{"id":14966,"date":"2025-06-12T12:41:34","date_gmt":"2025-06-12T06:41:34","guid":{"rendered":"https:\/\/dtasiagroup.com\/axoflow-zero-to-hero-stream-security-data-anywhere\/"},"modified":"2025-06-27T16:08:38","modified_gmt":"2025-06-27T10:08:38","slug":"axoflow-zero-to-hero-truyen-du-lieu-bao-mat-moi-luc-moi-noi","status":"publish","type":"post","link":"https:\/\/dtasiagroup.com\/vi\/axoflow-zero-to-hero-truyen-du-lieu-bao-mat-moi-luc-moi-noi\/","title":{"rendered":"Axoflow Zero to Hero: Truy\u1ec1n d\u1eef li\u1ec7u b\u1ea3o m\u1eadt m\u1ecdi l\u00fac m\u1ecdi n\u01a1i"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-14938 size-full\" src=\"https:\/\/dtasiagroup.com\/wp-content\/uploads\/2025\/06\/67d84ba300bf1692610aac74_980x613_top_4_tricks_to_reduce_SIEM_data_volume-1-1.webp\" alt=\"\" width=\"1960\" height=\"1226\" \/><\/p>\n<p>H\u00f4m nay, ch\u00fang t\u00f4i s\u1ebd h\u01b0\u1edbng d\u1eabn b\u1ea1n c\u00e1ch tr\u1edf th\u00e0nh \u201cng\u01b0\u1eddi h\u00f9ng\u201d b\u1eb1ng c\u00e1ch k\u1ebft n\u1ed1i c\u00e1c m\u00e1y m\u00f3c v\u00e0 ghi log d\u1eef li\u1ec7u v\u00e0o c\u00f4ng c\u1ee5 ph\u00e2n t\u00edch m\u00e0 b\u1ea1n l\u1ef1a ch\u1ecdn \u2013 t\u1ea5t c\u1ea3 ch\u1ec9 trong v\u00f2ng ch\u01b0a \u0111\u1ea7y 12 ph\u00fat v\u1edbi n\u1ec1n t\u1ea3ng Axoflow.<\/p>\n<figure class=\"w-richtext-align-fullwidth w-richtext-figure-type-video\">\n<div><iframe title=\"Axoflow Zero to Hero: Stream Log Data to Splunk in Under 12 Minutes with Mark Bonsack 1\" src=\"https:\/\/www.youtube.com\/embed\/iJ91iMz0CiU\" frameborder=\"0\" scrolling=\"no\" allowfullscreen=\"allowfullscreen\" data-mce-fragment=\"1\"><\/iframe><\/div>\n<\/figure>\n<h2><\/h2>\n<p>&nbsp;<\/p>\n<h3 data-start=\"73\" data-end=\"94\"><strong data-start=\"77\" data-end=\"94\">B\u1ea1n s\u1ebd c\u1ea7n g\u00ec<\/strong><\/h3>\n<p data-start=\"96\" data-end=\"141\">\u0110\u1ec3 l\u00e0m theo c\u00e1c b\u01b0\u1edbc trong video, b\u1ea1n s\u1ebd c\u1ea7n:<\/p>\n<ul data-start=\"143\" data-end=\"422\">\n<li data-start=\"143\" data-end=\"175\">\n<p data-start=\"145\" data-end=\"175\">M\u1ed9t m\u00e1y \u1ea3o (virtual machine)<\/p>\n<\/li>\n<li data-start=\"176\" data-end=\"307\">\n<p data-start=\"178\" data-end=\"307\">Quy\u1ec1n truy c\u1eadp d\u00f9ng th\u1eed Axoflow. B\u1ea1n c\u00f3 th\u1ec3 g\u1eedi y\u00eau c\u1ea7u d\u00f9ng th\u1eed \u2013 ch\u00fang t\u00f4i s\u1ebd thi\u1ebft l\u1eadp cho b\u1ea1n trong v\u00f2ng m\u1ed9t ng\u00e0y l\u00e0m vi\u1ec7c.<\/p>\n<\/li>\n<li data-start=\"308\" data-end=\"422\">\n<p data-start=\"310\" data-end=\"422\">Quy\u1ec1n truy c\u1eadp v\u00e0o Splunk v\u00e0 m\u1ed9t token \u0111\u1ec3 g\u1eedi d\u1eef li\u1ec7u \u0111\u1ebfn Splunk, ho\u1eb7c m\u1ed9t \u0111i\u1ec3m \u0111\u00edch kh\u00e1c \u0111\u01b0\u1ee3c Axoflow h\u1ed7 tr\u1ee3.<\/p>\n<\/li>\n<\/ul>\n<h2><\/h2>\n<h2><strong>C\u00e0i \u0111\u1eb7t AxoRouter<\/strong><\/h2>\n<div class=\"w-embed w-iframe\"><iframe loading=\"lazy\" title=\"Axoflow Zero to Hero: Stream Log Data to Splunk in Under 12 Minutes with Mark Bonsack 1\" src=\"https:\/\/www.youtube.com\/embed\/iJ91iMz0CiU?start=42\" width=\"100%\" height=\"100%\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\" data-mce-fragment=\"1\"><\/iframe><\/div>\n<p>B\u01b0\u1edbc \u0111\u1ea7u ti\u00ean \u0111\u1ec3 ki\u1ec3m th\u1eed Axoflow Console l\u00e0 c\u00e0i \u0111\u1eb7t AxoRouter. AxoRouter l\u00e0 gi\u1ea3i ph\u00e1p x\u1eed l\u00fd d\u1eef li\u1ec7u b\u1ea3o m\u1eadt, t\u1ef1 \u0111\u1ed9ng thu th\u1eadp, t\u1ed5ng h\u1ee3p, chuy\u1ec3n \u0111\u1ed5i v\u00e0 \u0111\u1ecbnh tuy\u1ebfn nhi\u1ec1u lo\u1ea1i d\u1eef li\u1ec7u b\u1ea3o m\u1eadt \u2013 v\u1edbi quy m\u00f4 l\u1edbn, \u0111\u1ea1t chu\u1ea9n carrier-grade.<\/p>\n<ol>\n<li data-start=\"363\" data-end=\"420\">\n<p data-start=\"366\" data-end=\"420\">M\u1edf <strong data-start=\"369\" data-end=\"388\">Axoflow Console<\/strong>, ch\u1ecdn trang <strong data-start=\"401\" data-end=\"417\">Provisioning<\/strong>.<\/p>\n<\/li>\n<li data-start=\"421\" data-end=\"501\">\n<p data-start=\"424\" data-end=\"501\">Nh\u1ea5p v\u00e0o <strong data-start=\"433\" data-end=\"498\">Select type and platform &gt; AxoRouter &gt; Linux &gt; Copy and close<\/strong>.<\/p>\n<\/li>\n<li data-start=\"502\" data-end=\"574\">\n<p data-start=\"505\" data-end=\"574\">M\u1edf terminal tr\u00ean m\u00e1y \u1ea3o (VM), sau \u0111\u00f3 d\u00e1n l\u1ec7nh c\u00e0i \u0111\u1eb7t v\u1eeba sao ch\u00e9p.<\/p>\n<\/li>\n<li data-start=\"575\" data-end=\"654\">\n<p data-start=\"578\" data-end=\"654\">T\u1ea3i l\u1ea1i trang <strong data-start=\"592\" data-end=\"608\">Provisioning<\/strong>. B\u1ea3n tri\u1ec3n khai AxoRouter m\u1edbi s\u1ebd xu\u1ea5t hi\u1ec7n.<\/p>\n<\/li>\n<li data-start=\"655\" data-end=\"697\">\n<p data-start=\"658\" data-end=\"697\">Nh\u1ea5p v\u00e0o bi\u1ec3u t\u01b0\u1ee3ng <strong data-start=\"678\" data-end=\"694\">d\u1ea5u ki\u1ec3m (&#x2714;)<\/strong>.<\/p>\n<\/li>\n<li data-start=\"698\" data-end=\"822\">\n<p data-start=\"701\" data-end=\"822\">\u0110\u1eb7t nh\u00e3n t\u00f9y ch\u1ec9nh (custom label) cho AxoRouter c\u1ee7a b\u1ea1n \u0111\u1ec3 d\u1ec5 nh\u1eadn bi\u1ebft \u0111\u1ed9i nh\u00f3m n\u00e0o \u0111ang s\u1eed d\u1ee5ng, r\u1ed3i nh\u1ea5n <b>Register.<\/b><\/p>\n<\/li>\n<\/ol>\n<p>Sau khi b\u1ea1n \u0111\u0103ng k\u00fd tri\u1ec3n khai AxoRouter, b\u1ea1n c\u00f3 th\u1ec3 xem h\u1ec7 \u0111i\u1ec1u h\u00e0nh m\u00e0 m\u00ecnh \u0111ang s\u1eed d\u1ee5ng, c\u00f9ng v\u1edbi m\u1ed9t s\u1ed1 th\u00f4ng tin chi ti\u1ebft kh\u00e1c v\u1ec1 m\u00e1y ch\u1ee7.<\/p>\n<h2><\/h2>\n<h2><\/h2>\n<h2><strong>G\u1eedi d\u1eef li\u1ec7u \u0111\u1ebfn AxoRouter<\/strong><\/h2>\n<p>If you have a data source handy, configure it to\u00a0send logs to AxoRouter. If you don\u2019t, open a terminal on your VM running AxoRouter, and run the following command to generate some synthetic data.<\/p>\n<p>Note that AxoRouter collects detailed, real-time metrics about the data-flows \u2013 giving you observability over the health of the security data pipeline and its components. Your security data remains in your self-managed cloud or in your on-prem instance where your sources, destinations, and AxoRouters are running, only metrics are forwarded to Axoflow Console.<\/p>\n<p data-start=\"70\" data-end=\"262\">N\u1ebfu b\u1ea1n \u0111\u00e3 c\u00f3 ngu\u1ed3n d\u1eef li\u1ec7u s\u1eb5n, h\u00e3y c\u1ea5u h\u00ecnh \u0111\u1ec3 g\u1eedi log \u0111\u1ebfn AxoRouter. N\u1ebfu ch\u01b0a c\u00f3, h\u00e3y m\u1edf terminal tr\u00ean m\u00e1y \u1ea3o \u0111ang ch\u1ea1y AxoRouter v\u00e0 ch\u1ea1y l\u1ec7nh sau \u0111\u1ec3 t\u1ea1o d\u1eef li\u1ec7u gi\u1ea3 l\u1eadp (synthetic data).<\/p>\n<p data-start=\"264\" data-end=\"657\">L\u01b0u \u00fd r\u1eb1ng AxoRouter thu th\u1eadp c\u00e1c ch\u1ec9 s\u1ed1 chi ti\u1ebft theo th\u1eddi gian th\u1ef1c v\u1ec1 lu\u1ed3ng d\u1eef li\u1ec7u \u2013 gi\u00fap b\u1ea1n quan s\u00e1t \u0111\u01b0\u1ee3c t\u00ecnh tr\u1ea1ng c\u1ee7a pipeline d\u1eef li\u1ec7u b\u1ea3o m\u1eadt v\u00e0 c\u00e1c th\u00e0nh ph\u1ea7n b\u00ean trong. D\u1eef li\u1ec7u b\u1ea3o m\u1eadt c\u1ee7a b\u1ea1n s\u1ebd lu\u00f4n n\u1eb1m trong h\u1ec7 th\u1ed1ng \u0111\u00e1m m\u00e2y do b\u1ea1n qu\u1ea3n l\u00fd ho\u1eb7c h\u1ec7 th\u1ed1ng t\u1ea1i ch\u1ed7 (on-prem) \u2013 n\u01a1i \u0111\u1eb7t ngu\u1ed3n g\u1eedi, \u0111\u00edch nh\u1eadn v\u00e0 AxoRouter. Ch\u1ec9 c\u00e1c ch\u1ec9 s\u1ed1 (metrics) m\u1edbi \u0111\u01b0\u1ee3c g\u1eedi v\u1ec1 Axoflow Console.<\/p>\n<pre class=\"w-code-block\" contenteditable=\"false\"><code class=\"language-shell\">for i in `seq 1 120`; do echo \"&lt;165&gt; fortigate date=$(date -u +%Y-%m-%d) time=$(date -u +\"%H:%M:%S%Z\") devname=us-east-1-dc1-a-dmz-fw devid=FGT60D4614044725 logid=0100040704 type=event subtype=system level=notice vd=root logdesc=\\\"System performance statistics\\\" action=\\\"perf-stats\\\" cpu=2 mem=35 totalsession=61 disk=2 bandwidth=158\/138 setuprate=2 disklograte=0 fazlograte=0 msg=\\\"Performance statistics: average CPU: 2, memory: 35, concurrent sessions: 61, setup-rate: 2\\\"\"; sleep 0.5; echo \"&lt;165&gt;  id=us-west-1-dc1-a-dmz-fw sn=C0EFE3336C80 time=\\\"$(date -u +\"%Y-%m-%d %H:%M:%S %Z\")\\\" fw=192.168.1.239 pri=6 c=1024 gcat=6 m=537 msg=\\\"Connection Closed\\\" srcMac=00:50:56:f5:50:27 src=10.237.228.74:54406:X20 srcZone=Trusted natSrc=192.168.1.239:38377 dstMac=00:1a:f0:8b:e0:18 dst=44.190.129.212:123:X2 dstZone=Untrusted natDst=44.190.129.212:123 proto=udp\/ntp sent=152 rcvd=152 spkt=2 rpkt=2 cdur=30250 rule=\\\"22 (LAN-&gt;WAN)\\\" n=490872197 fw_action=\\\"NA\\\" dpi=0\"; sleep 0.5; echo \"&lt;165&gt;$(date -u +\"%b%e %H:%M:%S\") us-east-1-dc1-b-edge-fw 1,$(date -u +\"%Y\/%m\/%d %H:%M:%S\"),007200001056,TRAFFIC,end,1,$(date -u +\"%Y\/%m\/%d %H:%M:%S\"),192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1\/1,ethernet1\/2,To-Panorama,$(date -u +\"%Y\/%m\/%d %H:%M:%S\"),8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,$(date -u +\"%Y\/%m\/%d %H:%M:%S\"),2,any,0,2800265,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0\"; sleep 0.5; done | nc -v 127.0.0.1 514<\/code><button class=\"copy-button\">Copy<\/button><\/pre>\n<p>Ch\u1edd v\u00e0i gi\u00e2y \u0111\u1ec3 c\u00e1c ch\u1ec9 s\u1ed1 c\u00f3 th\u1eddi gian \u0111\u01b0\u1ee3c thu th\u1eadp.<\/p>\n<h2><\/h2>\n<h2><\/h2>\n<h2><strong>Ki\u1ec3m tra d\u1eef li\u1ec7u ph\u00e2n t\u00edch<\/strong><\/h2>\n<div class=\"w-embed w-iframe\"><iframe loading=\"lazy\" title=\"Axoflow Zero to Hero: Stream Log Data to Splunk in Under 12 Minutes with Mark Bonsack 1\" src=\"https:\/\/www.youtube.com\/embed\/iJ91iMz0CiU?start=175\" width=\"100%\" height=\"100%\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\" data-mce-fragment=\"1\"><\/iframe><\/div>\n<p data-start=\"110\" data-end=\"201\">Ch\u1ecdn <strong>Analytics <\/strong>(N\u1ebfu b\u1ea1n \u0111\u00e3 \u0111i\u1ec1u h\u01b0\u1edbng sang trang kh\u00e1c, h\u00e3y ch\u1ecdn l\u1ea1i: <strong data-start=\"164\" data-end=\"193\">Topology &gt; your-AxoRouter<\/strong> tr\u01b0\u1edbc.)<\/p>\n<p data-start=\"203\" data-end=\"436\">N\u1ebfu AxoRouter c\u1ee7a b\u1ea1n \u0111ang nh\u1eadn d\u1eef li\u1ec7u, m\u1ed9t s\u1ed1 ch\u1ec9 s\u1ed1 (metrics) s\u1ebd b\u1eaft \u0111\u1ea7u hi\u1ec3n th\u1ecb. AxoRouter s\u1ebd t\u1ef1 \u0111\u1ed9ng ph\u00e2n lo\u1ea1i v\u00e0 ph\u00e2n t\u00edch d\u1eef li\u1ec7u \u0111\u1ebfn, \u0111\u1ed3ng th\u1eddi g\u00e1n nh\u00e3n nh\u00e0 cung c\u1ea5p (vendor) v\u00e0 s\u1ea3n ph\u1ea9m cho c\u00e1c d\u1eef li\u1ec7u m\u00e0 n\u00f3 nh\u1eadn di\u1ec7n \u0111\u01b0\u1ee3c.<\/p>\n<p data-start=\"438\" data-end=\"657\">M\u1ed9t \u0111i\u1ec3m th\u00fa v\u1ecb l\u00e0 c\u00f3 r\u1ea5t nhi\u1ec1u ch\u1ec9 s\u1ed1 \u0111\u01b0\u1ee3c thu th\u1eadp ngay b\u00ean trong AxoRouter, t\u1ea1i ch\u00ednh th\u00e0nh ph\u1ea7n thu th\u1eadp d\u1eef li\u1ec7u. Quan tr\u1ecdng nh\u1ea5t, b\u1ea1n s\u1ebd th\u1ea5y AxoRouter ph\u00e1t hi\u1ec7n \u0111\u01b0\u1ee3c s\u1ea3n ph\u1ea9m n\u00e0o \u0111ang g\u1eedi t\u1eadp d\u1eef li\u1ec7u c\u1ee5 th\u1ec3 n\u00e0y.<\/p>\n<p data-start=\"659\" data-end=\"947\">N\u1ebfu b\u1ea1n chuy\u1ec3n l\u1ea1i tab <strong data-start=\"682\" data-end=\"694\">Overview<\/strong>, b\u1ea1n s\u1ebd th\u1ea5y Axoflow hi\u1ec3n th\u1ecb c\u1ea3nh b\u00e1o cho AxoRouter n\u00e0y, v\u00ec ch\u01b0a c\u00f3 lu\u1ed3ng d\u1eef li\u1ec7u (flow) n\u00e0o \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh: hi\u1ec7n t\u1ea1i ch\u00fang ta ch\u1ec9 \u0111ang thu th\u1eadp d\u1eef li\u1ec7u, nh\u01b0ng ch\u01b0a g\u1eedi ch\u00fang \u0111i \u0111\u00e2u c\u1ea3. H\u00e3y kh\u1eafc ph\u1ee5c \u0111i\u1ec1u \u0111\u00f3 b\u1eb1ng c\u00e1ch t\u1ea1o m\u1ed9t \u0111i\u1ec3m \u0111\u00edch (destination)<\/p>\n<h2><\/h2>\n<h2><strong>T\u1ea1o \u0111i\u1ec3m \u0111\u00edch (Destination)<\/strong><\/h2>\n<div class=\"w-embed w-iframe\"><iframe loading=\"lazy\" title=\"Axoflow Zero to Hero: Stream Log Data to Splunk in Under 12 Minutes with Mark Bonsack 1\" src=\"https:\/\/www.youtube.com\/embed\/iJ91iMz0CiU?start=279\" width=\"100%\" height=\"100%\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\" data-mce-fragment=\"1\"><\/iframe><\/div>\n<p data-start=\"91\" data-end=\"203\">T\u1ea1o m\u1ed9t \u0111i\u1ec3m \u0111\u00edch Splunk. N\u1ebfu b\u1ea1n kh\u00f4ng mu\u1ed1n s\u1eed d\u1ee5ng Splunk, c\u00f3 th\u1ec3 ch\u1ecdn m\u1ed9t \u0111i\u1ec3m \u0111\u00edch kh\u00e1c \u0111\u01b0\u1ee3c Axoflow h\u1ed7 tr\u1ee3.<\/p>\n<ol data-start=\"205\" data-end=\"453\">\n<li data-start=\"205\" data-end=\"255\">\n<p data-start=\"208\" data-end=\"255\">Ch\u1ecdn <strong data-start=\"213\" data-end=\"252\">Topology &gt; + &gt; Destination &gt; Splunk<\/strong>.<\/p>\n<\/li>\n<li data-start=\"256\" data-end=\"426\">\n<p data-start=\"259\" data-end=\"426\">Nh\u1eadp c\u00e1c th\u00f4ng tin c\u1ea7n thi\u1ebft. B\u1ea1n s\u1ebd c\u1ea7n URL c\u1ee7a h\u1ec7 th\u1ed1ng Splunk v\u00e0 m\u1ed9t access token cho ph\u00e9p g\u1eedi d\u1eef li\u1ec7u (b\u1ea1n c\u00f3 th\u1ec3 l\u1ea5y c\u00e1c th\u00f4ng tin n\u00e0y t\u1eeb qu\u1ea3n tr\u1ecb vi\u00ean Splunk).<\/p>\n<\/li>\n<li data-start=\"427\" data-end=\"453\">\n<p data-start=\"430\" data-end=\"453\">Nh\u1ea5n <strong data-start=\"435\" data-end=\"445\">Create<\/strong> \u0111\u1ec3 t\u1ea1o.<\/p>\n<\/li>\n<\/ol>\n<h2><\/h2>\n<h2><strong>T\u1ea1o lu\u1ed3ng (Flow)<\/strong><\/h2>\n<div class=\"w-embed w-iframe\"><iframe loading=\"lazy\" title=\"Axoflow Zero to Hero: Stream Log Data to Splunk in Under 12 Minutes with Mark Bonsack 1\" src=\"https:\/\/www.youtube.com\/embed\/iJ91iMz0CiU?start=375\" width=\"100%\" height=\"100%\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\" data-mce-fragment=\"1\"><\/iframe><\/div>\n<p data-start=\"98\" data-end=\"186\">T\u1ea1o m\u1ed9t lu\u1ed3ng \u0111\u1ec3 \u0111\u1ecbnh tuy\u1ebfn d\u1eef li\u1ec7u m\u00e0 AxoRouter nh\u1eadn \u0111\u01b0\u1ee3c t\u1edbi \u0111i\u1ec3m \u0111\u00edch Splunk c\u1ee7a b\u1ea1n.<\/p>\n<ol data-start=\"188\" data-end=\"399\">\n<li data-start=\"188\" data-end=\"226\">\n<p data-start=\"191\" data-end=\"226\">Ch\u1ecdn <strong data-start=\"196\" data-end=\"223\">Flows &gt; Create New Flow<\/strong>.<\/p>\n<\/li>\n<li data-start=\"227\" data-end=\"251\">\n<p data-start=\"230\" data-end=\"251\">Nh\u1eadp t\u00ean cho lu\u1ed3ng.<\/p>\n<\/li>\n<li data-start=\"252\" data-end=\"318\">\n<p data-start=\"255\" data-end=\"318\">Trong tr\u01b0\u1eddng <strong data-start=\"268\" data-end=\"287\">Router Selector<\/strong>, ch\u1ecdn t\u00ean AxoRouter c\u1ee7a b\u1ea1n.<\/p>\n<\/li>\n<li data-start=\"319\" data-end=\"399\">\n<p data-start=\"322\" data-end=\"399\">Thi\u1ebft l\u1eadp tr\u01b0\u1eddng <strong data-start=\"339\" data-end=\"354\">Destination<\/strong> l\u00e0 \u0111i\u1ec3m \u0111\u00edch Splunk, sau \u0111\u00f3 nh\u1ea5n <strong data-start=\"388\" data-end=\"398\">Create<\/strong>.<\/p>\n<\/li>\n<\/ol>\n<h2><\/h2>\n<h2><strong>Th\u00eam ngu\u1ed3n d\u1eef li\u1ec7u (Source)<\/strong><\/h2>\n<div class=\"w-embed w-iframe\"><iframe loading=\"lazy\" title=\"Axoflow Zero to Hero: Stream Log Data to Splunk in Under 12 Minutes with Mark Bonsack 1\" src=\"https:\/\/www.youtube.com\/embed\/iJ91iMz0CiU?start=476\" width=\"100%\" height=\"100%\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\" data-mce-fragment=\"1\"><\/iframe><\/div>\n<p data-start=\"110\" data-end=\"293\">Khi b\u1ea1n quay l\u1ea1i trang <strong data-start=\"133\" data-end=\"145\">Topology<\/strong>, b\u1ea1n s\u1ebd th\u1ea5y c\u00f3 k\u1ebft n\u1ed1i gi\u1eefa AxoRouter v\u00e0 \u0111i\u1ec3m \u0111\u00edch c\u1ee7a b\u1ea1n.<br data-start=\"206\" data-end=\"209\" \/>\u0110\u1ec3 hi\u1ec3n th\u1ecb c\u00e1c ngu\u1ed3n d\u1eef li\u1ec7u, h\u00e3y \u0111\u0103ng k\u00fd c\u00e1c ngu\u1ed3n \u0111ang g\u1eedi d\u1eef li\u1ec7u \u0111\u1ebfn AxoRouter.<\/p>\n<ol data-start=\"295\" data-end=\"444\">\n<li data-start=\"295\" data-end=\"444\">\n<p data-start=\"298\" data-end=\"444\">Ch\u1ecdn <strong data-start=\"303\" data-end=\"339\">Topology &gt; + &gt; Source &gt; Detected<\/strong>. Danh s\u00e1ch c\u00e1c ngu\u1ed3n hi\u1ec7n \u0111ang g\u1eedi d\u1eef li\u1ec7u v\u00e0 \u0111\u00e3 \u0111\u01b0\u1ee3c AxoRouter t\u1ef1 \u0111\u1ed9ng nh\u1eadn di\u1ec7n s\u1ebd \u0111\u01b0\u1ee3c hi\u1ec3n th\u1ecb.<\/p>\n<\/li>\n<\/ol>\n<p data-start=\"446\" data-end=\"776\"><strong data-start=\"446\" data-end=\"456\">L\u01b0u \u00fd:<\/strong><br data-start=\"456\" data-end=\"459\" \/>N\u1ebfu b\u1ea1n kh\u00f4ng c\u00f3 c\u00e1c m\u00e1y ch\u1ee7 ngu\u1ed3n ri\u00eang bi\u1ec7t v\u00e0 \u0111ang g\u1eedi d\u1eef li\u1ec7u b\u1eb1ng script \u1edf tr\u00ean, th\u00ec ch\u1ec9 m\u1ed9t ngu\u1ed3n s\u1ebd \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n \u2013 v\u00ec t\u1ea5t c\u1ea3 d\u1eef li\u1ec7u \u0111\u1ebfn t\u1eeb c\u00f9ng m\u1ed9t \u0111\u1ecba ch\u1ec9 IP. Tuy nhi\u00ean, AxoRouter s\u1ebd hi\u1ec3n th\u1ecb th\u00e0nh <strong data-start=\"670\" data-end=\"721\">ba m\u00e1y ch\u1ee7 kh\u00e1c nhau v\u00e0 ba lo\u1ea1i ngu\u1ed3n kh\u00e1c nhau<\/strong>, v\u00ec n\u00f3 ph\u00e2n lo\u1ea1i c\u00e1c th\u00f4ng \u0111i\u1ec7p \u0111\u1ebfn d\u1ef1a tr\u00ean n\u1ed9i dung.<\/p>\n<ol start=\"2\" data-start=\"778\" data-end=\"849\">\n<li data-start=\"778\" data-end=\"849\">\n<p data-start=\"781\" data-end=\"849\">Ch\u1ecdn m\u1ed9t ngu\u1ed3n, sau \u0111\u00f3 (n\u1ebfu mu\u1ed1n) th\u00eam nh\u00e3n t\u00f9y ch\u1ec9nh \u0111\u1ec3 d\u1ec5 qu\u1ea3n l\u00fd.<\/p>\n<\/li>\n<\/ol>\n<p data-start=\"851\" data-end=\"1074\">Khi m\u1ecdi th\u1ee9 \u0111\u00e3 \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp, ngu\u1ed3n v\u00e0 c\u00e1c ch\u1ec9 s\u1ed1 li\u00ean quan \u0111\u1ebfn d\u1eef li\u1ec7u m\u00e0 n\u00f3 g\u1eedi s\u1ebd hi\u1ec3n th\u1ecb tr\u00ean trang <strong data-start=\"957\" data-end=\"969\">Topology<\/strong>. V\u00ec v\u1eady, ngo\u00e0i c\u00e1c ph\u00e2n t\u00edch chuy\u00ean s\u00e2u, b\u1ea1n c\u00f2n c\u00f3 c\u00e1i nh\u00ecn t\u1ed5ng quan v\u1ec1 ho\u1ea1t \u0111\u1ed9ng \u1edf c\u1ea5p \u0111\u1ed9 topology.<\/p>\n<h2><\/h2>\n<h2><strong>Ki\u1ec3m tra ch\u1ec9 s\u1ed1 \u0111\u1ea7u ra (Output Metrics)<\/strong><\/h2>\n<div class=\"w-embed w-iframe\"><iframe loading=\"lazy\" title=\"Axoflow Zero to Hero: Stream Log Data to Splunk in Under 12 Minutes with Mark Bonsack 1\" src=\"https:\/\/www.youtube.com\/embed\/iJ91iMz0CiU?start=555\" width=\"100%\" height=\"100%\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\" data-mce-fragment=\"1\"><\/iframe><\/div>\n<p>C\u00f9ng ki\u1ec3m tra c\u00e1c s\u1ef1 ki\u1ec7n \u0111\u1ea7u ra:<\/p>\n<p data-start=\"128\" data-end=\"233\">Nh\u1ea5p v\u00e0o AxoRouter c\u1ee7a b\u1ea1n, ch\u1ecdn <strong data-start=\"161\" data-end=\"174\">Analytics<\/strong>, sau \u0111\u00f3 chuy\u1ec3n t\u1eeb <strong data-start=\"193\" data-end=\"209\">Input events<\/strong> sang <strong data-start=\"215\" data-end=\"232\">Output events<\/strong>.<\/p>\n<p data-start=\"235\" data-end=\"650\">Gi\u1edd \u0111\u00e2y, khi AxoRouter \u0111\u00e3 nh\u1eadn d\u1eef li\u1ec7u t\u1eeb m\u1ed9t ngu\u1ed3n v\u00e0 c\u00f3 \u0111i\u1ec3m \u0111\u00edch \u0111\u1ec3 chuy\u1ec3n ti\u1ebfp, b\u1ea1n s\u1ebd th\u1ea5y c\u00e1c ch\u1ec9 s\u1ed1 \u0111\u1ea7u ra c\u0169ng b\u1eaft \u0111\u1ea7u \u0111\u01b0\u1ee3c hi\u1ec3n th\u1ecb. Ngo\u00e0i c\u00e1c ch\u1ec9 s\u1ed1 \u0111\u00e3 thu th\u1eadp tr\u01b0\u1edbc \u0111\u00f3 nh\u01b0 <strong data-start=\"421\" data-end=\"453\">c\u1ed5ng \u0111\u00edch (destination port)<\/strong> v\u00e0 <strong data-start=\"457\" data-end=\"489\">giao th\u1ee9c truy\u1ec1n (transport)<\/strong>, gi\u1edd b\u1ea1n s\u1ebd th\u1ea5y th\u00eam m\u1ed9t chi\u1ec1u d\u1eef li\u1ec7u m\u1edbi l\u00e0 <strong data-start=\"537\" data-end=\"559\">Splunk source type<\/strong>. V\u00ec b\u1ea1n \u0111\u00e3 ch\u1ecdn Splunk l\u00e0m \u0111i\u1ec3m \u0111\u00edch, Axoflow s\u1ebd t\u1ef1 \u0111\u1ed9ng g\u00e1n \u0111\u00fang gi\u00e1 tr\u1ecb cho source type.<\/p>\n<p data-start=\"652\" data-end=\"832\">V\u00ed d\u1ee5, b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng c\u00e1c nh\u00e3n (labels) \u0111\u1ec3 ki\u1ec3m tra c\u00e1ch l\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c ph\u00e2n b\u1ed5 theo <strong data-start=\"741\" data-end=\"762\">splunk_sourcetype<\/strong>, ho\u1eb7c d\u1eef li\u1ec7u \u0111\u01b0\u1ee3c g\u1eedi \u0111\u1ebfn index n\u00e0o th\u00f4ng qua nh\u00e3n <strong data-start=\"815\" data-end=\"831\">splunk_index<\/strong>.<\/p>\n<p data-start=\"834\" data-end=\"904\">B\u00e2y gi\u1edd, h\u00e3y truy c\u1eadp v\u00e0o Splunk v\u00e0 xem d\u1eef li\u1ec7u tr\u00f4ng nh\u01b0 th\u1ebf n\u00e0o nh\u00e9<\/p>\n<h2><\/h2>\n<h2><strong>Ki\u1ec3m tra d\u1eef li\u1ec7u trong Splunk<\/strong><\/h2>\n<div class=\"w-embed w-iframe\"><iframe loading=\"lazy\" title=\"Axoflow Zero to Hero: Stream Log Data to Splunk in Under 12 Minutes with Mark Bonsack 1\" src=\"https:\/\/www.youtube.com\/embed\/iJ91iMz0CiU?start=608\" width=\"100%\" height=\"100%\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\" data-mce-fragment=\"1\"><\/iframe><\/div>\n<p data-start=\"93\" data-end=\"448\">V\u00ec AxoRouter \u0111\u00e3 x\u1eed l\u00fd vi\u1ec7c ph\u00e2n t\u00edch c\u00fa ph\u00e1p (parsing), ph\u00e2n lo\u1ea1i v\u00e0 g\u1eedi d\u1eef li\u1ec7u \u0111\u1ebfn Splunk, b\u1ea1n kh\u00f4ng c\u1ea7n c\u1ea5u h\u00ecnh th\u00eam g\u00ec trong Splunk: kh\u00f4ng c\u1ea7n c\u00e0i \u0111\u1eb7t c\u00f4ng ngh\u1ec7 add-on hay vi\u1ebft parser th\u1ee7 c\u00f4ng. B\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng tr\u1ef1c ti\u1ebfp d\u1eef li\u1ec7u c\u00f3 c\u1ea5u tr\u00fac v\u00e0 metadata m\u00e0 AxoRouter cung c\u1ea5p \u0111\u1ec3 ph\u00e2n t\u00edch, t\u1ea1o bi\u1ec3u \u0111\u1ed3, b\u00e1o c\u00e1o v\u00e0 r\u00fat ra c\u00e1c th\u00f4ng tin gi\u00e1 tr\u1ecb.<\/p>\n<h2><\/h2>\n<h2><\/h2>\n<h2>T\u00f3m t\u1eaft<\/h2>\n<p>N\u1ebfu b\u1ea1n \u0111\u00e3 l\u00e0m theo h\u01b0\u1edbng d\u1eabn trong blog n\u00e0y (ho\u1eb7c video li\u00ean quan), th\u00ec gi\u1edd \u0111\u00e2y b\u1ea1n \u0111\u00e3 c\u00f3 d\u1eef li\u1ec7u h\u1eefu \u00edch trong c\u00f4ng c\u1ee5 ph\u00e2n t\u00edch c\u1ee7a m\u00ecnh. Ch\u00fang ta ch\u1ec9 m\u1ea5t ch\u01b0a \u0111\u1ebfn 12 ph\u00fat \u0111\u1ec3 ho\u00e0n th\u00e0nh t\u1ea5t c\u1ea3 c\u00e1c b\u01b0\u1edbc \u2013 v\u00e0 ho\u00e0n to\u00e0n kh\u00f4ng c\u1ea7n vi\u1ebft m\u1ed9t d\u00f2ng regular expression n\u00e0o.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>V\u1ec1 DT Asia<\/strong><\/p>\n<p>DT Asia \u0111\u01b0\u1ee3c th\u00e0nh l\u1eadp n\u0103m 2007 v\u1edbi s\u1ee9 m\u1ec7nh \u0111\u01b0a c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt CNTT ti\u00ean phong kh\u00e1c nhau t\u1eeb Hoa K\u1ef3, Ch\u00e2u \u00c2u v\u00e0 Israel gia nh\u1eadp th\u1ecb tr\u01b0\u1eddng.<\/p>\n<p>Hi\u1ec7n t\u1ea1i, DT Asia \u0111\u00e3 l\u00e0 m\u1ed9t nh\u00e0 ph\u00e2n ph\u1ed1i gi\u00e1 tr\u1ecb gia t\u0103ng trong khu v\u1ef1c \u0111\u1ed1i v\u1edbi c\u00e1c gi\u1ea3i ph\u00e1p an ninh m\u1ea1ng, cung c\u1ea5p c\u00f4ng ngh\u1ec7 ti\u00ean ti\u1ebfn cho c\u00e1c t\u1ed5 ch\u1ee9c ch\u00ednh ph\u1ee7 tr\u1ecdng y\u1ebfu c\u0169ng nh\u01b0 c\u00e1c kh\u00e1ch h\u00e0ng t\u01b0 nh\u00e2n l\u1edbn bao g\u1ed3m c\u00e1c ng\u00e2n h\u00e0ng to\u00e0n c\u1ea7u v\u00e0 c\u00e1c c\u00f4ng ty trong danh s\u00e1ch Fortune 500. V\u1edbi c\u00e1c v\u0103n ph\u00f2ng v\u00e0 \u0111\u1ed1i t\u00e1c r\u1ed9ng kh\u1eafp trong khu v\u1ef1c Ch\u00e2u \u00c1 Th\u00e1i B\u00ecnh D\u01b0\u01a1ng, ch\u00fang t\u00f4i hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 th\u1ecb tr\u01b0\u1eddng v\u00e0 t\u1eeb \u0111\u00f3 mang \u0111\u1ebfn nh\u1eefng gi\u1ea3i ph\u00e1p b\u1ea3n \u0111\u1ecba h\u00f3a ph\u00f9 h\u1ee3p v\u1edbi t\u1eebng qu\u1ed1c gia, t\u1eebng t\u1ed5 ch\u1ee9c.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>C\u00e1ch ch\u00fang t\u00f4i gi\u00fap b\u1ea1n<\/strong><\/p>\n<p>N\u1ebfu b\u1ea1n mu\u1ed1n bi\u1ebft th\u00eam Axoflow Zero to Hero: Truy\u1ec1n d\u1eef li\u1ec7u b\u1ea3o m\u1eadt m\u1ecdi l\u00fac m\u1ecdi n\u01a1i, b\u1ea1n \u0111ang \u1edf \u0111\u00fang n\u01a1i, ch\u00fang t\u00f4i s\u1eb5n s\u00e0ng gi\u00fap \u0111\u1ee1! DT Asia l\u00e0 nh\u00e0 ph\u00e2n ph\u1ed1i c\u1ee7a Axoflow, \u0111\u1eb7c bi\u1ec7t t\u1ea1i Vi\u1ec7t Nam v\u00e0 ch\u00e2u \u00c1, c\u00e1c k\u1ef9 thu\u1eadt vi\u00ean c\u1ee7a ch\u00fang t\u00f4i c\u00f3 kinh nghi\u1ec7m s\u00e2u r\u1ed9ng v\u1ec1 s\u1ea3n ph\u1ea9m v\u00e0 c\u00e1c c\u00f4ng ngh\u1ec7 li\u00ean quan m\u00e0 b\u1ea1n lu\u00f4n c\u00f3 th\u1ec3 tin t\u01b0\u1edfng. Ch\u00fang t\u00f4i cung c\u1ea5p c\u00e1c gi\u1ea3i ph\u00e1p tr\u1ecdn g\u00f3i cho s\u1ea3n ph\u1ea9m n\u00e0y, bao g\u1ed3m t\u01b0 v\u1ea5n, tri\u1ec3n khai v\u00e0 d\u1ecbch v\u1ee5 b\u1ea3o tr\u00ec.<\/p>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin chi ti\u1ebft v\u00e0 \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3, vui l\u00f2ng truy c\u1eadp: <a href=\"https:\/\/dtasiagroup.com\/axoflow\/\">https:\/\/dtasiagroup.com\/axoflow\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>H\u00f4m nay, ch\u00fang t\u00f4i s\u1ebd h\u01b0\u1edbng d\u1eabn b\u1ea1n c\u00e1ch tr\u1edf th\u00e0nh \u201cng\u01b0\u1eddi h\u00f9ng\u201d b\u1eb1ng c\u00e1ch k\u1ebft n\u1ed1i c\u00e1c m\u00e1y m\u00f3c v\u00e0 ghi log d\u1eef li\u1ec7u v\u00e0o c\u00f4ng c\u1ee5 ph\u00e2n t\u00edch m\u00e0 b\u1ea1n l\u1ef1a ch\u1ecdn \u2013 t\u1ea5t c\u1ea3 ch\u1ec9 trong v\u00f2ng ch\u01b0a \u0111\u1ea7y 12 ph\u00fat v\u1edbi n\u1ec1n t\u1ea3ng Axoflow.<\/p>\n","protected":false},"author":11,"featured_media":14939,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[79,66,63,62],"tags":[],"class_list":["post-14966","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bai-viet","category-news-vi","category-announcements-vi","category-uncategorized-vi"],"_links":{"self":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/14966","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/comments?post=14966"}],"version-history":[{"count":2,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/14966\/revisions"}],"predecessor-version":[{"id":14968,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/14966\/revisions\/14968"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media\/14939"}],"wp:attachment":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media?parent=14966"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/categories?post=14966"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/tags?post=14966"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}