Getting Live Traffic for Data Analysis

[Aldarmakizak]

Hello,

I am trying to find a way to redirect live network traffic from the Meraki dashboard to one of the data analytics platforms (e.g., MS Power Bi, Kibana) to be able to perform live traffic analysis and identify the features of the organization network exchange for better understanding and security configurations.

Is there a way to do that?

[alemabrahao]

Probably you can collect It via API.

https://developer.cisco.com/meraki/api-latest/

[sungod]

User traffic does not go via Dashboard, there's nothing to redirect, only management traffic goes to Dashboard and it is encrypted. See https://meraki.cisco.com/lib/pdf/meraki_datasheet_cloud_management.pdf

For doing your own traffic analysis, you could use netflow and a cloud-based collector service https://documentation.meraki.com/MX/Monitoring_and_Reporting/NetFlow_Overview 

You can configure netflow via the API, see https://developer.cisco.com/meraki/api-v1/#!update-network-netflow

But if you have detailed traffic analysis enabled on your networks, it may be all you really need.

[JasonM]

@sungod's answer is the best one IMO for what you are describing due to the real-time detailed analytics that it provides, pending that you have a Netflow collector to analyze the flows. Alternatively, since you mention the likes of Kibana (and/or if using the ELK stack) you can export syslog to obtain flow logs. However, it will not be as detailed as Netflow.

https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Syslog_Event_Types_...