Install ElastiFlow on Ubuntu 18.04 – Part 1: How to install Ubuntu

ElastiFlow is a great open source NetFlow analyzer that works with Elastic Stack (formerly ELK Stack). Of all the Netflow tools I’ve tested, it has, by far, the best visualizations. However, if like me you aren’t familiar with Elastic Stack the setup can be rather intimidating. In this tutorial, I hope to make it easier for you and everyone who wants to use this awesome tool.

This tutorial is broken up into 4 parts. One to demonstrate how to install Ubuntu server. One for installing and configuring Elastic Stack. One on how to implement ElastiFlow on top of it all. And finally one on how to properly maintain the solution.

Part 1: How to install Ubuntu
Part 2: Installing Elastic Stack
Part 3: Install ElastiFlow
Part 4: Solution Maintenance (coming soon)

Install and Set up of Ubuntu Server 18.04

I performed my installation of Ubuntu Server using the latest version of 18.04 on a Hyper-V virtual machine (VM), but the instructions will be the same regardless of what hypervisor you are using. The VM had 40GB hard drive and 4GB of RAM.

How to Install Ubuntu 18.04

  1. Download Ubuntu server
    Note: I found downloading the BitTorrent was actually much faster than downloading directly from the Ubuntu servers.
  2. Create a new VM with a 40GB hard disk and at least 4GB of RAM.
  3. Insert the install media and start the VM.
  4. Select your preferred language
    How to install Ubuntu
  5. Select your keyboard layout
    How to install Ubuntu
  6. Choose Install Ubuntu
    How to install Ubuntu
  7. At this set, you have the choice to stick with DHCP or use a static address. If you choose to use a static address it is best to set it up now, as it provides a nice easy interface to set it here.
    How to install Ubuntu How to install Ubuntu How to install Ubuntu
  8. Configure a proxy address if required
    How to install Ubuntu
  9. On the Filesystem setup screen, select Use An Entire Disk
    How to install Ubuntu
  10. Press Enter to accept the default disk
    How to install Ubuntu
  11. Select Done
    How to install Ubuntu
  12. Select Continue
    How to install Ubuntu
  13. Create a name for your server and set up the username and password for the root user
    How to install Ubuntu
  14. Wait for the installation to complete
    How to install Ubuntu
  15. When prompted select Reboot Now
    How to install Ubuntu
  16. If prompted eject the installation media from the VM and press Enter to continue booting
    How to install Ubuntu

Setup Ubuntu for ElastiFlow

If you set your IP address during the installation process the only remaining setup action is to install and configure SSH. This will allow you to use a tool like Putty to connect to the server and more easily configure the items in part 2 and 3. (copy and paste FTW!)

  1. Log into the VM using the username and password you created during the setup process
  2. Install SSH using the command below:
  3. Start the SSH service so you can connect to the server
  4. On another computer open your preferred SSH client. I recommend PuTTY if you don’t have one.
  5. Enter the IP address of your server, set the port to 22, select SSH connection type, and click OK
    How to install Ubuntu
  6. If you receive a Security Warning click Yes
    How to install Ubuntu

You are now all set to start the installation process.

Part 2: Installing Elastic Stack

Would you like to get more information? Get in touch with us today!

Leave a Reply


We use cookies to ensure the best possible experience on our website. Detailed information on the use of cookies on this site is provided in our Privacy and Cookie Policy. Further instruction on how to disable our cookies can be found there.