cisco-catalyst-enhanced-netflow-setup

Automating Cisco Catalyst Enhanced NetFlow add-on installation in Splunk is achieved by running the provided setup script, which installs the add-on from Splunkbase with a local fallback. This script ensures the NetFlow receiver path is configured and validates the deployment.

A NetFlow receiver path configuration for IPFIX data in Splunk defines how incoming NetFlow and IPFIX traffic is ingested and parsed. This setup configures and validates the receiver path via Splunk Stream integration to enable enhanced field mappings.

Yes, you can use the Cisco Catalyst Enhanced Netflow Add-on on a standalone Splunk forwarder. The setup applies to forwarder-side or standalone Splunk deployments that collect and analyze NetFlow and IPFIX data streams.

Yes, the Splunk NetFlow add-on setup script validates dashboards and field mappings. The automation ensures optional dashboards are available and validates the complete installation using the provided scripts to confirm ready-to-use NetFlow integration.

NetFlow add-on installation may fail when Splunkbase is unreachable if no local fallback exists. This setup script handles the issue by automating optional add-on installation from Splunkbase with a local fallback to ensure deployment succeeds.

Yes, you need Splunk Stream integration to configure and validate the NetFlow receiver path for IPFIX data. The integration enables the Splunk deployment to properly collect, parse, and map incoming NetFlow and IPFIX traffic.