2 / 36 chapters
    DocumentationGetting Started

    02

    First Launch

    Overview

    This guide walks you through the first steps after installing FlowPro NG. Follow the sections in order to have a fully functional system — from license activation through data collection and notifications to advanced module setup.

    On the first visit to FlowPro NG, a setup wizard (Setup Modal) automatically appears. Complete it before proceeding to any other configuration.

    1

    Start trial or enter license key

    The Setup Modal offers two options:

    Trial (recommended for new users) — 14-day Enterprise trial, requires email verification. Fill in company, name, email, and phone. A 6-digit code will be sent to the email (valid 15 minutes).

    License key — If you have purchased a license, paste the JWT token directly. The key is verified online against the license server.

    After trial activation, the system automatically receives an Enterprise license for 14 days — you have immediate access to all modules.
    2

    API keys notification

    After first login, if none of the three external service keys are configured, an informational modal (API Keys Info) is displayed. You can skip it — the keys are optional but extend the system's capabilities.

    Shodan — shodan.io (free account)  | AbuseIPDB — abuseipdb.com (free, 1000 queries/day)  | GreyNoise — greynoise.io (Community API, free)

    Keys can be set any time in Settings → API Services.

    Without data the system is empty. Set up at least one source — Fleet agents, syslog, or NetFlow. All three can run simultaneously.

    1

    Deploy Elastic agents (Fleet)

    Fleet agents collect logs, metrics, and security events from servers and workstations. Supported platforms: Linux, Windows, macOS.

    Detailed installation guide: Documentation → Agent Installation

    After deployment, the device appears in Assets with a status indicator. Fleet agents are shown with a blue icon.
    2

    Configure MikroTik syslog (UDP 514)

    MikroTik routers and other network devices send logs via BSD syslog on UDP port 514 to the FlowPro NG server address.

    Detailed guide: Documentation → Agent Installation → MikroTik

    Data appears in Log Explorer filtered by the router's hostname. Syslog sources are listed in Assets → Syslog tab.

    3

    Configure NetFlow export (UDP 12051)

    NetFlow/IPFIX data from routers and servers is received on UDP port 12051. The data feeds the Flow Collector module — traffic analysis, anomalies, top-talkers.

    Detailed guide: Documentation → NetFlow Collector

    4

    Verify data reception

    Check these places after setup:

    Dashboard — stat cards should show non-zero event counts after a few minutes.

    Log Explorer — enter * in the search box to verify events are arriving.

    Flow Collector — Overview tab shows traffic charts and source table once NetFlow is configured.

    Assets — all active sources (Fleet, Syslog, NetFlow) are listed here with online status.