NetFlow Analytics for Splunk App is designed to deliver next generation, real-time, network resource management power to network and security analysts. NetFlow Optimizer™ (“NFO”) is a middleware that processes massive amount of flows (NetFlow, sFlow, IPFIX, etc. on premises, as well as VPC Flow logs in the Cloud) to stream summarized and meaningful CIM (“Common Information Model”) compliant syslog (or JSON) events into Splunk Enterprise or Splunk Cloud, and, optionally, all original flow records to inexpensive syslog storage, such as your rsyslog, syslog-NG, Elastic, or Hadoop cluster. The events are available for alerting and correlation with other machine data. NetFlow Analytics for Splunk App (“App”) provides visualization and reporting capabilities. The operators benefit from detailed visibility to their entire network and being able to address many IT use cases including bandwidth monitoring, capacity planning, congestion troubleshooting, and cyber security using threat intelligence lists.