Querying the sFlows

[jerji]

Gentle, please noob here

We have just got our NagiosNA implemented and we are 'playing'.

Once we bed it down we will link it all with NagiosXI!

We have an HP5900AF switch which has four different connections to our gateway (for different functions). We have set it up as a source and included all four interfaces (and data IS flowing - whew!). I would like to be able to query the system so that I can see what is happening on each interface (rather than creating a source for each one), however it's a bit hard not knowing how to construct the query

Could someone please provide an example?

Thanks in advance.

Ian

[ssax]

Code: Select all

HP5900AF 
- Interface 1 (10.10.10.1)
- Interface 2 (10.10.11.1)
- Interface 3 (10.10.12.1)
- Interface 4 (10.10.13.1)

So if I wanted to see inbound for interface 1, I could create a view:
Name: HP5900AF_Int_1_Inbound
Limiter: dst ip 10.10.10.1

If I wanted to see outbound for Interface 1:
Name: HP5900AF_Int_1_Outbound
Limiter: src ip 10.10.10.1

If I wanted to see inbound and outbound for Interface 1:
Name: HP5900AF_Int_1_All
Limiter: ip 10.10.10.1

Then go to your source and click on queries, select your view, and aggregate by:
- If you selected Inbound, use dstip
- If you selected Outbound, use srcip
- If you selected All, use srcip or dstip

Then if you are looking at summary or reports you can use limit the info by selecting your view from the Display View dropdown at the top.

[jerji]

Excellent! Thank you.

Ian

[tmcdonald]

I'll be closing this thread now, but feel free to open another if you need anything in the future!