Output Tab

This tab allows you to enable / disable original flow data output. When this option is enabled, in addition to output from enabled Modules, all original flow records are also converted to syslog (or JSON) messages one-to-one and sent out. As this output is very voluminous, you may configure a separate destination for it to inexpensive syslog storage, such as your rsyslog, syslog-NG, Elastic, or Hadoop cluster.

This tab also contains various syslog options. These are default values: