Join the Conversation
- Find Answers
- :
- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- All Apps and Add-ons
- :
- NetFlow Integrator version
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
NetFlow Integrator version
What are the limitations of the NetFlow Integrator version that comes with this app? thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Our NetFlow for Splunk app is bundled with our free edition and does not require a license. The Key Features are below:
NetFlow to Syslog (CIM)
NetFlow v5, v9
Real Time w/ One to One Conversion
If you are interested in additional NetFlow and Data Consolidation, please register on our web site for a 30-day free trial of our Standard Edition.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
My concern is if I have a licensed Splunk server and install this app, should I get a license for NetFlow integrator? Considering the capabilities of the NetFlow integrator that comes with the app fit my requirement.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Fedsan,
NetFlow Integrator™ is a software-only, rule-based streaming system. It receives NetFlow records from network devices and intelligently converts this information in real time into syslog messages, and sends them to traditional SIEM systems, like Splunk. The rules are plug-ins that provide a variety of network visibility and security services. By consolidating NetFlow records, the product reduces the amount of data forwarded to SIEM systems without losing information veracity.
Our FREE Limited Edition of NetFlow Integrator has only one conversion rule that translates v5, v9 NetFlow to syslog one-to-one without any pre-processing or consolidation. It is bundled with NetFlow for Splunk application, but could be installed on a separate server, with Splunk Forwarder, or in virtual environment.
If you are interested in consolidation and processing of other NetFlow such as; Palo Alto Networks, Cisco NSEL, then you will want to try either our NetFlow Essential or our Standard Edition.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
My concern is if I have a licensed Splunk server and install this app, should I get a license for NetFlow integrator? Considering the capabilities of the NetFlow integrator that comes with the app fit my requirement.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)
Automating Threat Operations and Threat Hunting with Recorded Future
Keep the Learning Going with the New Best of .conf Hub
