Output Options

This section allows you to enable or disable Original Flow Data output, providing a one-to-one translation of incoming flows. When enabled, NFO converts all original flow records into Syslog or JSON messages in addition to the data generated by enabled Modules.

Because this output is voluminous, it is recommended to configure a separate destination for it, such as inexpensive storage, e.g. AWS S3 buckets.

This page also contains various syslog and JSON options.