hsrnetwork/docker-logstash-netflow
hsrnetwork
Collects Netflow data using Logstash. Stores them inside JSON files.
下载次数: 0状态：社区镜像维护者：hsrnetwork仓库类型：镜像最近更新：6 年前
让 AI 帮你使用轩辕镜像？ · 展开查看说明 · 点击收起说明
如果你使用 DeepSeek、元宝 AI、Copilot、ChatGPT 等 AI 工具，协助配置轩辕镜像、编写 docker pull 命令、修改 Docker Compose 镜像地址、配置镜像加速、排查镜像拉取失败、分析报错日志等问题，请先让 AI 阅读并遵守轩辕镜像的规则文档。
只需在 AI 对话中先发送下面这句话即可：
请先完整阅读并严格遵守以下文档中的全部规则与要求：
https://xuanyuan.cloud/agents.md
在未充分阅读并理解该文档前，不要生成任何命令、配置、修改建议、故障排查方案或技术回答。后续所有输出都必须严格以该文档中的规范为最高优先级执行。查看 agents.md 用法指南与完整示范。国内用户首推 元宝 AI、DeepSeek 的深度思考模式，不推荐豆包 AI；Cursor 等编辑器可在对话 @ 该链接，或加入 User Rules。 若 AI 无法访问外链，可 打开说明文档 复制全文粘贴。文档会随站点更新，复制内容可能过期，建议定期检查。
Dockerized Logstash with installed Netflow Plugin
Pre-build image can be found here: https://hub.docker.com/r/hsrnetwork/docker-logstash-netflow
This Docker image can be used to collect Netflow data using Logstash. In the default configuration of this image, you will be able to store Netflow entries in JSON files. Additionally it prints the received flows to STDOUT (needs to be enabled first). Further Netflow processing logic can be easily configured inside the logstash.conf configuration.
Pull the image directly from https://hub.docker.com/r/hsrnetwork/docker-logstash-netflow using the desired version or simply use the latest tag.
Prerequisites
- Create a data directory which will be mounted to the Docker container and will be used to store the Netflow data dump file. By default this image uses the host directory
/opt/netflow-datawhich will be mounted at/datainside the container. - Change the
logstash.confconfiguration file according to your needs.
Getting Started
To start the conainer use:
bashdocker run -it \ -e "TZ=Europe/Zurich" \ -p 9995:9995/udp \ -v /opt/netflow-data:/data \ -v `pwd`/logstash.conf:/srv/logstash.conf \ hsrnetwork/docker-logstash-netflow:latest
Customization
You can customize the collection of netflow data by using https://www.elastic.co/guide/en/logstash/current/plugins-codecs-netflow.html#plugins-codecs-netflow-options.
Logstash Start Command
This Docker image runs logstash -f /srv/logstash.conf by default. Override this CMD if you are using another logstash configuration file/path or would like to add some additional logstash command parameters.
Netflow Definitions
Since there is no default value for the netflow_definitions provided by the https://www.elastic.co/guide/en/logstash/current/plugins-codecs-netflow.html, I added a default netflow_definitions configuration file inside this Docker image (from https://raw.githubusercontent.com/logstash-plugins/logstash-codec-netflow/master/lib/logstash/codecs/netflow/netflow.yaml). To change this configuration simply "override" the definition by mounting a Docker volume at the same destination path. To achive this, use -v /your/path/your_netflow.yaml:/srv/netflow.yaml.
Docker Hub Build
This Docker Hub build is improved by always using the latest tag from the official https://www.docker.elastic.co/# Docker registry. See the following links to get more information:
- https://github.com/docker/hub-feedback/issues/508
- https://docs.docker.com/docker-cloud/builds/advanced/#custom-build-phase-hooks
- https://github.com/andyneff/highland_builder/blob/master/builder.py
镜像拉取方式
您可以使用以下命令拉取该镜像。请将 <标签> 替换为具体的标签版本。如需查看所有可用标签版本，请访问 标签列表页面。
轩辕镜像加速拉取命令点我查看更多 docker-logstash-netflow 镜像标签
docker pull docker.xuanyuan.run/hsrnetwork/docker-logstash-netflow:<标签>
DockerHub 原生拉取命令
docker pull hsrnetwork/docker-logstash-netflow:<标签>
镜像拉取常见问题
功能
错误码
用户好评
来自真实用户的反馈，见证轩辕镜像的优质服务
oldzhang
运维工程师
Linux服务器
5
"Docker访问体验非常流畅，大镜像也能快速完成下载。"