This App provides dashboards and reports to address many use cases such as network bandwidth monitoring, capacity planning, detailed traffic activities, troubleshooting and cyber threats detection.
You need to have NetFlow Optimizer (NFO) software to process and feed data into this App. NFI supports NetFlow v5, v9, sFlow, IPFIX, J-Flow, Cisco ASA NSEL, Cisco HSL, and Palo Alto Networks.
Register for an evaluation www.netflowlogic.com
NFO consumes and applies in-line analytics to summarize flows and send consolidated information into Splunk Enterprise. This reduces the volume of data by orders of magnitude.
Further documentation can be found at:
- New dashboard - NFO Index Usage
- UI improvements:
- New navigation
- Pan and zoom to allow better drill downs
- Security dashboard counters with trend
- Bug fixes
- Performance improvements
- Improved visibility across multiple network devices
- UI cosmetic changes
- Bug fixes
This version is compatible with Technology Add-On for NetFlow (https://splunkbase.splunk.com/app/1838/) version 3.7.14
##### If you upgrade from version 3.6 or lower, please read below #####
- CIM compliance changes
- Splunk Cloud ready changes
- Bug fixes
For existing customers: ##### BEFORE YOU UPGRADE #####
1. In this version the default setup of index=flowintegrator and summary indexes created by the App are no longer supported.
To continue using flowintegrator index and existing summary indexes created by the App, please follow these steps:
Create the file $SPLUNK_ROOT/etc/apps/netflow/local/macros.conf with the following line:
definition = index=flowintegrator sourcetype=flowintegrator
2. Save the configuration file ($SPLUNK_ROOT/etc/apps/netflow/local/macros.conf).
3. Restart Splunk for the changes to take effect.
Splunk's App Certification program uses a specific set of criteria to evaluate the level of quality, usability and security your app offers to its users. In addition, we evaluate the documentation and support you offer to your app's users.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 50GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.