Tarsal kflow

Overview

This source connector receives data from a Tarsal kflow proxy.

Streams

Data Source	Stream Name
DNS Queries and Answers	`dns_event`
Filesystem Operations	`filesystem_event`
HTTP Requests and Responses	`http_event`
Socket RX/TX Events	`socket_event`
SYSLOG Messages	`syslog_event`

Prerequisites

A kflowd agent running and forwarding messages to a kflowd-proxy service. The kflowd-proxy service can be configured using the webhook URL obtained by configuring the kflow Source Connector below.

Configuration

Create the kflow Source Connector via Tarsal's web application. Once the connector is created, a webhook URL will be generated for use in configuring a kflowd-proxy webhook destination.