Can Stealthwatch send the flow data in addition to the alerts?

[danielbb]

We are getting alerts from Stealthwatch devices via syslog, but not the flow data. It forces us to use the Cisco Stealthwatch UI in order to investigate the alerts, versus doing it within Splunk.

We wonder whether the Stealthwatch devices can send the flow data as well.

[danielbb]

We got from cisco a reference to a whitepaper that describes two specific ways to work with SIEMs -

Cisco Stealthwatch and SIEM Optimization

We would like to know whether cisco makes any other data, besides the alert data, available outside of Stealthwatch.

[danielbb]

Our Sales Engineer said -

-- It looks like Flow events are made available via the add-on at https://splunkbase.splunk.com/app/3848/

[danielbb]

We were told that Cisco offers a Splunk app that draws the data from Stealthwatch using their API.
Cisco also offers a Flow Export Service which allows the flow data to be sent as syslog (if I got it right).