Splunk NetFlow Integration
Virtual and Physical Network Intelligence
NetFlow Logic developed a suite of products for effective integration of NetFlow Optimizer core processing engine with Splunk Enterprise or Splunk Cloud products.
NetFlow Optimizer must be installed and configured in order to use the NetFlow Analytics for Splunk App and the NetFlow Technology Add-on. The latest version of NFO is always available at our Download page.
Technology Add-on for NetFlow
This Add-on must be installed on Splunk Indexers and Search heads in order for NFO to work with Splunk. It collects NetFlow data processed by NetFlow Optimizer, and then this data is visualized by the Netflow Analytics for Splunk App or Splunk Enterprise Security.
The Technology Add-on for NetFlow is downloadable from Splunkbase at https://splunkbase.splunk.com/app/1838/.
NetFlow Analytics for Splunk App*
This App must be installed on Splunk Search heads. It contains visualization dashboards and information for alerting.
Downloadable from Splunkbase at https://splunkbase.splunk.com/app/489/.
Splunk Enterprise Security App*
Downloadable from Splunkbase at https://splunkbase.splunk.com/app/263/.
NetFlow-based DDoS Detection App*
Contact us at firstname.lastname@example.org.
* Requires both NFO and Technology Add-on for NetFlow.