Splunk Observability Cloud (O11y)

NetFlow Optimizer (NFO) integrates seamlessly with Splunk Observability Cloud (O11y), providing visibility into both Metrics and Log Observer. This allows you to monitor network performance alongside your application and infrastructure data in a unified observability platform.

Ingestion Methods

Depending on your monitoring goals, you can send data to O11y through two primary paths:

• To Metrics: Send high-resolution network data directly from NFO using the OpenTelemetry output type. This is ideal for real-time dashboards and alerting on bandwidth or latency.
• To Log Observer: Send NFO logs to Splunk Enterprise or Splunk Cloud first, then use Log Observer Connect to view them within the O11y interface.

Setting up Log Observer Connect

For detailed instructions on bridging your Splunk logs into Observability Cloud, refer to the official Splunk documentation:

• Log Observer Connect for Splunk Cloud Platform
• Log Observer Connect for Splunk Enterprise

---

Configuring NFO Output: OpenTelemetry

To begin sending metrics to the Splunk Observability Cloud, follow these steps to configure the NFO output.

Configuration Steps

1. Log in to the NetFlow Optimizer web interface.
2. Select Output on the left navigation menu.
3. Click on the plus sign (+) to create a new output destination.
4. In the popup window, select OpenTelemetry as the output type.
5. Enter the required connection details, including your O11y endpoint and Access Token.

• For a full field reference, visit the OpenTelemetry Output Guide.

6. Click Save and verify that the status changes to "Started."