xTag

Overview

Full name
docker.io/robcowart/elastiflow-logstash
Registry
docker.io
Namespace
robcowart
Repository
elastiflow-logstash
Cached tags
2
Last synced
07/06/2026, 09:29 AM
Topics
监控与可观测性

Introduction

ElastiFlow Logstash 镜像，解析 NetFlow/IPFIX/sFlow 并写入 Elasticsearch，适合网络流量分析与 NOC 可视化。

Details

robcowart/elastiflow-logstash 预配置 ElastiFlow pipeline，接收 flow 数据输出 ES index。典型用于 ISP/数据中心流量监控，定位为日志/flow 采集服务，需 Elasticsearch 与 UDP 2055 端口；K8s Deployment + hostNetwork 或 LoadBalancer UDP。

快速启动

docker run -d --name elastiflow-logstash \
  -p 2055:2055/udp \
  -e ELASTICSEARCH_HOSTS=http://elasticsearch:9200 \
  docker.io/robcowart/elastiflow-logstash:latest

推荐实践

docker run -d --name elastiflow-logstash \
  --restart unless-stopped \
  -p 2055:2055/udp -p 6343:6343/udp \
  -e ELASTICSEARCH_HOSTS=http://es.internal:9200 \
  -e ELASTIFLOW_LICENSE_KEY=your-key \
  docker.io/robcowart/elastiflow-logstash:6.4.0

核心参数说明

  • -p 2055:2055/udp — NetFlow v5/v9 端口
  • -p 6343:6343/udp — sFlow 端口
  • -e ELASTICSEARCH_HOSTS — ES 集群地址
  • 固定 tag — ElastiFlow 与 Logstash pin

Kubernetes

apiVersion: apps/v1
kind: Deployment
metadata:
  name: elastiflow-logstash
spec:
  replicas: 2
  selector:
    matchLabels:
      app: elastiflow-logstash
  template:
    metadata:
      labels:
        app: elastiflow-logstash
    spec:
      containers:
        - name: logstash
          image: docker.io/robcowart/elastiflow-logstash:6.4.0
          ports:
            - containerPort: 2055
              protocol: UDP
          envFrom:
            - secretRef:
                name: elastiflow-secrets
---
apiVersion: v1
kind: Service
metadata:
  name: elastiflow-logstash
spec:
  type: LoadBalancer
  selector:
    app: elastiflow-logstash
  ports:
    - port: 2055
      protocol: UDP
      targetPort: 2055

路由器 export 指向 LB IP；ES index lifecycle 按 retention 配置。

Latest tags (20)

View all 2 tags →
TagArchPushed AtSizeDigestSyncWishAction
docker.io/robcowart/elastiflow-logstash
:4.0.1
linux/amd64
2020/08/12 21:38409.3 MBsha256:dedd99271b05…
docker.io/robcowart/elastiflow-logstash
:4.0.0
linux/amd64
2020/08/10 22:00409.3 MBsha256:30b8ceef83e8…