Kentik How-to: Exploring NetFlow - A Simple Explainer

NetFlow is one of the most fundamental technologies in network observability — but testing it out has historically required specific gear, expertise, and hours digging through docs. In this hands-on tutorial, Kentik's Leon Adato walks through the easiest way to set up and explore NetFlow monitoring using Kentik's Kappa agent, going from zero (no account, no devices) to a live NetFlow visualization in about five minutes. Along the way, Leon covers what NetFlow actually is (and its variants: sFlow, JFlow, VPC flow logs, even eBPF and Kubernetes integrations), why it's foundational for network observability, and how to use Kentik's Data Explorer with a Sankey visualization to make sense of what the data is telling you. This is the easiest on-ramp to NetFlow for engineers who've heard about it but haven't had a chance to play with it yet. What you'll learn: - What NetFlow is and how it relates to sFlow, JFlow, VPC flow logs, and eBPF - Why NetFlow is foundational for network observability and monitoring - How to create a free Kentik account and get your API token - How to install the Kentik Kappa agent on Debian or RPM-based Linux (using Ubuntu in this demo) - How to configure the Kappa agent: email, API key, device name, and region - How to add a flow device to the Kentik portal with the right sample rate (10 recommended as a starting point) - How to enable the Kappa agg and agent services so they restart on boot - How to use Data Explorer with device and application dimensions to see your NetFlow - Why a Sankey visualization is often the best way to understand NetFlow traffic patterns Get a free Kentik account: https://www.kentik.com/go/get-started/ ─── RELATED RESOURCES ─── 📊 Kentik Data Explorer and NetFlow deep dives: - Kentik Data Explorer Tutorial (42-min deep dive on NetFlow analysis): https://youtu.be/qYZcwEkiVUM - Exploring Your Network Data with Kentik: https://youtu.be/PfVE5krMLc4 - How to Analyze Network Traffic Costs: https://youtu.be/zxaO5vihQd8 📊 Related Kentik tutorials: - Network Monitoring for Data Centers: https://youtu.be/_p408TFgGVY - Streaming Telemetry and SNMP Monitoring with Kentik NMS: https://youtu.be/75qaVzHWolM - How to Perform a Forensic Analysis After a Security Breach: https://youtu.be/0PaD4wUpXN0 🔗 Learn more about NetFlow on kentik.com: - What Is NetFlow? (Kentipedia): https://www.kentik.com/kentipedia/what-is-netflow-overview/ - NetFlow Analyzer Tools Guide (Kentipedia): https://www.kentik.com/kentipedia/netflow-analyzers-and-netflow-tools/ - What Is Network Monitoring? Tools, Telemetry & Trends 2026: https://www.kentik.com/kentipedia/network-monitoring/ - Best Network Monitoring Tools for 2026: https://www.kentik.com/kentipedia/best-network-monitoring-tools-2026/ - Kentipedia: https://www.kentik.com/kentipedia/ ─── ABOUT KENTIK ─── Kentik is the network intelligence platform for modern infrastructure teams. Kentik provides network observability, DDoS protection, cloud cost optimization, BGP monitoring, and AI-powered network analytics for enterprise, cloud, and service provider networks. 🔗 Start a free trial: https://www.kentik.com/go/get-started/ 🔗 Subscribe: https://www.youtube.com/@KentikHQ?sub_confirmation=1 #NetFlow #NetworkObservability #Kentik #sFlow #NetworkMonitoring #NetFlowTutorial #Kappa #NetworkTelemetry CHAPTERS: 0:00 Introduction: The Easiest Way to Test Out NetFlow 0:23 What Is NetFlow? (And How It Relates to sFlow, JFlow, VPC Flow Logs, and eBPF) 1:01 Why Testing NetFlow Has Historically Been Hard 1:16 Meet the Kentik Kappa Agent: NetFlow in About Five Steps 1:30 Step 1: Create a Free Kentik Account 1:47 Step 2: Get Your Kentik API Token from Authentication Settings 2:34 Step 3: Prepare a Linux Machine (Debian or RPM-Based) 3:01 Step 4: Install the Kappa Agent from Package Cloud 4:35 Configuring the Kappa Agent: Email, API Key, Device Name, Region 5:44 Step 5: Add the Device to Your Kentik Portal 6:53 Enabling the Kappa Services to Auto-Start on Reboot 7:47 Verifying Flow Data Is Being Received in the Kentik Portal 8:05 Exploring NetFlow in Data Explorer: Device and Application Dimensions 8:59 Why a Sankey Visualization Is the Best Way to See NetFlow 9:25 Wrap-Up: Five Steps, Five Minutes, Live NetFlow Data