WARNING: Version 5.6 of Packetbeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Flows
editFlows
editThe flows section of the packetbeat.yml config file contains configuration options for bidirectional network
flows. If section is missing from configuration file, network flows are
disabled.
packetbeat.flows: timeout: 30s period: 10s
See Configuring Flows to Monitor Network Traffic for more information.
Options
editYou can specify the following options in the flows section of the packetbeat.yml config file:
enabled
editEnables flows support if set to true. Set to false to disable network flows support without having to delete or comment out the flows section. The default value is true.
timeout
editTimeout configures the lifetime of a flow. If no packets have been received for a flow within the timeout time window, the flow is killed and reported. The default value is 30s.
period
editConfigure the reporting interval. All flows are reported at the very same point in time. Periodical reporting can be disabled by setting the value to -1. If disabled, flows are still reported once being timed out. The default value is 10s.