Search 85,944 posts and 653 resources contributed by 43,549 members or post a topic.

Already Joined? Sign in
Is this a defect in NetFlow reporting

Page 1 of 1 (5 items) | RSS

rated by 0 users
Not Answered This post has 0 verified answers | 4 Replies | 0 Followers | 424 Views


698 Posts
Points 2,286
Thwack MVP
lchance posted on Wed, Jun 17 2009 9:58 AM
rated by 0 users

I'm attempting to build a report on Endpoints Bytes Transmitted, but when I enable this field BYTES TRANSFERRED the entire reports comes up empty/null.

Point of interest here: I see tables for NetFlowSummary1, NetFlowSummary2 and NetFlowSummary3 but I do not see just a NetFlowSummary - would this make any difference when the SQL codes shows just the name of NetFlowSummary.

 

 Here's the SQL part of it:

SELECT  TOP 10000 Convert(DateTime,Floor(Cast((DateTime) as Float)),0) AS SummaryDate,
FlowCorrelation_Source_FlowCorrelation.IPAddress AS IP_Address,
FlowCorrelation_Source_FlowCorrelation.FullHostname AS Full_Hostname,
SUM(NetflowSummary.TotalBytes) AS SUM_of_Bytes_Transferred

FROM
(NetflowSummary LEFT OUTER JOIN FlowCorrelation FlowCorrelation_Dest_FlowCorrelation ON (NetflowSummary.DestIPSort = FlowCorrelation_Dest_FlowCorrelation.IPAddressSort))  INNER JOIN FlowCorrelation FlowCorrelation_Source_FlowCorrelation ON (FlowCorrelation_Dest_FlowCorrelation.IPAddressSort = FlowCorrelation_Source_FlowCorrelation.IPAddressSort AND NetflowSummary.SourceIPSort = FlowCorrelation_Source_FlowCorrelation.IPAddressSort)


WHERE
( DateTime BETWEEN 39978.4065509259 AND 39979.4166666667 )
 AND 
(
  (FlowCorrelation_Source_FlowCorrelation.FullHostname LIKE 'florida%') AND
  (FlowCorrelation_Dest_FlowCorrelation.FullHostname LIKE 'florida%')
)


GROUP BY Convert(DateTime,Floor(Cast((DateTime) as Float)),0),
FlowCorrelation_Source_FlowCorrelation.IPAddress, FlowCorrelation_Source_FlowCorrelation.FullHostname


ORDER BY SummaryDate ASC, 3 ASC

 

  • | Post Points: 3

All Replies


81 Posts
Points 375
SolarWinds Employee
ET replied on Thu, Jun 18 2009 3:38 AM
rated by 0 users

Hi,

NetflowSummary is a VIEW which union all summary tables, so it makes no diference for SQL.

ET, Developer

  • | Post Points: 3

38 Posts
Points 124
avnishb replied on Tue, Jul 7 2009 9:13 AM
rated by 0 users

Did we get a resolution to this issue because i also get empty reports ? This is one of the default Netflow reports and has never worked for me. Both top 50 receivers and top 50 transmitters.

  • | Post Points: 5

698 Posts
Points 2,286
Thwack MVP
lchance replied on Tue, Jul 7 2009 10:09 AM
rated by 0 users

By coincidence I updated to NTA 3.5 yesterday and just checked my report and now it works.

 

Have you updated to NTA 3.5? It appears to be the fix for this.

Good luck!

 

  • | Post Points: 1

1,273 Posts
Points 14,288
Moderator
SolarWinds Employee
mcbridea replied on Tue, Jul 7 2009 10:10 AM
rated by 0 users

They work for me on my Orion 9.5 and NTA 3.5 test VM. You should open a ticket on that one

Andy McBride, Technology Support Specialist - SolarWinds

Follow Me on Twitter

  • | Post Points: 1
Page 1 of 1 (5 items) | RSS

© 2003 - 2010 SolarWinds, Inc. All Rights Reserved.

Who is SolarWinds?

SolarWinds is rewriting the rules for how companies manage their networks. Guided by a global community of network engineers, SolarWinds develops simple and powerful network management software and network monitoring software for networks of all sizes. SolarWinds also offers a network certification program to become a SolarWinds Certified Professional (SCP).

What is thwack?

thwack, SolarWinds online community site, was designed by network engineers, for network engineers. thwack is a vibrant, growing community of more than 30,000 IT pros who share a passion for technology.

Explore Resources, Answers, Templates, and Advice

Download Free Networking Tools


Learn More About SolarWinds Products