Splunk Enterprise

Splunk Stream

steventcoleman
New Member

How do I configure Splunk Stream to capture ALL traffic on a specific network interface? I taking traffic from a Gigamon host. Here's what I have so far.

[streamfwd://streamfwd]
streamfwdcapture.0.interface = Ethernet0
streamfwdcapture.0.offline = false
disabled = 0
index = GigamonEthernet0

 

Will the above get the job done?  Thanks in advance for your help.

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...