StealthWatch/NetFlow in Meraki Switch/AP only network ??

[Thygesen]

Hi All You tough Merki persons !! 😀

Here's a stupid one for You ..

Beeing raised with Cisco Classic switches etc. we could enable NetFlow on the switches if needed (and purchased).

I have a couple of installations where the infrastructure is Meraki switches and AP's, but not MX centric.

Can StealthWatch utilize the switches as probes via the API, as the integration guide explains, but without a MX device ?

[CptnCrnch · Accepted solution]

In a nutshell: no. At least not currently if I'm correctly informed.

Stealthwatch is not able to ingest its data via Meraki API. You'd need Netflow for that which is only available on MX.

[Thygesen]

Ah .. That way around.
So .. Get some MX'es in there, activate NetFlow, and get the API interface for StealthWatch going..

Thanx

[CptnCrnch]

Well, there's at least one chance: MS390 supports Netflo (and even ETA) too:

https://documentation.meraki.com/MS/Meraki_MS_Beta/MS_Netflow_and_ETA