I found that Stealthwatch with ipfix exporters works incorrect. We have a lot of device isr4331 with configure netflow v9 in non sdwan mode, after I converted it to sdwan it started to send netflow as ipfix and traffic on the gui Stealthwatch is incorrect om general, but sometimes it looks like everythink is OK - about 50mbps (on my screen) maybe I need to change some specific option or cisco stealthwatch can't work with sdwan netflow? When it worked with non-controlled mode traffic in gui was correct every time
