sFlow Collection
LogRhythm supports sFlow v5.
A LogRhythm System Monitor Pro Agent can be used to collect sFlow traffic. For more information, see (7.12.0) System Monitor Functionality by License: Lite vs. Pro/Collector.
General Network Requirements for sFlow Collection
The UDP port 6343 must be open from the remote system to the monitoring system.