cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1358
Views
3
Helpful
5
Comments
brford
Cisco Employee
Cisco Employee

Welcome to the new Network as a Sensor / Enforcer Space in the Cisco Customer Connection Security Community.

We've divided this space up as follows:

The 'Stealthwatch' subspace will be basic questions about NetFlow, devices (Cisco and other) that support (or don't support) NetFlow,  the Stealthwatch Management Console (SMC), Flow Collectors, Flow Licenses, Flow Sensors and the UDP Director.

The 'Stealthwatch Internet’ subspace is going to be all about Flow Sensor, the Proxy License (also known as ProxyWatch), and the Cloud License (also known as StrataWatch).

In the 'Stealthwatch Enterprise' subspace we want to discuss Stealthwatch Enterprise features like Stealthwatch solution scaling, High Availability, ISE and pxGrid integration, the Stealthwatch Learning Network License, and large deployments.

'Stealthwatch SOC/NOC' is going to include the new Data Export capability, the Stealthwatch SOAP and RESTful APIs, Cisco Security Packet Analyzer (also known as PacketWatch), and Professional Services.

Thanks for viewing and participating.

5 Comments
nbevan
Cisco Employee
Cisco Employee

Hi you

Are you here in Vegas

Sent from my iPhone

rrlewis
Level 1
Level 1

Hiya. Interested in what the "new Data Export capability" is. Can you elaborate?

Regards,

Richard

hanjabbo
Cisco Employee
Cisco Employee

Hi Richard,

This feature is available starting version 6.8.2  only on Flow collectors 4k and 5k models.
The use of this feature is to export the flows from a flow collector to be consumed by other solutions for storage or analysis.

rrlewis
Level 1
Level 1

HI Hanna,

Thanks for coming back so quickly on this. It sounds like the information I’m looking for. Just to be clear, this exports flow records from the collector database in what format? Is it a proprietary format or a standard one?

If this is documented, could you provide me with a  reference?

Best Regards,

Richard

<http://www.vodafone.co.uk/>

Richard Lewis

SOC Engineer

IT & Applications Security

Vodafone Limited

hanjabbo
Cisco Employee
Cisco Employee

HI Richard,

The feature is using WebSocket, The feature is intended to enable professional services team to integrate the solution with other systems.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: