cancel
Showing results for 
Search instead for 
Did you mean: 
artek
Level 11
Report Inappropriate Content
Message 1 of 2

Is it possible to correlate netflow\sflow data?

Jump to solution

Hello,

is it possible to correlate netflow\sflow data? I am trying to create correlation rule, that should hit when there will be a communication to particular address. For example:

ESM05.PNG

When I send traffic log from my firewall, then rule works, but when information about communication is only available from sFlow\netflow data source - rule does not work.

I am using ESM 9.1.3.

Regards,

Artur Sadownik

1 Solution

Accepted Solutions
jaimen
Level 9
Report Inappropriate Content
Message 2 of 2

Re: Is it possible to correlate netflow\sflow data?

Jump to solution

This will be a feature of 9.2 to be released at the end of this quarter.

1 Reply
jaimen
Level 9
Report Inappropriate Content
Message 2 of 2

Re: Is it possible to correlate netflow\sflow data?

Jump to solution

This will be a feature of 9.2 to be released at the end of this quarter.