EDFN Administration Guide
External Data Feeder for NFO performs the following functions:
- Enables ingestion of cloud flow logs, such as Amazon Web Services (AWS), Microsoft Azure, and Google Public Cloud (GCP)
- Enables reading and automatic updates of information outside of the NetFlow domain used for enrichment, such as security threat lists, Geo IP information (integration with MaxMind or IP2Location), VM names (integration with VMware vCenter), User identity (integration with Active Directory and other identity systems)
Configuring External Data Feeder for NFO
External Data Feeder is installed and configured automatically with NFO. After the installation go to External Data Feeder on the left navigation bar. You should see this:
If you install several instances of External Data Feeder for NFO you can configure the first instance, and then copy configuration from the first instance to another one. Please see Copying External Data Feeder for NFO Configuration section.
Verifying External Data Feeder for NFO Status
Verifying External Data Feeder for NFO Linux Installation
Procedure
To verify if External Data Feeder for NFO is running perform the following:
- Check the status (see Working with External Data Feeder for NFO Service)
- For the list of available commands (see Working with External Data Feeder for NFO Service)
Verifying External Data Feeder for NFO Windows Installation
Procedure
Use Windows Services to check External Data Feeder for NFO status
