Collect Netflow for Splunk Reporting - WinOS

[jodros]

I am currently evaluating Splunk as a possible SIEM replacement for RSA enVision. I would like to test netflow reporting. The eval server is running WinOS, so I will not be able to run any linux flow apps.

What would be the best netflow app for WinOS to integrate with Splunk for netflow reporting? This is something that is vital for me to test prior to making a decision. We are also a SolarWinds shop, so I have a post asking if their RNA can export flow data in a textual format.

Any assistance would be appreciated.

Thanks

[NetFlow_Logic]

If you are still interested - we have a product - Flowintegrator - that converts NetFlow to syslog, thus making it available in Splunk. It is in Beta now. If you are interested - please contact us at info@netflowlogic.com and/or register for Beta at

http://www.netflowlogic.com