For Syslog, Splunk recommends using a dedicated syslog server.
So, for Netflow data, is there any particular best practices for ingesting into Splunk ?
Can I still continue using syslog server even for Netflow data or use Splunk stream app ?
Please advise. Thanks.