All Apps and Add-ons

FlowReciever Inactive

New Member

My flow receiver shows Inactive under stream forwarder status no matter what I do. Trying to deduce the problem and suggestions would be nice. I have checked and I am getting packets but nothing being displayed.

0 Karma


Have you tried explicitly declaring the receiver ip in the netflowReceiver..ip parmeter under the [streamfwd] stanza in the local/streamfwd.conf file?

Once had an instance of Splunk Stream where netflowReceiver..ip=localhost or netflowReceiver..ip= would NOT work.

Hope it helps

0 Karma