We need to deploy stream forwarders for monitoring the netflow usig splunk stream app. Can anyone help me understand how to determine the number of stream forwarders that need to be installed for monitoring the netflow from various devices?
NetFlow Analytics for Splunk App is not dependent on stream forwarders to acquire the netflow data from various devices. Instead we use NetFlow Optimizer (NFO), which processes the data, as well as enriches it where appropriate and forwards to NetFlow Analytics for Splunk for visualization and reporting.
You only need 1 instance of NetFlow Optimizer to ingest various *flow formats from many devices. Here the link to download NFO, as well as information on how to install and configure it, and get free evaluation license.