Netflow Integrator on Universal Forwarder

[raziasaduddin]

I cannot get this to work. I had it working on a PoC box, but now I have a dedicated Forwader, indexer, and search head.

I suppose it is because there is no Python on a forwarder. What should I do? I want to run it on the forwarder so it can load balance netflow to my indexers.

I copied the netflow folder, changed the server.cfg to use port 2055, and restarted the forwarder. I dont see the nfc_svr.exe running. I even tried running it manually with no luck. I tired all the cmd and vbs files. No luck. Will the keep alive python scripts be the ones that ensure it is running while splunk is up?

Thanks!

[NetFlow_Logic]

You should be able to run NetFlow Integrator on a forwarder, and you don't need Python for that.

Make sure you have administrative privileges!

You can start NetFlow Integrator from

\netflow\bin\flowintegrator_windows\bin

with this command:

flowintegrator start

Then make sure it is running:

flowintegrator status

You should see:

NetFlow Integrator is running < 21288="">.

If you need any additional assistance, or have question, feel free to contact us at: https://netflowlogic.zendesk.com/home

[NetFlow_Logic]

Hello raziasaduddin - Can you open a request here at: https://netflowlogic.zendesk.com/home or contact us at: [email protected] - I would like to see if we can setup a secure remote webex with you so we can take a look.

Thanks!

[raziasaduddin]

I tried that and it still wont start.