LogRhythm supports sFlow v5.
A LogRhythm System Monitor Pro Agent can be used to collect sFlow traffic. For more information, see System Monitor Functionality by License: Lite vs. Pro/Collector.
General Network Requirements for sFlow Collection
The UDP port 6343 must be open from the remote system to the monitoring system.