Getting Data In

splunk netflow problem

akertis
New Member

the nfdump log timestamp is way off. The date is off by more than a month. Every entry is Nov 13 at 3 AM. I have confirmed the time is correct on the splunk server and the asa. Is there a way to fix this timestamp problem?

Tags (2)
0 Karma

NetFlow_Logic
Contributor

The latest version of NetFlow for Splunk App is based on NetFlow Integrator, which replaced nfdump:

http://splunk-base.splunk.com/apps/22328/netflow-for-splunk-powered-by-netflow-integrator

0 Karma

Spelunke
Path Finder

Can you test the flow collection with nfdump from the command line?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...