search

philhagen / sof-elk

Configuration files for the SOF-ELK VM
GNU General Public License v3.0
1.47k stars 276 forks source link

Netflow vs Argus #52

Closed mchesmo3 closed 7 years ago

mchesmo3 commented 7 years ago

I see that sof-elk can accept netflow data. Do you think it will ever be able to accept Argus flows as well?

philhagen commented 7 years ago

Logstash receives native NetFlow (v5 now, v9 supported but not yet in SOF-ELK), so if Argus can ship that format, then yes. If not, anyone who creates a Logstash input plugin that handles Argus data could add the functionality.