Sign inSign up

nulldevil/mikrotikflow

By nulldevil

•Updated over 1 year ago

Mikrotik Netflow data on the ELK Stack

Image
Networking
Security
Monitoring & observability
0

1.6K

nulldevil/mikrotikflow repository overview

Based on: https://github.com/arktronic/docker-quick-elastic-netflow⁠

Configure Mikrotik > IP > Traffic Flow > Target source address of 0.0.0.0 and version IPFIX instead of 9

  • copy elasticsearch.yml /srv/dockers/mikrotikflow/elasticonf/elasticsearch.yml
  • copy kibana.yml /srv/dockers/mikrotikflow/kibanaconf/kibana.yml

You can find these config files in the original github repository.

docker-compose.yml:

services:
  mikrotikflow:
    image: nulldevil/mikrotikflow:latest
    restart: always
    container_name: mikrotikflow
    init: true
    ports:
      - "2055:2055/udp"
    networks:
      - traefik
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik
      - "traefik.http.routers.mikrotikflow.rule=Host(`mikrotikflow.lan`)"
      - "traefik.http.routers.mikrotikflow.middlewares=middlewares-authentik@file"
      - "traefik.http.services.mikrotikflow.loadbalancer.server.port=5601"
    volumes:
      - "/srv/dockers/mikrotikflow/elasticsearch:/var/lib/elasticsearch"
      - "/srv/dockers/mikrotikflow/elasticonf/elasticsearch.yml:/etc/elasticsearch/elasticsearch.yml"
      - "/srv/dockers/mikrotikflow/kibana:/var/lib/kibana"
      - "/srv/dockers/mikrotikflow/kibanaconf/kibana.yml:/etc/kibana/kibana.yml"

networks:
  traefik:
    external: true

Additional volumes added to ensure the data persistency.

Tag summary

Content type

Image

Digest

sha256:cf6e619f8…

Size

955.1 MB

Last updated

over 1 year ago

docker pull nulldevil/mikrotikflow