Splunk Add-on for IPFIX

Important: On March 18, 2019, this add-on has been deprecated and reached its End of Life on June 19, 2019. For more information about the end of availability and support for this add-on, see https://www.splunk.com/blog/2019/03/18/end-of-availability-splunk-built-apps-and-add-ons.html?April. IPFIX is an industry standard to describe network flows. The Splunk Add-on for IPFIX allows a Splunk Enterprise administrator to receive and convert IPFIX flow information from compatible network gear. Once collected, the packet capture data can be analyzed directly or used as a contextual data feed to correlate with other vulnerability related data in Splunk. This add-on provides the inputs and CIM-compatible knowledge to use with other Splunk apps, such as Splunk App for Enterprise Security and Splunk App for PCI Compliance.