# Elastiflow

Elastiflow is a self-hosted network flow analytics platform for monitoring NetFlow and sFlow traffic. It is open source and self-hosted, installable on Docker Hub and Unraid.

Canonical page: https://ourlocalhost.com/app/202/elastiflow

## Description

ElastiFlow is a self-hosted network flow analytics platform for monitoring NetFlow and sFlow traffic. It collects flow records from routers and switches, stores them in Elasticsearch, and presents Kibana dashboards that help network operators investigate bandwidth usage, connectivity issues, and suspicious activity.

## Platform availability

Available on 1 of 9 platforms: Unraid.

## Health score

37/100 (Low), based on 2 of 4 factors.
- Easy to install: 35 (1 install platform, install notes, Docker image)
- Light to run: 40 (4 GB minimum RAM, runs on ARM)

## Links

- Docker Hub: https://hub.docker.com/r/elastiflow/flow-collector
- Unraid: https://ca.unraid.net/apps/elastiflow-0e3qb0r0to4s1z?q=Elastiflow
- Official website: https://www.elastiflow.com/
- Documentation: https://docs.elastiflow.com

## Common questions

### Why do ElastiFlow containers fail to start in the Docker quickstart?

Docker must be installed, enabled, and running before the containers can start. Run sudo ./initial_install.sh as the system administrator to set up ElastiFlow, Elasticsearch, and Kibana.

### Why does the SNMP collector exit with a license error?

If you use SNMP, set EF_LICENSE_ACCEPTED to true. Without it, the SNMP collector exits with a license error and cannot poll devices.

### What happens if a switch does not support NetFlow?

The unsupported switch will not send flow records. In one setup, an EdgeRouter sent NetFlow/sFlow data, and microsegmentation kept most traffic crossing that router.

### What flow rate does ElastiFlow list per collector?

ElastiFlow lists a collector capacity of 400K+ flows per second.

---
Source: Our Local Host (https://ourlocalhost.com/app/202/elastiflow), the self-hosted and open-source app directory.