I cannot get this to work. I had it working on a PoC box, but now I have a dedicated Forwader, indexer, and search head.
I suppose it is because there is no Python on a forwarder. What should I do? I want to run it on the forwarder so it can load balance netflow to my indexers.
I copied the netflow folder, changed the server.cfg to use port 2055, and restarted the forwarder. I dont see the nfc_svr.exe running. I even tried running it manually with no luck. I tired all the cmd and vbs files. No luck. Will the keep alive python scripts be the ones that ensure it is running while splunk is up?
You should be able to run NetFlow Integrator on a forwarder, and you don't need Python for that.
Make sure you have administrative privileges!
You can start NetFlow Integrator from
with this command:
Then make sure it is running:
You should see:
NetFlow Integrator is running < 21288="">.>
If you need any additional assistance, or have question, feel free to contact us at: https://netflowlogic.zendesk.com/home