Splunk Stream lets you capture, filter, index, and analyze streams of network event data. A "stream" is a grouping of events defined by a specific network protocol and set of fields. When combined with logs, metrics, and other information, the streams that you capture with Splunk Stream can provide valuable insight into activities and suspicious behavior across your network infrastructure. Use Splunk Stream to:Passively capture live streams of network event dataCapture metadata and full packet streams for multiple network protocolsCollect NetFlow protocol dataApply aggregation methods for statistical analysis of event dataApply filters to minimize indexer requirementsExtract content from strings and generate hashesExtract files from network trafficMonitor network trends and app performance in pre-built dashboardsDeploy independent Stream forwarder to capture data on remote linux machinesScale rapidly and unobtrusively with no need for tagging or instrumentationFor a detailed overview o...
