https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Netflow-data-using-Stream-addon-on-UF-to-Indexers/m-p/559330#M92516 <P>I am looking to collect Netflow data on a host, where I have installed Splunk UF along with Stream addon.</P><P>I want to send this data to a client's Splunk Indexer,&nbsp; on port 9997.</P><P>While the <A href="https://docs.splunk.com/Documentation/StreamApp/7.3.0/DeployStreamApp/InstallSplunkAppforStreaminadistributeddeployment" target="_self">doc</A> states, configure indexer to receive Stream data on port 9997, however, in the "Set up data collection on remote machines" section, it requires HEC tokens for the indexer.</P><P>Is there a way to configure the addon to to Netflow data to Indexers on port 9997 instead of on the HEC token ?</P> Wed, 14 Jul 2021 04:46:19 GMT dm1 2021-07-14T04:46:19Z https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Netflow-data-using-Stream-addon-on-UF-to-Indexers/m-p/559330#M92516 <P>I am looking to collect Netflow data on a host, where I have installed Splunk UF along with Stream addon.</P><P>I want to send this data to a client's Splunk Indexer,&nbsp; on port 9997.</P><P>While the <A href="https://docs.splunk.com/Documentation/StreamApp/7.3.0/DeployStreamApp/InstallSplunkAppforStreaminadistributeddeployment" target="_self">doc</A> states, configure indexer to receive Stream data on port 9997, however, in the "Set up data collection on remote machines" section, it requires HEC tokens for the indexer.</P><P>Is there a way to configure the addon to to Netflow data to Indexers on port 9997 instead of on the HEC token ?</P> Wed, 14 Jul 2021 04:46:19 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-forward-Netflow-data-using-Stream-addon-on-UF-to-Indexers/m-p/559330#M92516 dm1 2021-07-14T04:46:19Z