Flow collector doesnt recieve flows

Im running elastic stack, kibana and Netobserve on ubuntu 24.04. Elasticsearch and Kibana are both up, howver i’m getting this error in journalctl on flowcoll service.

{“level”:“error”,“ts”:“2025-10-03T11:13:42.546+0300”,“logger”:“flowcoll.bootstrapper[elasticsearch]”,“caller”:“elasticsearch/bootstrap.go:152”,“msg”:“failed to bootstrap elasticsearch. retrying…”,“code”:“elasticsearch/bootstrap-failure”,“reason”:“error while creating default ilm policy: error while checking if ilm policy exists: error while checking ilm policy ‘elastiflow’ exists: Get “https://127.0.0.1:9200/_ilm/policy/elastiflow\”: tls: failed to verify certificate: x509: certificate is valid for 192.168.68.9, not 127.0.0.1”,“stacktrace”:“github.com/elastiflow/flowcoll/pkg/outputs/elasticsearch.(*Bootstrap).Run\n\t/tmp/collectors/pkg/outputs/elasticsearch/bootstrap.go:152\ngithub.com/elastiflow/flowcoll/pkg/outputs/elasticsearch.NewInstantiatorRegistration.newCreateInstanceFunc.func1\n\t/tmp/collectors/pkg/outputs/elasticsearch/instance_registration.go:165\ngithub.com/elastiflow/go-env-conf/instantiator.(*Instantiator).Run\n\t/go/pkg/mod/github.com/elastiflow/go-env-conf@v0.8.11/instantiator/instantiator.go:81\ngithub.com/elastiflow/flowcoll/pkg/apps/unified_flowcoll.(*App).Run\n\t/tmp/collectors/pkg/apps/unified_flowcoll/app.go:170\nmain.main\n\t/tmp/collectors/cmd/flowcoll/main.go:106\nruntime.main\n\t/usr/local/go/src/runtime/proc.go:272”}

Tried checking all YAML files (elasticsearch, kibana and netobserve ) for wrong paths to certificate or incorrect definition of server IP address.

The error is telling you that the flowcoll service is trying to connect to Elasticsearch at https://127.0.0.1 but the certificate it is using is for 192.168.68.9. You probably need to change the EF_OUTPUT_ELASTICSEARCH_ADDRESSES setting in flowcoll.yml from 127.0.0.1:9200 to 192.168.68.9:9200.

Let us know if that helps.

Regards,

Dexter

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.