search

robcowart / elastiflow

Network flow analytics (Netflow, sFlow and IPFIX) with the Elastic Stack
Other
2.49k stars 596 forks source link

Using Elastiflow 4.x with Kibana 7.6 #692

Closed eoprede closed 3 years ago

eoprede commented 3 years ago

Hello, I am using managed ELK managed services, where I unfortunately do not get to control which version of Kibana (or Elasticsearch, but I am not sure if that matters that much) is in use. I do have Logstash running locally and I do have full control of it. I am shipping logs to managed service via HTTP. Everything seems to work just fine if I am using Logstash 3.5.3 and import dashboard for Kibana 7.5 What I would like to do ideally is to move to Elastiflow 4.x, in order to gain the application definition by port rather than by what device sends. And while I can run logstash with newer code and send data out just fine, I can't really display it as neither 3.5.3 nor 4.0.0-beta1 dashboards seem to work with it and I can't import the Kibana 7.8 njson file from 4.01 into Kibana 7.6 Any suggestions on how this could be solved? Thanks!

robcowart commented 3 years ago

Until you can send data to an upgraded Elastic environment you should stick to 3.5.3.

BTW, Elastic Stack 7.5.x will be EOL as of early June. It is worth considering an upgrade.