Splunk Add-on for Citrix Netscaler - IPFIX/AppFlow

Getting Data In

Hello,

we are trying to configure the receiving of AppFlow data from Citrix Netscaler, using the Splunk Add-on for Citrix Netscaler and Splunk Stream.

Everything seems to work, except that not all fields are visible on the search head.

We can see "netflow_elements" but probably not "recognized".

How can we manage this? Any suggestion?

Thanks!

Get Updates on the Splunk Community!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...