Netflow

Configure Netflow Log Source with observIQ

Supported Versions

Netflow versions

  • v5
  • v9
  • IPFIX

Prerequisites

Forward Netflow data to port 2055 on the observIQ agent.

Configuration

Option

Description

Listen Address

Use this field to verify the path to the Listen Address, an address in the form of ': '. The default is '0.0.0.0:2055'

Netflow Version

The version of Netflow (v5, v9, or IPFIX).

Sampling Drop Rate

The probability an entry is dropped. A value of 1.0 will drop 100% of matching entries, while a value of 0.0 will drop 0%.

Log Types

Types

netflow

Dashboards

Users can configure dashboards using visualizations. More information can be found on our visualizations and dashboards page.

Advanced

For more information on the advanced configuration capabilities, see our detailed plugin guide here.