David
yes you can. When you want to do SPAN + collection you need to start two nprobe
instances both exporting to ELK.
So
nprobe -n none -i ethX … --elastic …
nprobe -n none -i none -3 … --elastic …
Regards Luca
> On 12 Jul 2018, at 05:51, David Kraut wrote:
>
> Is it possible to run
Is it possible to run nprobe and ntopng on the same box? If so, what is the
correct config for Ubuntu 18 assuming I want to ingest both both SPAN and
Netflow and ultimately send stale data to ELK (or similar) to maintain ~30 day
history. I'm able to get ntopng working and connect via port