I have configured splunk stream app to collect netflow data from network.
Incoming data is being collected and indexed well, however some fields in search output are shown as below:
input_snmpidx: 6 netflow_elements: [ [-] UNKNOWN : 0ab132f5 UNKNOWN : 0ab1320b UNKNOWN : 9f99 UNKNOWN : 00a1 UNKNOWN : 02 UNKNOWN : 07e9 ]
Netflow exporter device is Cisco ASA Version 8.4(4)1.
I need to know an approach how to display these fields in a correct way.
I’m a Community Moderator in the Splunk Community. Thanks for contributing as a member in the forum!
This question was posted 4 years ago and might not get the attention you need for your own question to be answered. I suggest you please post a brand new question with proper details about the issue you are facing so your issue can get more visibility. To increase your chances of getting help from the community, follow these guidelines in the Splunk Answers User Manual when creating your post.