topic Network traffic flow to Splunk cloud instance in All Apps and Add-ons

Network traffic flow to Splunk cloud instance

pavi_pavi_p — Mon, 07 Jan 2019 19:19:26 GMT

Hello Experts,

Kindly provide the guidelines on integrate Network traffic flow integration with Splunk cloud instance.

Re: Network traffic flow to Splunk cloud instance

pavi_pavi_p — Tue, 08 Jan 2019 11:21:10 GMT

Hello Experts,

Any inputs!!!

Re: Network traffic flow to Splunk cloud instance

lakshman239 — Tue, 08 Jan 2019 12:01:50 GMT

Have you looked at https://answers.splunk.com/answers/305080/what-are-my-options-in-splunk-for-monitoring-netop.html ?

Are you trying to on-board data from a particular vendor? did you check if there are any supporting add-ons?

Generally, if you can the logs/traffic on to a Universal forwarder (UF), that can be configured to send them to the splunk cloud [ you would need to work with cloud support to connect your UF to connect to cloud via certs]

Re: Network traffic flow to Splunk cloud instance

pavi_pavi_p — Wed, 09 Jan 2019 14:55:02 GMT

Hello Lakshman,

Thanks for your response.

UF can't be installed on network devices.

I want to see the real time network traffic flow on Splunk and let us the solution on this.

Re: Network traffic flow to Splunk cloud instance

pavi_pavi_p — Wed, 09 Jan 2019 17:43:10 GMT

Hello Lakshman,

Thanks for your response.

UF can't be installed on network devices.

I want to see the real time network traffic flow on Splunk and let us the solution

Re: Network traffic flow to Splunk cloud instance

lakshman239 — Wed, 09 Jan 2019 17:47:30 GMT

from your network devices, can you send the logs as syslog to a syslog server and configure splunk UF to read them and send it to cloud? This way you can send logs from more than one device [ via syslog] to syslog server [ e.g. rsyslog or syslog-ng installed on a linux platform] and onward to splunk cloud.

Pls also raise a support case with splunk cloud to agree the approach.