Not seeing any data

This support forum board is for support questions relating to Nagios Network Analyzer, our network traffic and bandwidth analysis solution.
User avatar
BanditBBS
Posts: 2459
Joined: Tue May 31, 2011 12:57 pm
Location: Scio, OH
Contact:

Not seeing any data

Post by BanditBBS »

Installed NNA and created source:
source.jpg
As you can see I am not seeing any data. The router shows it is sending data and here is the filesystem on the NNA:

Code: Select all

[root@cms-365-nna01 ITCInternal]# ll
total 1232
-rw-r--r-- 1 nna users       7 Mar 12 05:10 2055.pid
-rw-r--r-- 1 nna users 1255360 Mar 12 05:55 bandwidth.rrd
drwxr-xr-x 2 nna users     293 Mar 12 05:55 flows
[root@cms-365-nna01 ITCInternal]# pwd
/usr/local/nagiosna/var/ITCInternal
[root@cms-365-nna01 ITCInternal]# ll flows/
total 40
-rw-r--r-- 1 nna users 366 Mar 12 05:15 nfcapd.202103120510
-rw-r--r-- 1 nna users 363 Mar 12 05:20 nfcapd.202103120515
-rw-r--r-- 1 nna users 366 Mar 12 05:25 nfcapd.202103120520
-rw-r--r-- 1 nna users 362 Mar 12 05:30 nfcapd.202103120525
-rw-r--r-- 1 nna users 366 Mar 12 05:35 nfcapd.202103120530
-rw-r--r-- 1 nna users 362 Mar 12 05:40 nfcapd.202103120535
-rw-r--r-- 1 nna users 366 Mar 12 05:45 nfcapd.202103120540
-rw-r--r-- 1 nna users 362 Mar 12 05:50 nfcapd.202103120545
-rw-r--r-- 1 nna users 366 Mar 12 05:55 nfcapd.202103120550
-rw-r--r-- 1 nna users 276 Mar 12 05:55 nfcapd.current.229366
[root@cms-365-nna01 ITCInternal]#
You do not have the required permissions to view the files attached to this post.
2 of XI5.6.14 Prod/DR/DEV - Nagios LogServer 2 Nodes
See my projects on the Exchange at BanditBBS - Also check out my Nagios stuff on my personal page at Bandit's Home and at github
User avatar
tgriep
Madmin
Posts: 9177
Joined: Thu Oct 30, 2014 9:02 am

Re: Not seeing any data

Post by tgriep »

The size of the nfcap files are only 366 or 362 bytes which is the size of a blank nfcap file.
I suspect the device is not sending the flow data or it is not in a correct format so we will need to see how the device was configured.
Can you post it's settings and the make and model number of the device that is sending the flow data?
Be sure to check out our Knowledgebase for helpful articles and solutions!
User avatar
BanditBBS
Posts: 2459
Joined: Tue May 31, 2011 12:57 pm
Location: Scio, OH
Contact:

Re: Not seeing any data

Post by BanditBBS »

So I later started receiving data and the device is showing it is always sending data. But look at this screenshot form yesterday:
nna.jpg
As you can see it shows critical under abnormal traffic and if I clicked in any of the red sections it showed "No data" but look at the source across the top section, it clearly shows data being received in the past 30 minutes. How can those two sections be different?

Don't worry about the other two sources with no data, devices not configured to send to them yet.
You do not have the required permissions to view the files attached to this post.
2 of XI5.6.14 Prod/DR/DEV - Nagios LogServer 2 Nodes
See my projects on the Exchange at BanditBBS - Also check out my Nagios stuff on my personal page at Bandit's Home and at github
User avatar
tgriep
Madmin
Posts: 9177
Joined: Thu Oct 30, 2014 9:02 am

Re: Not seeing any data

Post by tgriep »

I have been checking 2 different systems to see if I can catch Abnormal Behavior but I they are never showing it.
If you go to the Source, does it show the graph and the top 5 for the source?

If you click on normal data (The Green data) and select Query, does it show data?
Be sure to check out our Knowledgebase for helpful articles and solutions!
User avatar
BanditBBS
Posts: 2459
Joined: Tue May 31, 2011 12:57 pm
Location: Scio, OH
Contact:

Re: Not seeing any data

Post by BanditBBS »

No data shown when clicking on the source in one of the red squares. For the green squares it looks absolutely fine and as it should.
2 of XI5.6.14 Prod/DR/DEV - Nagios LogServer 2 Nodes
See my projects on the Exchange at BanditBBS - Also check out my Nagios stuff on my personal page at Bandit's Home and at github
User avatar
tgriep
Madmin
Posts: 9177
Joined: Thu Oct 30, 2014 9:02 am

Re: Not seeing any data

Post by tgriep »

I finally had some Abnormal data displayed on my NNA server and it did display the data when I ran a query but with one exception.

That exception is if you click the farthest right Abnormal box. It is showing current data and is not totally finished storing the data.
If you wait for it to be closed, and click on the second box from the right, it will show the data.
If that how it works on your server or does every every Abnormal box show No data?

If they do, can you show me what the query is under the "Query: Custom Query" section in the GUI?
It should look like this.

Code: Select all

Showing 03/17/2021 09:25 to 03/17/2021 09:30 for query "" aggregated by dstip,srcip.
Or provide a full screen capture.

Open a root shell to the server and run the following commands and post the outout.

Code: Select all

php -r 'echo date("D M j G:i:s T Y")."\n";'
date
ls -l /usr/local/nagiosna/var/ITOffice-India/flows
Verify that the ITOffice-India part of the path is correct in the above command.

Then go to the folder /usr/local/nagiosna/var/ITOffice-India/flows and get the nfcapd files for the time the abnormal data is displayed and upload them here so we can view the data.

Thanks.
Be sure to check out our Knowledgebase for helpful articles and solutions!
User avatar
BanditBBS
Posts: 2459
Joined: Tue May 31, 2011 12:57 pm
Location: Scio, OH
Contact:

Re: Not seeing any data

Post by BanditBBS »

Quick note, the files are timestamped for PST and my browser is in EST.

Here is the main screen(Notice, red squares but the top bar graph shows data being received):
home.jpg
Here is when I click on query for the 2nd red square form right:
query.jpg
Attached is a zip of the capture files.

Here is the output requested:

Code: Select all

[root@cms-365-nna01 ~]# php -r 'echo date("D M j G:i:s T Y")."\n";'
Wed Mar 17 11:15:33 PDT 2021
[root@cms-365-nna01 ~]# date
Wed Mar 17 11:15:36 PDT 2021
[root@cms-365-nna01 ~]# ls -l /usr/local/nagiosna/var/ITOfficeIndia/flows/
total 99880
-rw-r--r-- 1 nna users 368309 Mar 16 11:55 nfcapd.202103161150
-rw-r--r-- 1 nna users 314614 Mar 16 12:00 nfcapd.202103161155
-rw-r--r-- 1 nna users 345549 Mar 16 12:05 nfcapd.202103161200
-rw-r--r-- 1 nna users 354204 Mar 16 12:10 nfcapd.202103161205
-rw-r--r-- 1 nna users 350906 Mar 16 12:15 nfcapd.202103161210
-rw-r--r-- 1 nna users 352850 Mar 16 12:20 nfcapd.202103161215
-rw-r--r-- 1 nna users 338103 Mar 16 12:25 nfcapd.202103161220
-rw-r--r-- 1 nna users 338100 Mar 16 12:30 nfcapd.202103161225
-rw-r--r-- 1 nna users 372282 Mar 16 12:35 nfcapd.202103161230
-rw-r--r-- 1 nna users 390599 Mar 16 12:40 nfcapd.202103161235
-rw-r--r-- 1 nna users 363667 Mar 16 12:45 nfcapd.202103161240
-rw-r--r-- 1 nna users 351415 Mar 16 12:50 nfcapd.202103161245
-rw-r--r-- 1 nna users 333040 Mar 16 12:55 nfcapd.202103161250
-rw-r--r-- 1 nna users 327288 Mar 16 13:00 nfcapd.202103161255
-rw-r--r-- 1 nna users 344281 Mar 16 13:05 nfcapd.202103161300
-rw-r--r-- 1 nna users 338236 Mar 16 13:10 nfcapd.202103161305
-rw-r--r-- 1 nna users 369108 Mar 16 13:15 nfcapd.202103161310
-rw-r--r-- 1 nna users 358628 Mar 16 13:20 nfcapd.202103161315
-rw-r--r-- 1 nna users 391119 Mar 16 13:25 nfcapd.202103161320
-rw-r--r-- 1 nna users 379020 Mar 16 13:30 nfcapd.202103161325
-rw-r--r-- 1 nna users 373563 Mar 16 13:35 nfcapd.202103161330
-rw-r--r-- 1 nna users 392360 Mar 16 13:40 nfcapd.202103161335
-rw-r--r-- 1 nna users 409937 Mar 16 13:45 nfcapd.202103161340
-rw-r--r-- 1 nna users 359279 Mar 16 13:50 nfcapd.202103161345
-rw-r--r-- 1 nna users 387540 Mar 16 13:55 nfcapd.202103161350
-rw-r--r-- 1 nna users 373379 Mar 16 14:00 nfcapd.202103161355
-rw-r--r-- 1 nna users 361630 Mar 16 14:05 nfcapd.202103161400
-rw-r--r-- 1 nna users 350687 Mar 16 14:10 nfcapd.202103161405
-rw-r--r-- 1 nna users 346771 Mar 16 14:15 nfcapd.202103161410
-rw-r--r-- 1 nna users 324489 Mar 16 14:20 nfcapd.202103161415
-rw-r--r-- 1 nna users 338253 Mar 16 14:25 nfcapd.202103161420
-rw-r--r-- 1 nna users 333554 Mar 16 14:30 nfcapd.202103161425
-rw-r--r-- 1 nna users 323150 Mar 16 14:35 nfcapd.202103161430
-rw-r--r-- 1 nna users 365561 Mar 16 14:40 nfcapd.202103161435
-rw-r--r-- 1 nna users 335959 Mar 16 14:45 nfcapd.202103161440
-rw-r--r-- 1 nna users 294876 Mar 16 14:50 nfcapd.202103161445
-rw-r--r-- 1 nna users 303181 Mar 16 14:55 nfcapd.202103161450
-rw-r--r-- 1 nna users 330923 Mar 16 15:00 nfcapd.202103161455
-rw-r--r-- 1 nna users 311814 Mar 16 15:05 nfcapd.202103161500
-rw-r--r-- 1 nna users 306998 Mar 16 15:10 nfcapd.202103161505
-rw-r--r-- 1 nna users 323798 Mar 16 15:15 nfcapd.202103161510
-rw-r--r-- 1 nna users 312967 Mar 16 15:20 nfcapd.202103161515
-rw-r--r-- 1 nna users 320453 Mar 16 15:25 nfcapd.202103161520
-rw-r--r-- 1 nna users 389914 Mar 16 15:30 nfcapd.202103161525
-rw-r--r-- 1 nna users 312830 Mar 16 15:35 nfcapd.202103161530
-rw-r--r-- 1 nna users 287005 Mar 16 15:40 nfcapd.202103161535
-rw-r--r-- 1 nna users 278730 Mar 16 15:45 nfcapd.202103161540
-rw-r--r-- 1 nna users 288658 Mar 16 15:50 nfcapd.202103161545
-rw-r--r-- 1 nna users 266765 Mar 16 15:55 nfcapd.202103161550
-rw-r--r-- 1 nna users 238135 Mar 16 16:00 nfcapd.202103161555
-rw-r--r-- 1 nna users 244166 Mar 16 16:05 nfcapd.202103161600
-rw-r--r-- 1 nna users 255826 Mar 16 16:10 nfcapd.202103161605
-rw-r--r-- 1 nna users 253408 Mar 16 16:15 nfcapd.202103161610
-rw-r--r-- 1 nna users 231339 Mar 16 16:20 nfcapd.202103161615
-rw-r--r-- 1 nna users 237381 Mar 16 16:25 nfcapd.202103161620
-rw-r--r-- 1 nna users 232100 Mar 16 16:30 nfcapd.202103161625
-rw-r--r-- 1 nna users 229460 Mar 16 16:35 nfcapd.202103161630
-rw-r--r-- 1 nna users 229371 Mar 16 16:40 nfcapd.202103161635
-rw-r--r-- 1 nna users 231433 Mar 16 16:45 nfcapd.202103161640
-rw-r--r-- 1 nna users 279825 Mar 16 16:50 nfcapd.202103161645
-rw-r--r-- 1 nna users 221639 Mar 16 16:55 nfcapd.202103161650
-rw-r--r-- 1 nna users 220749 Mar 16 17:00 nfcapd.202103161655
-rw-r--r-- 1 nna users 226112 Mar 16 17:05 nfcapd.202103161700
-rw-r--r-- 1 nna users 214073 Mar 16 17:10 nfcapd.202103161705
-rw-r--r-- 1 nna users 228219 Mar 16 17:15 nfcapd.202103161710
-rw-r--r-- 1 nna users 222418 Mar 16 17:20 nfcapd.202103161715
-rw-r--r-- 1 nna users 219124 Mar 16 17:25 nfcapd.202103161720
-rw-r--r-- 1 nna users 209533 Mar 16 17:30 nfcapd.202103161725
-rw-r--r-- 1 nna users 241037 Mar 16 17:35 nfcapd.202103161730
-rw-r--r-- 1 nna users 276081 Mar 16 17:40 nfcapd.202103161735
-rw-r--r-- 1 nna users 348250 Mar 16 17:45 nfcapd.202103161740
-rw-r--r-- 1 nna users 268891 Mar 16 17:50 nfcapd.202103161745
-rw-r--r-- 1 nna users 268730 Mar 16 17:55 nfcapd.202103161750
-rw-r--r-- 1 nna users 251568 Mar 16 18:00 nfcapd.202103161755
-rw-r--r-- 1 nna users 337002 Mar 16 18:05 nfcapd.202103161800
-rw-r--r-- 1 nna users 345657 Mar 16 18:10 nfcapd.202103161805
-rw-r--r-- 1 nna users 324000 Mar 16 18:15 nfcapd.202103161810
-rw-r--r-- 1 nna users 330434 Mar 16 18:20 nfcapd.202103161815
-rw-r--r-- 1 nna users 276192 Mar 16 18:25 nfcapd.202103161820
-rw-r--r-- 1 nna users 245524 Mar 16 18:30 nfcapd.202103161825
-rw-r--r-- 1 nna users 286716 Mar 16 18:35 nfcapd.202103161830
-rw-r--r-- 1 nna users 230773 Mar 16 18:40 nfcapd.202103161835
-rw-r--r-- 1 nna users 224878 Mar 16 18:45 nfcapd.202103161840
-rw-r--r-- 1 nna users 213434 Mar 16 18:50 nfcapd.202103161845
-rw-r--r-- 1 nna users 203355 Mar 16 18:55 nfcapd.202103161850
-rw-r--r-- 1 nna users 223055 Mar 16 19:00 nfcapd.202103161855
-rw-r--r-- 1 nna users 211556 Mar 16 19:05 nfcapd.202103161900
-rw-r--r-- 1 nna users 198549 Mar 16 19:10 nfcapd.202103161905
-rw-r--r-- 1 nna users 197366 Mar 16 19:15 nfcapd.202103161910
-rw-r--r-- 1 nna users 196265 Mar 16 19:20 nfcapd.202103161915
-rw-r--r-- 1 nna users 195476 Mar 16 19:25 nfcapd.202103161920
-rw-r--r-- 1 nna users 202525 Mar 16 19:30 nfcapd.202103161925
-rw-r--r-- 1 nna users 183571 Mar 16 19:35 nfcapd.202103161930
-rw-r--r-- 1 nna users 192742 Mar 16 19:40 nfcapd.202103161935
-rw-r--r-- 1 nna users 222492 Mar 16 19:45 nfcapd.202103161940
-rw-r--r-- 1 nna users 204061 Mar 16 19:50 nfcapd.202103161945
-rw-r--r-- 1 nna users 195428 Mar 16 19:55 nfcapd.202103161950
-rw-r--r-- 1 nna users 228440 Mar 16 20:00 nfcapd.202103161955
-rw-r--r-- 1 nna users 208010 Mar 16 20:05 nfcapd.202103162000
-rw-r--r-- 1 nna users 203198 Mar 16 20:10 nfcapd.202103162005
-rw-r--r-- 1 nna users 195717 Mar 16 20:15 nfcapd.202103162010
-rw-r--r-- 1 nna users 199231 Mar 16 20:20 nfcapd.202103162015
-rw-r--r-- 1 nna users 178386 Mar 16 20:25 nfcapd.202103162020
-rw-r--r-- 1 nna users 176095 Mar 16 20:30 nfcapd.202103162025
-rw-r--r-- 1 nna users 198407 Mar 16 20:35 nfcapd.202103162030
-rw-r--r-- 1 nna users 192328 Mar 16 20:40 nfcapd.202103162035
-rw-r--r-- 1 nna users 232997 Mar 16 20:45 nfcapd.202103162040
-rw-r--r-- 1 nna users 160090 Mar 16 20:50 nfcapd.202103162045
-rw-r--r-- 1 nna users 213017 Mar 16 20:55 nfcapd.202103162050
-rw-r--r-- 1 nna users 323706 Mar 16 21:00 nfcapd.202103162055
-rw-r--r-- 1 nna users 237597 Mar 16 21:05 nfcapd.202103162100
-rw-r--r-- 1 nna users 211887 Mar 16 21:10 nfcapd.202103162105
-rw-r--r-- 1 nna users 244422 Mar 16 21:15 nfcapd.202103162110
-rw-r--r-- 1 nna users 195798 Mar 16 21:20 nfcapd.202103162115
-rw-r--r-- 1 nna users 229091 Mar 16 21:25 nfcapd.202103162120
-rw-r--r-- 1 nna users 265632 Mar 16 21:30 nfcapd.202103162125
-rw-r--r-- 1 nna users 300738 Mar 16 21:35 nfcapd.202103162130
-rw-r--r-- 1 nna users 234969 Mar 16 21:40 nfcapd.202103162135
-rw-r--r-- 1 nna users 307805 Mar 16 21:45 nfcapd.202103162140
-rw-r--r-- 1 nna users 269878 Mar 16 21:50 nfcapd.202103162145
-rw-r--r-- 1 nna users 365411 Mar 16 21:55 nfcapd.202103162150
-rw-r--r-- 1 nna users 293293 Mar 16 22:00 nfcapd.202103162155
-rw-r--r-- 1 nna users 301288 Mar 16 22:05 nfcapd.202103162200
-rw-r--r-- 1 nna users 281294 Mar 16 22:10 nfcapd.202103162205
-rw-r--r-- 1 nna users 263924 Mar 16 22:15 nfcapd.202103162210
-rw-r--r-- 1 nna users 374371 Mar 16 22:20 nfcapd.202103162215
-rw-r--r-- 1 nna users 371316 Mar 16 22:25 nfcapd.202103162220
-rw-r--r-- 1 nna users 284342 Mar 16 22:30 nfcapd.202103162225
-rw-r--r-- 1 nna users 328890 Mar 16 22:35 nfcapd.202103162230
-rw-r--r-- 1 nna users 320529 Mar 16 22:40 nfcapd.202103162235
-rw-r--r-- 1 nna users 327637 Mar 16 22:45 nfcapd.202103162240
-rw-r--r-- 1 nna users 298579 Mar 16 22:50 nfcapd.202103162245
-rw-r--r-- 1 nna users 336410 Mar 16 22:55 nfcapd.202103162250
-rw-r--r-- 1 nna users 346480 Mar 16 23:00 nfcapd.202103162255
-rw-r--r-- 1 nna users 302337 Mar 16 23:05 nfcapd.202103162300
-rw-r--r-- 1 nna users 306743 Mar 16 23:10 nfcapd.202103162305
-rw-r--r-- 1 nna users 334585 Mar 16 23:15 nfcapd.202103162310
-rw-r--r-- 1 nna users 383686 Mar 16 23:20 nfcapd.202103162315
-rw-r--r-- 1 nna users 463002 Mar 16 23:25 nfcapd.202103162320
-rw-r--r-- 1 nna users 365076 Mar 16 23:30 nfcapd.202103162325
-rw-r--r-- 1 nna users 386639 Mar 16 23:35 nfcapd.202103162330
-rw-r--r-- 1 nna users 368180 Mar 16 23:40 nfcapd.202103162335
-rw-r--r-- 1 nna users 297953 Mar 16 23:45 nfcapd.202103162340
-rw-r--r-- 1 nna users 362462 Mar 16 23:50 nfcapd.202103162345
-rw-r--r-- 1 nna users 382085 Mar 16 23:55 nfcapd.202103162350
-rw-r--r-- 1 nna users 378468 Mar 17 00:00 nfcapd.202103162355
-rw-r--r-- 1 nna users 470184 Mar 17 00:05 nfcapd.202103170000
-rw-r--r-- 1 nna users 479632 Mar 17 00:10 nfcapd.202103170005
-rw-r--r-- 1 nna users 442580 Mar 17 00:15 nfcapd.202103170010
-rw-r--r-- 1 nna users 425476 Mar 17 00:20 nfcapd.202103170015
-rw-r--r-- 1 nna users 433439 Mar 17 00:25 nfcapd.202103170020
-rw-r--r-- 1 nna users 417166 Mar 17 00:30 nfcapd.202103170025
-rw-r--r-- 1 nna users 415663 Mar 17 00:35 nfcapd.202103170030
-rw-r--r-- 1 nna users 513202 Mar 17 00:40 nfcapd.202103170035
-rw-r--r-- 1 nna users 478859 Mar 17 00:45 nfcapd.202103170040
-rw-r--r-- 1 nna users 471652 Mar 17 00:50 nfcapd.202103170045
-rw-r--r-- 1 nna users 562842 Mar 17 00:55 nfcapd.202103170050
-rw-r--r-- 1 nna users 574884 Mar 17 01:00 nfcapd.202103170055
-rw-r--r-- 1 nna users 623239 Mar 17 01:05 nfcapd.202103170100
-rw-r--r-- 1 nna users 560347 Mar 17 01:10 nfcapd.202103170105
-rw-r--r-- 1 nna users 617590 Mar 17 01:15 nfcapd.202103170110
-rw-r--r-- 1 nna users 580470 Mar 17 01:20 nfcapd.202103170115
-rw-r--r-- 1 nna users 700654 Mar 17 01:25 nfcapd.202103170120
-rw-r--r-- 1 nna users 579983 Mar 17 01:30 nfcapd.202103170125
-rw-r--r-- 1 nna users 622751 Mar 17 01:35 nfcapd.202103170130
-rw-r--r-- 1 nna users 633258 Mar 17 01:40 nfcapd.202103170135
-rw-r--r-- 1 nna users 643045 Mar 17 01:45 nfcapd.202103170140
-rw-r--r-- 1 nna users 699593 Mar 17 01:50 nfcapd.202103170145
-rw-r--r-- 1 nna users 669595 Mar 17 01:55 nfcapd.202103170150
-rw-r--r-- 1 nna users 663487 Mar 17 02:00 nfcapd.202103170155
-rw-r--r-- 1 nna users 733060 Mar 17 02:05 nfcapd.202103170200
-rw-r--r-- 1 nna users 613135 Mar 17 02:10 nfcapd.202103170205
-rw-r--r-- 1 nna users 616613 Mar 17 02:15 nfcapd.202103170210
-rw-r--r-- 1 nna users 630721 Mar 17 02:20 nfcapd.202103170215
-rw-r--r-- 1 nna users 615989 Mar 17 02:25 nfcapd.202103170220
-rw-r--r-- 1 nna users 579938 Mar 17 02:30 nfcapd.202103170225
-rw-r--r-- 1 nna users 571083 Mar 17 02:35 nfcapd.202103170230
-rw-r--r-- 1 nna users 564158 Mar 17 02:40 nfcapd.202103170235
-rw-r--r-- 1 nna users 582768 Mar 17 02:45 nfcapd.202103170240
-rw-r--r-- 1 nna users 724568 Mar 17 02:50 nfcapd.202103170245
-rw-r--r-- 1 nna users 624593 Mar 17 02:55 nfcapd.202103170250
-rw-r--r-- 1 nna users 591805 Mar 17 03:00 nfcapd.202103170255
-rw-r--r-- 1 nna users 652042 Mar 17 03:05 nfcapd.202103170300
-rw-r--r-- 1 nna users 592508 Mar 17 03:10 nfcapd.202103170305
-rw-r--r-- 1 nna users 605689 Mar 17 03:15 nfcapd.202103170310
-rw-r--r-- 1 nna users 614991 Mar 17 03:20 nfcapd.202103170315
-rw-r--r-- 1 nna users 628917 Mar 17 03:25 nfcapd.202103170320
-rw-r--r-- 1 nna users 569988 Mar 17 03:30 nfcapd.202103170325
-rw-r--r-- 1 nna users 489046 Mar 17 03:35 nfcapd.202103170330
-rw-r--r-- 1 nna users 549563 Mar 17 03:40 nfcapd.202103170335
-rw-r--r-- 1 nna users 527115 Mar 17 03:45 nfcapd.202103170340
-rw-r--r-- 1 nna users 463810 Mar 17 03:50 nfcapd.202103170345
-rw-r--r-- 1 nna users 427127 Mar 17 03:55 nfcapd.202103170350
-rw-r--r-- 1 nna users 423662 Mar 17 04:00 nfcapd.202103170355
-rw-r--r-- 1 nna users 398345 Mar 17 04:05 nfcapd.202103170400
-rw-r--r-- 1 nna users 371898 Mar 17 04:10 nfcapd.202103170405
-rw-r--r-- 1 nna users 348545 Mar 17 04:15 nfcapd.202103170410
-rw-r--r-- 1 nna users 402953 Mar 17 04:20 nfcapd.202103170415
-rw-r--r-- 1 nna users 398053 Mar 17 04:25 nfcapd.202103170420
-rw-r--r-- 1 nna users 388420 Mar 17 04:30 nfcapd.202103170425
-rw-r--r-- 1 nna users 376003 Mar 17 04:35 nfcapd.202103170430
-rw-r--r-- 1 nna users 321277 Mar 17 04:40 nfcapd.202103170435
-rw-r--r-- 1 nna users 349030 Mar 17 04:45 nfcapd.202103170440
-rw-r--r-- 1 nna users 328769 Mar 17 04:50 nfcapd.202103170445
-rw-r--r-- 1 nna users 350444 Mar 17 04:55 nfcapd.202103170450
-rw-r--r-- 1 nna users 337960 Mar 17 05:00 nfcapd.202103170455
-rw-r--r-- 1 nna users 325047 Mar 17 05:05 nfcapd.202103170500
-rw-r--r-- 1 nna users 299668 Mar 17 05:10 nfcapd.202103170505
-rw-r--r-- 1 nna users 344809 Mar 17 05:15 nfcapd.202103170510
-rw-r--r-- 1 nna users 336978 Mar 17 05:20 nfcapd.202103170515
-rw-r--r-- 1 nna users 351192 Mar 17 05:25 nfcapd.202103170520
-rw-r--r-- 1 nna users 348418 Mar 17 05:30 nfcapd.202103170525
-rw-r--r-- 1 nna users 359269 Mar 17 05:35 nfcapd.202103170530
-rw-r--r-- 1 nna users 359786 Mar 17 05:40 nfcapd.202103170535
-rw-r--r-- 1 nna users 319776 Mar 17 05:45 nfcapd.202103170540
-rw-r--r-- 1 nna users 367326 Mar 17 05:50 nfcapd.202103170545
-rw-r--r-- 1 nna users 350770 Mar 17 05:55 nfcapd.202103170550
-rw-r--r-- 1 nna users 329655 Mar 17 06:00 nfcapd.202103170555
-rw-r--r-- 1 nna users 345023 Mar 17 06:05 nfcapd.202103170600
-rw-r--r-- 1 nna users 356020 Mar 17 06:10 nfcapd.202103170605
-rw-r--r-- 1 nna users 328716 Mar 17 06:15 nfcapd.202103170610
-rw-r--r-- 1 nna users 319197 Mar 17 06:20 nfcapd.202103170615
-rw-r--r-- 1 nna users 324691 Mar 17 06:25 nfcapd.202103170620
-rw-r--r-- 1 nna users 301314 Mar 17 06:30 nfcapd.202103170625
-rw-r--r-- 1 nna users 327375 Mar 17 06:35 nfcapd.202103170630
-rw-r--r-- 1 nna users 310472 Mar 17 06:40 nfcapd.202103170635
-rw-r--r-- 1 nna users 343448 Mar 17 06:45 nfcapd.202103170640
-rw-r--r-- 1 nna users 321513 Mar 17 06:50 nfcapd.202103170645
-rw-r--r-- 1 nna users 312254 Mar 17 06:55 nfcapd.202103170650
-rw-r--r-- 1 nna users 306958 Mar 17 07:00 nfcapd.202103170655
-rw-r--r-- 1 nna users 321905 Mar 17 07:05 nfcapd.202103170700
-rw-r--r-- 1 nna users 323495 Mar 17 07:10 nfcapd.202103170705
-rw-r--r-- 1 nna users 312648 Mar 17 07:15 nfcapd.202103170710
-rw-r--r-- 1 nna users 328167 Mar 17 07:20 nfcapd.202103170715
-rw-r--r-- 1 nna users 360777 Mar 17 07:25 nfcapd.202103170720
-rw-r--r-- 1 nna users 423868 Mar 17 07:30 nfcapd.202103170725
-rw-r--r-- 1 nna users 415131 Mar 17 07:35 nfcapd.202103170730
-rw-r--r-- 1 nna users 383435 Mar 17 07:40 nfcapd.202103170735
-rw-r--r-- 1 nna users 356694 Mar 17 07:45 nfcapd.202103170740
-rw-r--r-- 1 nna users 387759 Mar 17 07:50 nfcapd.202103170745
-rw-r--r-- 1 nna users 361067 Mar 17 07:55 nfcapd.202103170750
-rw-r--r-- 1 nna users 375054 Mar 17 08:00 nfcapd.202103170755
-rw-r--r-- 1 nna users 383185 Mar 17 08:05 nfcapd.202103170800
-rw-r--r-- 1 nna users 341108 Mar 17 08:10 nfcapd.202103170805
-rw-r--r-- 1 nna users 336330 Mar 17 08:15 nfcapd.202103170810
-rw-r--r-- 1 nna users 324391 Mar 17 08:20 nfcapd.202103170815
-rw-r--r-- 1 nna users 310373 Mar 17 08:25 nfcapd.202103170820
-rw-r--r-- 1 nna users 343305 Mar 17 08:30 nfcapd.202103170825
-rw-r--r-- 1 nna users 305111 Mar 17 08:35 nfcapd.202103170830
-rw-r--r-- 1 nna users 317799 Mar 17 08:40 nfcapd.202103170835
-rw-r--r-- 1 nna users 302530 Mar 17 08:45 nfcapd.202103170840
-rw-r--r-- 1 nna users 289635 Mar 17 08:50 nfcapd.202103170845
-rw-r--r-- 1 nna users 285501 Mar 17 08:55 nfcapd.202103170850
-rw-r--r-- 1 nna users 304836 Mar 17 09:00 nfcapd.202103170855
-rw-r--r-- 1 nna users 266846 Mar 17 09:05 nfcapd.202103170900
-rw-r--r-- 1 nna users 294553 Mar 17 09:10 nfcapd.202103170905
-rw-r--r-- 1 nna users 264316 Mar 17 09:15 nfcapd.202103170910
-rw-r--r-- 1 nna users 263925 Mar 17 09:20 nfcapd.202103170915
-rw-r--r-- 1 nna users 280457 Mar 17 09:25 nfcapd.202103170920
-rw-r--r-- 1 nna users 324518 Mar 17 09:30 nfcapd.202103170925
-rw-r--r-- 1 nna users 331885 Mar 17 09:35 nfcapd.202103170930
-rw-r--r-- 1 nna users 357010 Mar 17 09:40 nfcapd.202103170935
-rw-r--r-- 1 nna users 446519 Mar 17 09:45 nfcapd.202103170940
-rw-r--r-- 1 nna users 430767 Mar 17 09:50 nfcapd.202103170945
-rw-r--r-- 1 nna users 417917 Mar 17 09:55 nfcapd.202103170950
-rw-r--r-- 1 nna users 634789 Mar 17 10:00 nfcapd.202103170955
-rw-r--r-- 1 nna users 603199 Mar 17 10:05 nfcapd.202103171000
-rw-r--r-- 1 nna users 622188 Mar 17 10:10 nfcapd.202103171005
-rw-r--r-- 1 nna users 548955 Mar 17 10:15 nfcapd.202103171010
-rw-r--r-- 1 nna users 528332 Mar 17 10:20 nfcapd.202103171015
-rw-r--r-- 1 nna users 544292 Mar 17 10:25 nfcapd.202103171020
-rw-r--r-- 1 nna users 569247 Mar 17 10:30 nfcapd.202103171025
-rw-r--r-- 1 nna users 563042 Mar 17 10:35 nfcapd.202103171030
-rw-r--r-- 1 nna users 460692 Mar 17 10:40 nfcapd.202103171035
-rw-r--r-- 1 nna users 417934 Mar 17 10:45 nfcapd.202103171040
-rw-r--r-- 1 nna users 372962 Mar 17 10:50 nfcapd.202103171045
-rw-r--r-- 1 nna users 352805 Mar 17 10:55 nfcapd.202103171050
-rw-r--r-- 1 nna users 371583 Mar 17 11:00 nfcapd.202103171055
-rw-r--r-- 1 nna users 403315 Mar 17 11:05 nfcapd.202103171100
-rw-r--r-- 1 nna users 427306 Mar 17 11:10 nfcapd.202103171105
-rw-r--r-- 1 nna users 428451 Mar 17 11:15 nfcapd.202103171110
-rw-r--r-- 1 nna users    276 Mar 17 11:15 nfcapd.current.246824
You do not have the required permissions to view the files attached to this post.
2 of XI5.6.14 Prod/DR/DEV - Nagios LogServer 2 Nodes
See my projects on the Exchange at BanditBBS - Also check out my Nagios stuff on my personal page at Bandit's Home and at github
User avatar
tgriep
Madmin
Posts: 9177
Joined: Thu Oct 30, 2014 9:02 am

Re: Not seeing any data

Post by tgriep »

The Query is trying to access the cap file for 13:55 to 14:00 for March 17th but the directory output does not show that file.
The date commands shows the time to be 11:15.
Is that the correct time for the server?

What time was it when you ran the query?

Is the desktop running the browser setup in the same timezone of the NNA server?

Go to the Administration > Global Settings menu and re-setup the Time Zone.
Select the Zone again and Save the settings.

Click on the India source, do you see the Top 5 data and is the time for the graph correct?
Be sure to check out our Knowledgebase for helpful articles and solutions!
User avatar
BanditBBS
Posts: 2459
Joined: Tue May 31, 2011 12:57 pm
Location: Scio, OH
Contact:

Re: Not seeing any data

Post by BanditBBS »

tgriep wrote:The Query is trying to access the cap file for 13:55 to 14:00 for March 17th but the directory output does not show that file.
The date commands shows the time to be 11:15.
Is that the correct time for the server?

What time was it when you ran the query?

Is the desktop running the browser setup in the same timezone of the NNA server?

Go to the Administration > Global Settings menu and re-setup the Time Zone.
Select the Zone again and Save the settings.

Click on the India source, do you see the Top 5 data and is the time for the graph correct?
The server running NNA is in PST, my laptop is in EST, that's why the difference. I ran the query in EST the time it shows.

The timezone is configured properly and I hit save on the config screen regardless

If I click on the source it shows me the data as it should and the time is correct(to my EST machine) and it shows data from the "abnormal" times on the home page.
2 of XI5.6.14 Prod/DR/DEV - Nagios LogServer 2 Nodes
See my projects on the Exchange at BanditBBS - Also check out my Nagios stuff on my personal page at Bandit's Home and at github
User avatar
tgriep
Madmin
Posts: 9177
Joined: Thu Oct 30, 2014 9:02 am

Re: Not seeing any data

Post by tgriep »

Thanks for letting me know the timezones.
It is a bug in the NNA Abnormal Behavior dashlet running queries using the browser time zone on data that is in the PST timezone which because of the time difference, it not in the data.

I filed a Bug report to get it fixed.
The only workaround is to edit the query manually and change the time of the query to match the timezone of the NNA server.
Be sure to check out our Knowledgebase for helpful articles and solutions!
Locked