netflow to syslog to file or siem

View thread

joshik

Hi All,

Is there a way to collect Netflow logs to a file and export them in Syslog format. Trying to get a working solution to collect logs from the sd-wan device(ipfix/netflow) and forward them to our SIEM which only accepts Syslog format. here is the conf file ..let me know what im doing wrong ? <Extension netflow> Module xm_netflow </Extension>

<Extension json> Module xm_json </Extension>

<Input netflowIn1> Module im_udp Host Port 2055 InputType netflow </Input>

<Output Out> Module om_file File "c:\temp\syslog.txt" Exec to_json(); </Output>

<Route nf> Path netflowIn1 => Out </Route>