Skip to content

Instantly share code, notes, and snippets.

@Maddosaurus
Created April 4, 2018 10:40
Show Gist options
  • Select an option

  • Save Maddosaurus/5b499aa9344f671c710df02be8ba23e2 to your computer and use it in GitHub Desktop.

Select an option

Save Maddosaurus/5b499aa9344f671c710df02be8ba23e2 to your computer and use it in GitHub Desktop.
Splunk Streamfwd Config
# $SPLUNK_HOME/etc/apps/Splunk_TA_stream/local/streamfwd.conf
[streamfwd]
port = 8889
ipAddr = 10.0.x.x
netflowReceiver.0.ip = 10.0.x.x
netflowReceiver.0.port = 3000
netflowReceiver.0.protocol = udp
netflowReceiver.0.decoder = netflow
# remember to enable the netflow stream in Splunk Stream App -> Config -> Config Streams
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment