t/elastiflow-7-20-released/352 "2025-12-11T23:15:20Z")
We’ve just released 7.20 Updates Kafka Output - Added support for encrypted private keys when using mTLS. SNMP Definitions - Released snmp v1.21.0 for additional MIB support Visit our Docs site to learn more. --- ## [UDP Server to Flow Decoder is 90% full. This is normal when the collector is starting. If it persists for hours, it may indicate that you are at your license threshold or your system is under-resourced](https://forum.elastiflow.com/t/udp-server-to-flow-decoder-is-90-full-this-is-normal-when-the-collector-is-starting-if-it-persists-for-hours-it-may-indicate-that-you-are-at-your-license-threshold-or-your-system-is-under-resourced/351)
**Author:** [@nico.imboccioli](https://forum.elastiflow.com/u/nico.imboccioli)\ **Replies:** 1\ **Last updated:** [December 2, 2025, 5:50pm UTC](https://forum.elastiflow.com/t/udp-server-to-flow-decoder-is-90-full-this-is-normal-when-the-collector-is-starting-if-it-persists-for-hours-it-may-indicate-that-you-are-at-your-license-threshold-or-your-system-is-under-resourced/351 "2025-12-02T17:50:30Z")
Hello I just installed a new elastiflow+kibana enviroment but I'm experiencing an issue on performance. - The environmnet is hosted by enough resources CONTAINER ID NAME CPU % MEM US… --- ## [Flow processor to output writer is 90% full while Monitor Output: decoding rate: 0 records/second](https://forum.elastiflow.com/t/flow-processor-to-output-writer-is-90-full-while-monitor-output-decoding-rate-0-records-second/347)
**Author:** [@vincenttt7](https://forum.elastiflow.com/u/vincenttt7)\ **Replies:** 9\ **Last updated:** [November 24, 2025, 10:25am UTC](https://forum.elastiflow.com/t/flow-processor-to-output-writer-is-90-full-while-monitor-output-decoding-rate-0-records-second/347 "2025-11-24T10:25:39Z")
Hi Everyone, i’m newer to flowcoll, i getting a problem when start the flowcoll progress. The elk look only receive totally 256 flow record everytime the flowcoll service start. I’m have try 8C16G, 16C32G for my ubuntu … --- ## [Flow.sampling\_interval](https://forum.elastiflow.com/t/flow-sampling-interval/346)
**Author:** [@Robriker](https://forum.elastiflow.com/u/Robriker)\ **Replies:** 12\ **Last updated:** [November 20, 2025, 11:13am UTC](https://forum.elastiflow.com/t/flow-sampling-interval/346 "2025-11-20T11:13:06Z")
Hello everyone, I’m currently facing an issue while collecting NetFlow data from my backbone routers (Cisco ASR 9902 and ASR 9906). The flows are successfully received in ElastiFlow, and I can visualize them in Kibana … --- ## [Snmp version 3 doesn't work with EF\_PROCESSOR\_ENRICH\_NETIF\_SNMP\_ACCESS\_\*](https://forum.elastiflow.com/t/snmp-version-3-doesnt-work-with-ef-processor-enrich-netif-snmp-access/343)
**Author:** [@dmgeurts](https://forum.elastiflow.com/u/dmgeurts)\ **Replies:** 6\ **Last updated:** [October 31, 2025, 11:33am UTC](https://forum.elastiflow.com/t/snmp-version-3-doesnt-work-with-ef-processor-enrich-netif-snmp-access/343 "2025-10-31T11:33:11Z")
I’m trying to use netbox\_get\_device-v3.py from ElastiFlow-Tools, to create the snmp config file for EF\_PROCESSOR\_ENRICH\_NETIF\_SNMP\_ACCESS\_PATH, or wherever flowcoll might read this information from by default. When conf… --- ## [SNMP enrichment - authorizationError](https://forum.elastiflow.com/t/snmp-enrichment-authorizationerror/345)
**Author:** [@dmgeurts](https://forum.elastiflow.com/u/dmgeurts)\ **Replies:** 2\ **Last updated:** [October 30, 2025, 2:27pm UTC](https://forum.elastiflow.com/t/snmp-enrichment-authorizationerror/345 "2025-10-30T14:27:23Z")
Trying to get EF\_PROCESSOR\_ENRICH\_NETIF\_SNMP\_\* working, but hitting an error, when snmpget works fine. snmpget command and response: user@server:~$ snmpget -v3 -l authPriv -u \*\*\*\*\*\*\*\* -a SHA-256 -A "\*\*\*\*\*\*\*\*" -x AES -X… --- ## [Type conflict in Elasticsearch for "record.collect.timestamp" date/long](https://forum.elastiflow.com/t/type-conflict-in-elasticsearch-for-record-collect-timestamp-date-long/342)
**Author:** [@dmgeurts](https://forum.elastiflow.com/u/dmgeurts)\ **Replies:** 4\ **Last updated:** [October 29, 2025, 2:57pm UTC](https://forum.elastiflow.com/t/type-conflict-in-elasticsearch-for-record-collect-timestamp-date-long/342 "2025-10-29T14:57:00Z")
Hi all. Elasticsearch is throwing me an error about a type conflict for “record.collect.timestamp”. This field has a type conflict The type of the record.collect.timestamp field changes across indices and might not be a… --- ## [How to update ElastiFlow?](https://forum.elastiflow.com/t/how-to-update-elastiflow/341)
**Author:** [@pmh](https://forum.elastiflow.com/u/pmh)\ **Replies:** 1\ **Last updated:** [October 22, 2025, 6:37pm UTC](https://forum.elastiflow.com/t/how-to-update-elastiflow/341 "2025-10-22T18:37:59Z")
Hi all, I installed ElastiFlow with the documented quickstart method on Ubuntu. Working great. Now I was on EF 7.7.2 and according to the Changelog 7.18.1 is the current version. How to update the entire stack? I did… [Next page](https://forum.elastiflow.com/latest.md?page=1)