ANNOUNCEMENT - The community will be down for maintenace this Thursday August 13 from 12:00 AM PT to 02:00 AM PT. As a precaution save your work.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
398
Views
5
Helpful
1
Replies
Highlighted
Beginner

Forwarding IPFIX flows from flow sensor to Third-Party device

Does Cisco Stealthwatch Flowsensor support forwarding IPFIX flows to Third-Party flow analytics tool?

If it is possible, then where can I get Stealthwatch IPFIX "Private Enterprise Element Definition" to decode flows on the recipient end.

I was successful in forwarding the flows to another analytic tool by adding additional entry in "Advanced Configuration Menu" in Flowsensor configuration. But was unable to decode the flows.

 

  

1 REPLY 1
Highlighted
Cisco Employee

Re: Forwarding IPFIX flows from flow sensor to Third-Party device

FlowSensor is custom IPFIX format and 3rd party flow analytics tools can't handle it.

So, if you need Flow data from Flow Sensor, you can export them from Flow Collector.

We have API for flow exporting from Flow Collector. Please check below link:

https://github.com/CiscoDevNet/stealthwatch-data-exporter/blob/master/src/main/java/stealthwatch/flowforwarder/client/FlowForwarderClient.java