Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading NetFlow Analytics for Splunk
MD5 checksum (netflow-analytics-for-splunk_3730.tgz) 06ab7a8d8972313e90bf3e0a85de14f1 MD5 checksum (netflow-analytics-for-splunk_3714.tgz) 90e957a43713123503d947e888d6b069
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

NetFlow Analytics for Splunk

Splunk Certified
Overview
Details
NetFlow Analytics for Splunk App relies on flow data processed by NetFlow Optimizer™ (NFO) and enables you to analyse it using Splunk® Enterprise. NetFlow Optimizer is a new name for our core product, NetFlow Integrator or NFI, as we believe that it better describes what our product does.

This App should be installed on servers acting as search head.

Before installing this App, please install the Technology Add-on for NetFlow (TA-netflow) on your search heads, indexers, and forwarders. To download TA-netflow please visit https://splunkbase.splunk.com/app/1838/

This solution:

* Supports NetFlow v5, v9, sFlow, IPFIX, Cisco ASA NSEL, Cisco HSL, Cisco AVC, Juniper J-Flow, Palo Alto Networks NetFlow, and Blue Coat FDR
* Performs flow data consolidation
* Shows overloaded network devices interfaces
* Reports hosts communicating with bad actors
* Cost effective to deploy on all tiers of the network

Start Your Free Trial by registering at https://www.netflowlogic.com/download/

This App provides dashboards and reports to address many use cases such as network bandwidth monitoring, capacity planning, detailed traffic activities, troubleshooting and cyber threats detection.

You need to have NetFlow Optimizer (NFO) software to process and feed data into this App. NFI supports NetFlow v5, v9, sFlow, IPFIX, J-Flow, Cisco ASA NSEL, Cisco HSL, and Palo Alto Networks.

Register for an evaluation www.netflowlogic.com

NFO consumes and applies in-line analytics to summarize flows and send consolidated information into Splunk Enterprise. This reduces the volume of data by orders of magnitude.

Further documentation can be found at:
NetFlow_Analytics_for_Splunk_User_Manual_3.7.pdf

Release Notes

Version 3.7.30
April 5, 2017

VERSION: 3.7.30

- Performance improvements
- Improved visibility across multiple network devices
- UI cosmetic changes
- Bug fixes

This version is compatible with Technology Add-On for NetFlow (https://splunkbase.splunk.com/app/1838/) version 3.7.14

##### If you upgrade from version 3.6 or lower, please read below #####

VERSION: 3.7.17

- CIM compliance changes
- Splunk Cloud ready changes
- Bug fixes

For existing customers: ##### BEFORE YOU UPGRADE #####

1. In this version the default setup of index=flowintegrator and summary indexes created by the App are no longer supported.
To continue using flowintegrator index and existing summary indexes created by the App, please follow these steps:

Create the file $SPLUNK_ROOT/etc/apps/netflow/local/macros.conf with the following line:
[netflow_index]
definition = index=flowintegrator sourcetype=flowintegrator

2. Save the configuration file ($SPLUNK_ROOT/etc/apps/netflow/local/macros.conf).

3. Restart Splunk for the changes to take effect.

Version 3.7.14
Jan. 31, 2017

- CIM compliance changes
- Splunk Cloud ready changes
- Bug fixes

For existing customers: ##### BEFORE YOU UPGRADE #####

1. In this version the default setup of index=flowintegrator and summary indexes created by the App are no longer supported.
To continue using flowintegrator index and existing summary indexes created by the App, please follow these steps:

Create the file $SPLUNK_ROOT/etc/apps/netflow/local/macros.conf with the following line:
[netflow_index]
definition = index=flowintegrator sourcetype=flowintegrator

2. Save the configuration file ($SPLUNK_ROOT/etc/apps/netflow/local/macros.conf).

3. Restart Splunk for the changes to take effect.

229
Installs
12,090
Downloads
Share Subscribe LOGIN TO DOWNLOAD

Subscribe Share

Splunk Certification Program

Splunk's App Certification program uses a specific set of criteria to evaluate the level of quality, usability and security your app offers to its users. In addition, we evaluate the documentation and support you offer to your app's users.

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 50GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
© 2005-2017 Splunk Inc. All rights reserved.
Splunk®, Splunk>®, Listen to Your Data®, The Engine for Machine Data®, Hunk®, Splunk Cloud™, Splunk Light™, SPL™ and Splunk MINT™ are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners.