robcowart / elastiflow

Network flow analytics (Netflow, sFlow and IPFIX) with the Elastic Stack
Other
2.49k stars 596 forks source link

Can't access ElastiFlow 5.0.0 in Docker #701

Closed 0x412e4e closed 3 years ago

0x412e4e commented 3 years ago

Hello everybody,

I've recently tried installing the newest version of ElastiFlow (elastiflow/flow-collector:5.0.0) on an Ubuntu 20.04.2 LTS server running Docker version 20.10.5 and docker-compose version 1.28.5.

Here's the contents of my docker-compose.yml (which I acquired from here):

version: '3'
services:
  # ElastiFlow Unified Flow Collector
  flow-collector:
    image: elastiflow/flow-collector:5.0.0
    container_name: flow-collector
    restart: 'unless-stopped'
    network_mode: 'host'
    volumes:
      - /etc/elastiflow:/etc/elastiflow
    environment:
            # Elasticsearch
      EF_FLOW_OUTPUT_ELASTICSEARCH_ENABLE: 'true'
      EF_FLOW_OUTPUT_ELASTICSEARCH_INDEX_TEMPLATE_OVERWRITE: 'true'
      EF_FLOW_OUTPUT_ELASTICSEARCH_INDEX_TEMPLATE_SHARDS: 1
      EF_FLOW_OUTPUT_ELASTICSEARCH_INDEX_TEMPLATE_REPLICAS: 0

      # A comma separated list of Elasticsearch nodes to use. DO NOT include "http://" or "https://"
      EF_FLOW_OUTPUT_ELASTICSEARCH_ADDRESSES: '127.0.0.1:9200'
      EF_FLOW_OUTPUT_ELASTICSEARCH_USERNAME: 'elastic'
      EF_FLOW_OUTPUT_ELASTICSEARCH_PASSWORD: 'changeme'

However, I'm unable to access the server using port 9200, even if I change it to e.g. 443 I can't connect to it.

Edit: when will the CentOS RPMs be available? I'm interested in implementing ElastiFlow on CentOS as it is my distro of choice.

robcowart commented 3 years ago

Can you please join the ElastiFlow Community Slack, and ask these questions there? This is repository is for the legacy Logstash-based solution. You will have a better chance of getting answers about the new ElastiFlow solutions on the Slack. It is also monitored by the rest of the ElastiFlow team. Thanks.

0x412e4e commented 3 years ago

Will do, thanks!