← Directory

Elastiflow

ElastiFlow is a self-hosted network flow analytics platform for monitoring NetFlow and sFlow traffic.

  • Network Services
  • Tools & Utilities
ElastiFlow is a self-hosted network flow analytics platform for monitoring NetFlow and sFlow traffic. It collects flow records from routers and switches, stores them in Elasticsearch, and presents Kibana dashboards that help network operators investigate bandwidth usage, connectivity issues, and suspicious activity.

Platform availability

Available on 1 of 9 platforms

  • Unraid
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox (not listed)
  • Helm (not listed)
  • Mac (not listed)
  • Windows (not listed)
  • Linux (not listed)

Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.

37/100 Low

Maintained
No data
Popular
No data
Easy to install
351 install platform, install notes, Docker image
Light to run
404 GB minimum RAM, runs on ARM

Based on 2 of 4 factors.

Availability: platform listings confirmed today, links checked 15 days ago

No GitHub repository data collected yet.

Resources & Compatibility

Minimum requirements: 4 GB RAM, 4 CPU core(s), 2048 GB disk. ARM (e.g. Raspberry Pi) is supported.

Checked 15 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Install Docker first Install Docker (the program that runs the app in small isolated packages called containers) and make sure the Docker service is enabled and running. If Docker is not working, ElastiFlow's containers cannot start. source
  • Run the install script Run sudo ./initial_install.sh as the system administrator after Docker is ready. It sets up ElastiFlow, Elasticsearch, and Kibana; without it, the app will not be installed or configured. source
  • Accept the SNMP license If you use SNMP (a protocol for checking network devices), set EF_LICENSE_ACCEPTED to true. Without it, the SNMP collector exits with a license error and cannot poll devices. source

Fetched 15 days ago - each note links to its source

Alternatives

No alternatives collected yet.

Common questions

Why do ElastiFlow containers fail to start in the Docker quickstart?

Docker must be installed, enabled, and running before the containers can start. Run sudo ./initial_install.sh as the system administrator to set up ElastiFlow, Elasticsearch, and Kibana.

Why does the SNMP collector exit with a license error?

If you use SNMP, set EF_LICENSE_ACCEPTED to true. Without it, the SNMP collector exits with a license error and cannot poll devices.

What happens if a switch does not support NetFlow?

The unsupported switch will not send flow records. In one setup, an EdgeRouter sent NetFlow/sFlow data, and microsegmentation kept most traffic crossing that router.

What flow rate does ElastiFlow list per collector?

ElastiFlow lists a collector capacity of 400K+ flows per second.

Answers sourced from docs.elastiflow.com, docs.elastiflow.com, www.elastiflow.com, www.reddit.com

Community

Collected 9 days ago - public community threads