Nagios Support Forum

Will this change affect past data or only data going forward? For example, if I re-run that report from June 24th with the ~40gbps again after applying this change will I get the same result or will it be accurate now?

Should only affect it going forward, since the historical data is already improperly recorded and there is no way for the ASA to resend it.

That's what I figured, just wanted to clarify. Thanks, I'll let you know how it goes after we get some data to compare to.

Note that you'll only need to restart the sources that take in NSEL data - for the most part this should be sources associated with ASA devices.

Looking forward to your results!

That's still a ton of sources for me, and it doesn't help that every time I stop one it jumps me to the top of the page, and sometimes doesn't even stop the one I clicked on so I have to refresh the page to make sure I know which are stopped and which are not. I think I'm going to add a request for a restart button on that feature request as well. Are there any commands I can run from a console that will stop ALL sources and then start ALL? I feel like I've asked this before but can't seem to find the answer if I did.

Not sure why I didn't mention this in my previous post. That should do it!

On behalf of my sanity, thank you!

No problem.

Got a sample from this morning and the numbers are still a little off, but they are a lot closer. Again, this is a 200 Mbps pipe (just for reference). We noticed that between 9:35 am CT and 10:05 am the circuit was pretty much maxed out at 200 Mbps. When we looked in NNA and added up the bandwidth from the top 15 conversations we came back with about 233Mbps, still impossible on this circuit but definitely much closer. I looked at the start and end times for all the flows as well, and they all start at either 9:35 or 9:36 and end at either 10:04 or 10:05.

snapon_admin,

Glad to hear the data is beginning to sound more reasonable. I am curious about your 200MBps pipe - is the pipe synchronous? Is it possible that you have 200MBps on that pipe permitted in both directions? If so, 233MBps does not sound like an unreasonable metric. Typically circuits are sold synchronously.

Another thing - did our troubleshooting correct the display of your metrics at all? You said that they were blank before - is this still true?