https://community.splunk.com/t5/All-Apps-and-Add-ons/NetFlow-Analytics-for-Splunk-Do-I-need-to-set-the-sourcetype/m-p/352804#M42684 <P>This App relies on flow data processed by NetFlow Optimizer™ (NFO). You need to download it from <A href="https://www.netflowlogic.com/downloads/">https://www.netflowlogic.com/downloads/</A> and install it on a server or VM. Your Cisco Router should be configured to send NetFlow to NFO. NFO will optimize binary flow data and send optimized flow information to Splunk.</P> <P>You also need Technology Add-on for NetFlow (TA-netflow) on your search heads, indexers, and forwarders. To download TA-netflow please visit <A href="https://splunkbase.splunk.com/app/1838/">https://splunkbase.splunk.com/app/1838/</A> </P> <P>Please contact <A href="mailto:trial@netflowlogic.com">trial@netflowlogic.com</A> if you have questions or need further assistance.</P> Wed, 20 Sep 2017 23:00:22 GMT NetFlow_Logic 2017-09-20T23:00:22Z https://community.splunk.com/t5/All-Apps-and-Add-ons/NetFlow-Analytics-for-Splunk-Do-I-need-to-set-the-sourcetype/m-p/352803#M42683 <P>I just installed the App yesterday on Splunk 6.4.1 on Windows 7 Pro 32 bit machine. I have added data input UDP port 995. <BR /> Looks like i need to set the source type as NetFlow but I don't see it listed. Am I supposed to create a source type manually?</P> <P>I see packets arriving from a Cisco Router on this Windows 7 Pro destined to port 9995 but nothing shows up on the App dashboard. </P> Wed, 20 Sep 2017 22:11:38 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/NetFlow-Analytics-for-Splunk-Do-I-need-to-set-the-sourcetype/m-p/352803#M42683 kurelig 2017-09-20T22:11:38Z https://community.splunk.com/t5/All-Apps-and-Add-ons/NetFlow-Analytics-for-Splunk-Do-I-need-to-set-the-sourcetype/m-p/352804#M42684 <P>This App relies on flow data processed by NetFlow Optimizer™ (NFO). You need to download it from <A href="https://www.netflowlogic.com/downloads/">https://www.netflowlogic.com/downloads/</A> and install it on a server or VM. Your Cisco Router should be configured to send NetFlow to NFO. NFO will optimize binary flow data and send optimized flow information to Splunk.</P> <P>You also need Technology Add-on for NetFlow (TA-netflow) on your search heads, indexers, and forwarders. To download TA-netflow please visit <A href="https://splunkbase.splunk.com/app/1838/">https://splunkbase.splunk.com/app/1838/</A> </P> <P>Please contact <A href="mailto:trial@netflowlogic.com">trial@netflowlogic.com</A> if you have questions or need further assistance.</P> Wed, 20 Sep 2017 23:00:22 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/NetFlow-Analytics-for-Splunk-Do-I-need-to-set-the-sourcetype/m-p/352804#M42684 NetFlow_Logic 2017-09-20T23:00:22Z https://community.splunk.com/t5/All-Apps-and-Add-ons/NetFlow-Analytics-for-Splunk-Do-I-need-to-set-the-sourcetype/m-p/352805#M42685 <P>Is there a step by step guide to set this up from start to finish?</P> <P>Router---NFO---Splunk (NetFlow Analytics App + NetFlow Add On)</P> <PRE><CODE>K </CODE></PRE> Thu, 21 Sep 2017 00:53:39 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/NetFlow-Analytics-for-Splunk-Do-I-need-to-set-the-sourcetype/m-p/352805#M42685 kurelig 2017-09-21T00:53:39Z https://community.splunk.com/t5/All-Apps-and-Add-ons/NetFlow-Analytics-for-Splunk-Do-I-need-to-set-the-sourcetype/m-p/352806#M42686 <P>You can check documentation page here <A href="https://www.netflowlogic.com/resources/documentation/">https://www.netflowlogic.com/resources/documentation/</A>.</P> <P>NetFlow Optimizer Overview - contains component descriptions and various deployment scenarios to match your Splunk deployment.</P> <P>Installation and Administration Guide - describes how to install, upgrade, and configure NetFlow Optimizer. It also includes system requirements.</P> <P>NetFlow Analytics for Splunk User Manual - describes how to install and configure NetFlow Analytics for Splunk App and Technology Add-on for NetFlow (TA-netflow). </P> Thu, 21 Sep 2017 02:14:42 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/NetFlow-Analytics-for-Splunk-Do-I-need-to-set-the-sourcetype/m-p/352806#M42686 NetFlow_Logic 2017-09-21T02:14:42Z