Output Options
This page allows you to enable / disable original flow data output. When this option is enabled, in addition to output from enabled Modules, all original flow records are also converted to syslog (or JSON) messages one-to-one and sent out. As this output is very voluminous, you may configure a separate destination for it to inexpensive syslog storage, such as your rsyslog, syslog-NG, Elastic, or Hadoop cluster.
This page also contains various syslog and JSON options.