NetFlow for Splunk by NetFlow Logic

NetFlow for Splunk App by NetFlow Logic relies on data generated by NetFlow Integrator™:
* Middleware that processes NetFlow, sFlow and IPFIX and stream only critical and summarized data to Splunk
* Data consolidation
* Machine learning engine
* Cost effective to deploy on all tiers of the network

To enable this App please register for an evaluation at: www.netflowlogic.com

Release Notes

This app provides dashboards and reports to address many use cases such as network bandwidth monitoring, capacity planning, detailed traffic activities, troubleshooting and cyber threats detection.

You need to have NetFlow Integrator (NFI) Standard software to feed data into this app. NFI supports NetFlow v5, v9, IPFIX, Cisco ASA NSEL, and Palo Alto Networks.

Register for an evaluation www.netflowlogic.com

NFI consumes and applies in-line analytics to summarize flows and send consolidated information into Splunk Enterprise. This reduces the volume of data by orders of magnitude.

For installation and configuration instructions please visit https://netflowlogic.zendesk.com/categories/20118596-Getting-Started

Optionally, ALL flow records can be consolidated. You will be able to retain every network conversation and still benefit from data reduction. Please refer to https://netflowlogic.zendesk.com/forums/21538282-Frequently-Asked-Questions

Optionally, All flow records can be archived in external storage. Please refer to https://netflowlogic.zendesk.com/forums/21538282-Frequently-Asked-Questions

Features

  • Traffic Analysis and Trending
  • Bandwidth Monitoring down to Interface Level
  • Capacity Planning
  • Anomaly Detection
  • Correlation with Firewall Logs
  • Cyber Threat Detection
16 ratings