All Apps and Add-ons

Splunk Add-on for Netflow Windows compatibility

jmcrabb
Explorer

Are there plans to make a Windows Server compatible version of this add-on? If so, what's the timeframe?

Jim

0 Karma
1 Solution

rgaleone1
Path Finder

Jim -
This TA relies on NFDUMP tools to capture, and translate NetFlow off the wire, from binary data into flat files for indexing into Splunk. NFDUMP tools are only available for *nix systems at this time and I don't see them being ported to Windows anytime soon. This is out of the control of Splunk, but I would point you to NetFlow for Splunk powered by NetFlow Integrator. NetFlow Integrator is compatible with Windows, although I've never used it on a Windows box. A link to NFDUMP tools should you consider spinning up a *nix box.

Hope this helps.

[Edit]: Additional answers to similar questions.

View solution in original post

rgaleone1
Path Finder

Jim -
This TA relies on NFDUMP tools to capture, and translate NetFlow off the wire, from binary data into flat files for indexing into Splunk. NFDUMP tools are only available for *nix systems at this time and I don't see them being ported to Windows anytime soon. This is out of the control of Splunk, but I would point you to NetFlow for Splunk powered by NetFlow Integrator. NetFlow Integrator is compatible with Windows, although I've never used it on a Windows box. A link to NFDUMP tools should you consider spinning up a *nix box.

Hope this helps.

[Edit]: Additional answers to similar questions.

jmcrabb
Explorer

Thanks for the info!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Laser Bananas and Edge Hubs: Exploring Operational Technology (OT) Data Through a ...

  OT is a different environment to traditional IT and can have interesting challenges when interfacing the ...

Event Series: Mastering AI Tokenomics and Splunk Agent Observability

Beyond the Black Box: Correlating AI Performance and Tokenomics with Splunk Agent Observability   As ...