Hi, I am trying to collect NetFlow data from Cisco router via Splunk_TA_Stream. I config streamfwd.conf according to this post: https://docs.splunk.com/Documentation/StreamApp/7.2.0/DeployStreamApp/ConfigureFlowcollector this is my configure  [streamfwd] logConfig = streamfwdlog.conf port = 8889 netflowReceiver.0.ip = 192.168.15.253 (this is Splunk Enterprise server IP) netflowReceiver.0.port = 9995 netflowReceiver.0.decoder = netflow I used wireshark to confirm data was recivied via 9995 by splunk server. But no data was index and search command: sourcetype=stream:netflow return nothing. Sorry for my bad English ... View more

Hi, I have processes logs like this: event1: {"snapshot":[{"name":"systemd"},{"name":"gvfsd-trash"},{"name":"gvfsd-metadata"},{"name":"qterminal"},{"name":"bash"},{"name":"systemd-journal"},{"name":"systemd-udevd"},],"action":"snapshot"} event2: {"snapshot":[{"name":"systemd"},{"name":"gvfsd-trash"},{"name":"bash"},{"name":"systemd-journal"},{"name":"systemd-udevd"},],"action":"snapshot"} How do I stats all of name except "systemd*" processes? Output is: "gvfsd-trash", "gvfsd-metadata","qterminal", "bash" Thanks. ... View more

I want to collect and analyze Netflow from Cisco devices and NetFlow Optimizer (NFO) 60days free trial. I am looking for a free Netflow analyzer solution. ... View more