WARNING: Version 5.4 of Packetbeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Flowsedit
The flows
section of the packetbeat.yml
config file contains configuration options for bidirectional network
flows. If section is missing from configuration file, network flows are
disabled.
packetbeat.flows: timeout: 30s period: 10s
See Configuring Flows to Monitor Network Traffic for more information.
Optionsedit
You can specify the following options in the flows
section of the packetbeat.yml
config file:
enablededit
Enables flows support if set to true. Set to false to disable network flows support without having to delete or comment out the flows section. The default value is true.
timeoutedit
Timeout configures the lifetime of a flow. If no packets have been received for a flow within the timeout time window, the flow is killed and reported. The default value is 30s.
periodedit
Configure the reporting interval. All flows are reported at the very same point in time. Periodical reporting can be disabled by setting the value to -1. If disabled, flows are still reported once being timed out. The default value is 10s.