icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading NetFlow Analytics for Splunk
SHA256 checksum (netflow-analytics-for-splunk_3934.tgz) 8b2b98ff8024b539398cdd7e83ed4c6fd54e4b80d6e701b9c943803ac9d096e2 SHA256 checksum (netflow-analytics-for-splunk_3925.tgz) 73e8259a84989eec819b031283dac7d34e8f5b5baf7fbb11b783e3db016cd0f1 SHA256 checksum (netflow-analytics-for-splunk_388.tgz) 1117af3560921f37797844bd3eb6bfb5eb9998d19291a68b3e1099591a129c95
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

NetFlow Analytics for Splunk

Splunk AppInspect Passed
NetFlow Analytics for Splunk App relies on flow data processed by NetFlow Optimizer™ (NFO) and enables you to analyze it using Splunk® Enterprise.

This App should be installed on servers acting as search head.

Before installing this App, please install the Technology Add-on for NetFlow (TA-netflow) on your search heads, indexers, and forwarders. To download TA-netflow please visit https://splunkbase.splunk.com/app/1838/

This version of the App is compatible with TA-netflow version 3.9.23 or higher.

This solution:

* Supports NetFlow v5, v9, sFlow, IPFIX, Cisco ASA NSEL, Cisco HSL, Cisco AVC, Juniper J-Flow, Palo Alto Networks NetFlow, and Blue Coat FDR
* Supports SNMP polling and SNMP traps (v2c and v3)
* Performs flow data consolidation
* Shows overloaded network devices interfaces
* Reports hosts communicating with bad actors
* Cost effective to deploy on all tiers of the network

Start Your Free Trial by registering at https://www.netflowlogic.com/download/

This App provides dashboards and reports to address many use cases such as network bandwidth monitoring, capacity planning, detailed traffic activities, troubleshooting and cyber threats detection.

You need to have NetFlow Optimizer (NFO) software to process and feed data into this App. NFI supports NetFlow v5, v9, sFlow, IPFIX, J-Flow, Cisco ASA NSEL, Cisco HSL, and Palo Alto Networks.

Register for an evaluation www.netflowlogic.com

NFO consumes and applies in-line analytics to summarize flows and send consolidated information into Splunk Enterprise. This reduces the volume of data by orders of magnitude.

Further documentation can be found at:

Release Notes

Version 3.9.34
July 17, 2019

This version is compatible with TA for Netflow version 3.9.34 or higher (https://splunkbase.splunk.com/app/1838/)

- Added dashboards for NFO Module for VMware NSX Distributed Firewall (available in NFO 2.6)
- Added searches for NetFlow Capture and Replay (available in NFO 2.6)
- Bug fixes

Version 3.9.25
April 29, 2019

This version is compatible with TA for Netflow version 3.9.23 or higher (https://splunkbase.splunk.com/app/1838/)

- Added support NetFlow data reported by multiple NetFlow Optimizer instances
- Added alert for reporting interfaces with utilization over a certain threshold
- Improved usability of network devices and interfaces utilization dashboards
- Added ability to override interface speed reported via SNMP polling
- Added Topology view to visualize network conversations
- Added Bubble view to visualize hosts with most flows and destinations
- Updated Autonomous System numbers lookup
- Improved performance
- Bug fixes
- Changes to pass AppInspect

Version 3.8.8
June 28, 2018

- New dashboards:
- Microsegmentation Analyzer and Planning
- Traffic Analyzer and Planning (based on my-subnets.csv lookup)
- SNMP interface errors and discards
- SNMP CISCO - latest memory/cpu values
- Updated Cyber Threat Statistics dashboard (added custom thread feeds counter)
- Bug fixes
- Performance improvement


Subscribe Share

AppInspect Tooling

Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 50GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
© 2005-2019 Splunk Inc. All rights reserved.
Splunk®, Splunk>®, Listen to Your Data®, The Engine for Machine Data®, Hunk®, Splunk Cloud™, Splunk Light™, SPL™ and Splunk MINT™ are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners.