cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
3177
Views
10
Helpful
2
Replies
Trivela
Beginner

WLC Netflow for Cisco Stealthwatch

I have a problem in setting up netflow for Cisco Stealthwatch. I've set up the exporter in WLC through GUI, but Stealthwatch didn't show any data. Stealthwatch read the flows from WLC, but no data about the clients. Stealthwatch displayed an error "Exporter has sent invalid template data."

 

I attached some pictures in this post you guys might want to look at. Any help appreciated. Thank you

problem.jpgproblem 2.jpg

1 ACCEPTED SOLUTION

Accepted Solutions

I didn't get this working. After checking some cisco docs, i found that enhanced flow record data export (which is required for Stealthwatch) was added only on WLC 5520, 8510 & 8540. In other words, my WLC 2504 doesn't support the enhanced flow record data export..

View solution in original post

2 REPLIES 2
Todd S
Beginner

Did you ever get this working?  I'm working on this in my lab.  It is my theory that you still need your L3 device to send NetFlow information.  I believe the WLC will only send data it is learning from AVC.  It isn't a true NetFlow flow like you would get from a L3 switch or a router.  

I didn't get this working. After checking some cisco docs, i found that enhanced flow record data export (which is required for Stealthwatch) was added only on WLC 5520, 8510 & 8540. In other words, my WLC 2504 doesn't support the enhanced flow record data export..

Create
Recognize Your Peers
Content for Community-Ad