bind'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:116:in
udp_listener'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:68:in run'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:328:in
inputworker'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:320:in block in start_input'"]} [INFO ] 2020-05-12 23:59:22.373 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9601} [INFO ] 2020-05-12 23:59:27.226 [[main]<udp] udp - Starting UDP listener {:address=>"0.0.0.0:6343"} [ERROR] 2020-05-12 23:59:27.228 [[main]<udp] udp - UDP listener died {:exception=>#<Errno::EADDRINUSE: Address already in use - bind - Address already in use>, :backtrace=>["org/jruby/ext/socket/RubyUDPSocket.java:203:in
bind'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:116:in udp_listener'", "/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:68:in
run'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:328:in inputworker'", "/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:320:in
block in start_input'"]}
[INFO ] 2020-05-12 23:59:32.228 [[main]<udp] udp - Starting UDP listener {:address=>"0.0.0.0:6343"}
Hi I have setup this yesterday and i can not see any graphs on Kibana.
I am sending data from Juniper QFX. When i look into logstash logs i see
[2020-05-12T12:48:54,498][WARN ][logstash.codecs.netflow ][elastiflow] Ignoring Netflow version v0 [2020-05-12T12:48:54,606][WARN ][logstash.codecs.netflow ][elastiflow] Ignoring Netflow version v0 [2020-05-12T12:48:54,606][WARN ][logstash.codecs.netflow ][elastiflow] Ignoring Netflow version v0 [2020-05-12T12:48:54,708][WARN ][logstash.codecs.netflow ][elastiflow] Ignoring Netflow version v0 [2020-05-12T12:48:54,708][WARN ][logstash.codecs.netflow ][elastiflow] Ignoring Netflow version v0
When i change the udp port on my Juniper to 2055 i get this logs and when i send on 6343 i dont see any logs.
No restrictions whatsoever as the both Switch and server are local.