I seem to have the Splunk for Citrix NetScaler with Appflow app working, but it says there are no devices sending App flow data. How do I get this running? I've installed The Netscaler App and IPFIX and have tried to get them working. The NetScaler is sending data, and the regular NetScaler parts seem to be working now. Do I need to create different log policies on the NetScaler (perhaps using different ports?) for the APP flow data?
Check out this video for step-by-step directions on how to configure your NetScaler to send data to Splunk -> https://www.youtube.com/watch?v=ZRfVBEjocSM
Thanks, that at least makes the process clear. We're showing hits on the Netscaler, but don't seem to be receiving the traffic on SPLUNK.