NetFlow and SNMP Analytics for Splunk App relies on flow data processed by NetFlow Optimizer™ (NFO) and enables you to analyze it using Splunk® Enterprise or Splunk® Cloud.
Use this App for network traffic monitoring of your cloud (AWS, Microsoft Azure, or Google) or on-premises infrastructure.
This App should be installed on servers acting as search head.
Before installing this App, please install the Technology Add-on for NetFlow (TA-netflow) on your search heads, indexers, and forwarders. To download TA-netflow please visit https://splunkbase.splunk.com/app/1838/
This version of the App is compatible with TA-netflow version 4.5.1 or higher.
This solution:
* Supports NetFlow v5, v9, sFlow, IPFIX, Cisco ASA NSEL, Cisco HSL, Cisco AVC, Juniper J-Flow, Palo Alto Networks NetFlow, Citrix AppFlow
* Supports cloud flow logs: AWS VPC Flow Logs, Google Cloud VPC Flow Logs, Microsoft Azure NSG Flow Logs
* Supports SNMP polling and SNMP traps (v2c and v3)
* Enriches flow data with DNS names, VM names, Cloud virtual network names, GeoIP, IP Reputation, Applications, User identity
* Reports bidirectional network conversations and their duration
* Shows overloaded network devices interfaces
* Reports hosts communicating with bad actors
* Cost effective to deploy on all tiers of the network
Start Your Free Trial by registering at https://www.netflowlogic.com/download/