The quote marks were the problem. Thanks, I knew it had to be something simple.

Jason

On 3/12/2015 5:49 PM, Arianna Avanzini wrote:
On 13/03/2015 00:29, Jason Calhoun wrote:
Hi,


Hi Jason,

I'm trying to get ntopng to export flows to elasticsearch, my config file is as
follows:

-------------
-G=/var/tmp/ntopng.pid
-U root
-F 'es;flows;ntopng;http://localhost:9200/_bulk'
-d /home/ntopng
-e
-w 8080
-n 2
-i ens33
---------------

When I start ntopng, I get the following in the logs:

ntopng[19245]: [Prefs.cpp:601] WARNING: Discarding -F
'es;flows;ntopng;http://localhost:9200/_bulk': value out of range

What did I miss?


Could you please try removing the single quotes from the -F line in your config file? Such as, e.g.:

-F es;flows;ntopng;http://localhost:9200/_bulk

They are only needed if you use that as a parameter on ntopng's command line.

Thank you,
Arianna


Also, the end goal here is to keep historical traffic data so that we can review the activity of any given IP for a specified time period, such as a log that shows all the web sites they visited between 8 and 3 days ago. The historical data in ntopng would seem to be the solution, but we've found it too slow. It can take several hours to load data for just a day or two. Does anyone have any suggestions for a tool that can do what we're looking for? I haven't gotten Kibana running yet, but everything else I have found so far seems to focus on
aggregate data, which is not what we need.


Thanks,
Jason
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop



_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to