I am currently evaluating Splunk as a possible SIEM replacement for RSA enVision. I would like to test netflow reporting. The eval server is running WinOS, so I will not be able to run any linux flow apps.
What would be the best netflow app for WinOS to integrate with Splunk for netflow reporting? This is something that is vital for me to test prior to making a decision. We are also a SolarWinds shop, so I have a post asking if their RNA can export flow data in a textual format.
Any assistance would be appreciated.