# Glad to see this new initiative... and plan to ensure ElastiFlow supports it **URL:** \ **Category:** General Feedback\ **Created:** [March 11, 2019, 6:42pm UTC](https://forum.opensearch.org/t/glad-to-see-this-new-initiative-and-plan-to-ensure-elastiflow-supports-it/41 "2019-03-11T18:42:48Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![robcowart](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/robcowart/32/1012_2.png) [@robcowart](https://forum.opensearch.org/u/robcowart)\ **Post date:** [March 11, 2019, 6:42pm UTC](https://forum.opensearch.org/t/glad-to-see-this-new-initiative-and-plan-to-ensure-elastiflow-supports-it/41/1 "2019-03-11T18:42:48Z")
I am the creator of [ElastiFlow](https://github.com/robcowart/elastiflow), the most popular solution for Network Flow analysis (Netflow, sFlow and IPFIX) based on the Elastic Stack. I have also created similar solutions for Suricata and Snort, and have a collection of other log solutions (Palo Alto, Check Point, Cisco, Juniper, and more) that I am also considering to make available on GitHub. I am confident that many of my users would appreciate the additional security and alerting features of Open Distro for Elastisearch. If my testing goes well, I may make this the “recommended” distribution for my solutions. ---
**Author:** ![elifish](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/elifish/32/1451_2.png) [@elifish](https://forum.opensearch.org/u/elifish)\ **Post date:** [March 11, 2019, 6:51pm UTC](https://forum.opensearch.org/t/glad-to-see-this-new-initiative-and-plan-to-ensure-elastiflow-supports-it/41/2 "2019-03-11T18:51:47Z")
Hi @robcowart, Thats great to hear! We encourage anyone to build on top of Open Distro for Elasticsearch. Let us know how we can help. Thanks, Eli ---
**Author:** ![victor](https://avatars.discourse-cdn.com/v4/letter/v/3e96dc/32.png) [@victor](https://forum.opensearch.org/u/victor)\ **Post date:** [March 13, 2019, 6:58am UTC](https://forum.opensearch.org/t/glad-to-see-this-new-initiative-and-plan-to-ensure-elastiflow-supports-it/41/3 "2019-03-13T06:58:03Z")
This is great news. We were just looking at ElastiFlow and were thinking of setting up a PoC but we need to have authentication and encryption available which open distro now supports out of the box. ---
**Author:** ![brice83](https://avatars.discourse-cdn.com/v4/letter/b/7ea924/32.png) [@brice83](https://forum.opensearch.org/u/brice83)\ **Post date:** [September 18, 2019, 6:38pm UTC](https://forum.opensearch.org/t/glad-to-see-this-new-initiative-and-plan-to-ensure-elastiflow-supports-it/41/4 "2019-09-18T18:38:51Z")
hi @robcowart, any news about this? im trying to use the last version of opendistro with your latest elastiflow image but it fail to start ! ---
**Author:** ![svekje](https://avatars.discourse-cdn.com/v4/letter/s/da6949/32.png) [@svekje](https://forum.opensearch.org/u/svekje)\ **Post date:** [June 3, 2020, 4:52pm UTC](https://forum.opensearch.org/t/glad-to-see-this-new-initiative-and-plan-to-ensure-elastiflow-supports-it/41/5 "2020-06-03T16:52:03Z")
Hi, have anyone got ElastiFlow to work with opendistro? I gave it a try with in lab: Ubuntu server 20.04 Open Distro: 1.7.0.0 java version 1.8.0\_202 logstash 7.7.0 ElastiFlow v.3.5.0 I struggle to get the Logstash security stuff to work, It seems to be ok when disabling security in the Elasticsearch.yml. @robcowart, have you done some research, does it work? ---
**Author:** ![fensterbrett](https://avatars.discourse-cdn.com/v4/letter/f/d26b3c/32.png) [@fensterbrett](https://forum.opensearch.org/u/fensterbrett)\ **Post date:** [August 4, 2022, 12:00pm UTC](https://forum.opensearch.org/t/glad-to-see-this-new-initiative-and-plan-to-ensure-elastiflow-supports-it/41/6 "2022-08-04T12:00:43Z")
Hello robcovart, I was running your Elastiflow 3.5.3 with Opensearch 1.3.4 very fine. After the update to Opensearch 2.1.0 and Elastiflow 4.0.1 I’ve connection problems with the error: [ERROR][logstash.outputs.elasticsearch][elastiflow][0d11ab0ab489b7c44111172d0b02ee19798c0d48e24fd9c806add964e569c95b] Encountered a retryable error. Will Retry with exponential backoff {:code=\>400, :url=\>“[https://opensearch:9200/\_bulk](https://opensearch:9200/_bulk)”, :body=\>“{"error":{"root\_cause":[{"type":"illegal\_argument\_exception","reason":"Action/metadata line [1] contains an unknown parameter [\_type]"}],"type":"illegal\_argument\_exception","reason":"Action/metadata line [1] contains an unknown parameter [\_type]"},"status":400}”} Do you have a hint how to make Elastiflow compatible with Opensearch 2.1.0? The parameter compatibility.override\_main\_response\_version: true was set. Regards, Fensterbrett ---
**Author:** ![robcowart](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/robcowart/32/1012_2.png) [@robcowart](https://forum.opensearch.org/u/robcowart)\ **Post date:** [August 4, 2022, 1:54pm UTC](https://forum.opensearch.org/t/glad-to-see-this-new-initiative-and-plan-to-ensure-elastiflow-supports-it/41/7 "2022-08-04T13:54:45Z")
@fensterbrett as noted in the repo’s readme file, the legacy Logstash-based version of ElastiFlow has been deprecated and is no longer maintained. You should use the new ElastiFlow solution which completely replaces Logstash. [Introduction | ElastiFlow](https://docs.elastiflow.com/docs/)