Hi, I am trying to collect NetFlow data from Cisco router via Splunk_TA_Stream. I config streamfwd.conf according to this post: https://docs.splunk.com/Documentation/StreamApp/7.2.0/DeployStreamApp/ConfigureFlowcollector
this is my configure
[streamfwd]
logConfig = streamfwdlog.conf
port = 8889
netflowReceiver.0.ip = 192.168.15.253 (this is Splunk Enterprise server IP)
netflowReceiver.0.port = 9995
netflowReceiver.0.decoder = netflow
I used wireshark to confirm data was recivied via 9995 by splunk server. But no data was index and search command: sourcetype=stream:netflow return nothing. Sorry for my bad English
