Skip to content

[filebeat][netflow] filebeat does't start when internal_networks variable isn't defined in config file #24094

@abraxxa

Description

@abraxxa

The new variable 'internal_networks' is also neither documented in https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-netflow.html nor https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-netflow.html.

Error messages from journalctl -u filebeat --no-pager:

Feb 18 09:38:03 tsa-tc-tsses-1 filebeat[2411]: 2021-02-18T09:38:03.352+0100        INFO        instance/beat.go:474        filebeat stopped.
Feb 18 09:38:03 tsa-tc-tsses-1 filebeat[2411]: 2021-02-18T09:38:03.352+0100        ERROR        instance/beat.go:971        Exiting: Failed to start crawler: creating module reloader failed: could not create module registry for filesets: Error getting config for fileset netflow/log: Error interpreting the template of the input: template: text:8:5: executing "text" at <.internal_networks>: map has no entry for key "internal_networks"
Feb 18 09:38:03 tsa-tc-tsses-1 filebeat[2411]: Exiting: Failed to start crawler: creating module reloader failed: could not create module registry for filesets: Error getting config for fileset netflow/log: Error interpreting the template of the input: template: text:8:5: executing "text" at <.internal_networks>: map has no entry for key "internal_networks"

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions