Jun 24 2020 07:03 AM
Juniper SRX is listed as supported, but is that only for logs based on RT_FLOW_SESSION_CLOSE? We have a client that wants to use both snapshots and continuous reports, but their Juniper SRX logs will not parse - they log based on RT_FLOW_SESSION_CREATE, but I'm unsure whether that is the issue.
I can provide an anonymised log if required.