Export of raw netflow data possible?

Is it possible to get a 30 or 90 day export of the raw netflow data that's been sent to SolarWinds? What setting controls how long this data is kept? We're getting asked for an export like this so that it can be imported into other simulation tools and they'd have "real" traffic to work with when testing new implementations, equipment, configurations, etc.

Is it possible through a custom report or SQL query?

Thanks for any insight.

---John Holmes...

Find more posts tagged with

Accepted answers

All comments

mcbridea

This feature is on the roadmap. No date to share right now.

SpinnerRow

I have a need to export the raw netflow data (NTA 3.7). Do you have a query or a feature that will allow me to do this?

SpinnerRow

From Solarwinds:

By default, received Flow data is stored in an uncompressed state for 60 minutes, as designated in the Keep uncompressed data for field on the NetFlow Settings view (Admin > Settings > NTA Settings). This period of may be extended to four hours.

As stored Flow data ages beyond the uncompressed data retention period, it is summarized into 15 minute intervals. After a full day, 15 minute intervals are summarized into one hour intervals.

Thus for each Netflow source, there are 4 tables with the 15 minute's worth of data. For each hour and each week there will be one additional table. This makes 6 tables per Netflow source. If you see 54 such tables, you must have 9 Netflow sources.

The NetflowDetails_#_long#--is all the uncompressed data- 1 hour default-- 4 for each 15 minutes and 2 waiting to be dropped.

After one week, one hour intervals are summarized into daily intervals and then stored for the period indicated in the Keep compressed data for field on the NetFlow Settings view.

Compressed data that is older than the period designated in the Keep compressed data for field is then deleted.

Data is collapsed to the NetflowSummary1 one table every 15 minutes
Data is collapsed to the NetflowSummary2 table every 24 hours
Data is collapsed to the NetflowSumarry3 table very 3 days (Used to be 7 days) and remains here until the retention period and then gets deleted

All the above are the default settings