How do I configure Splunk Stream to capture ALL traffic on a specific network interface? I taking traffic from a Gigamon host. Here's what I have so far.
[streamfwd://streamfwd]
streamfwdcapture.0.interface = Ethernet0
streamfwdcapture.0.offline = false
disabled = 0
index = GigamonEthernet0
Will the above get the job done? Thanks in advance for your help.
