splunk netflow problem

akertis · ‎12-14-2011

the nfdump log timestamp is way off. The date is off by more than a month. Every entry is Nov 13 at 3 AM. I have confirmed the time is correct on the splunk server and the asa. Is there a way to fix this timestamp problem?

NetFlow_Logic · ‎02-18-2013

The latest version of NetFlow for Splunk App is based on NetFlow Integrator, which replaced nfdump:

http://splunk-base.splunk.com/apps/22328/netflow-for-splunk-powered-by-netflow-integrator

Spelunke · ‎01-02-2012

Can you test the flow collection with nfdump from the command line?

splunk netflow problem

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Index This | What is feather-light but cannot be held long?

.conf26 Registration is Live: Secure Your Early Bird Pass Now

Mile High Learning with Splunk University, Denver, Colorado

Join the Conversation

splunk netflow problem

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Index This | What is feather-light but cannot be held long?

.conf26 Registration is Live: Secure Your Early Bird Pass Now

Mile High Learning with Splunk University, Denver, Colorado