https://community.cisco.com/t5/security-analytics/stealthwatch-netflow-direction-question/m-p/3800553#M142 <P>So I have a question regarding the netflow direction.&nbsp; All the guides that I have seen only show the input direction.&nbsp; Are you suppose to create 2 flow monitors, one in the input and one in the output?&nbsp; Could someone please enlighten me on this?</P> Wed, 13 Feb 2019 03:01:00 GMT b_ferguson 2019-02-13T03:01:00Z https://community.cisco.com/t5/security-analytics/stealthwatch-netflow-direction-question/m-p/3800553#M142 <P>So I have a question regarding the netflow direction.&nbsp; All the guides that I have seen only show the input direction.&nbsp; Are you suppose to create 2 flow monitors, one in the input and one in the output?&nbsp; Could someone please enlighten me on this?</P> Wed, 13 Feb 2019 03:01:00 GMT https://community.cisco.com/t5/security-analytics/stealthwatch-netflow-direction-question/m-p/3800553#M142 b_ferguson 2019-02-13T03:01:00Z https://community.cisco.com/t5/security-analytics/stealthwatch-netflow-direction-question/m-p/3800706#M143 <P>Netflow you can define how the flows to be sent to Stealthwatch. Stealth watch only read the flows and do analysis based on the input.</P> <P>&nbsp;</P> <P><A href="https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/Cisco_NetFlow_Configuration.pdf" target="_blank">https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/Cisco_NetFlow_Configuration.pdf</A></P> <P>&nbsp;</P> <P><A href="https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/config-trouble-netflow-stealth.pdf" target="_blank">https://www.cisco.com/c/dam/en/us/td/docs/security/stealthwatch/netflow/config-trouble-netflow-stealth.pdf</A></P> <P>&nbsp;</P> <P>&nbsp;</P> Wed, 13 Feb 2019 08:52:06 GMT https://community.cisco.com/t5/security-analytics/stealthwatch-netflow-direction-question/m-p/3800706#M143 balaji.bandi 2019-02-13T08:52:06Z