Netflow Database Question

Question

I'm a network guy who is coming into an established environment tasked with getting more useful data out of the current Netflow. I would like to understand the output of what is highlighted below before I get too carried away with configuring more equipment to push flow. Please forgive my lack of knowledge on the DB side of the house but I can't really find a reason as to why I am getting this output. After talking with coworkers I understand that all of the defaults were accepted during setup and that the server where this database is located at is only used for netflow. Let me know what you think. Thanks.

NTA Version: 4.1.1

borgan · Answer

My pleasure. Feel fre to mark my answer as Correct or Helpful if it was. Thank you.

aday · Answer

Very cool. Thank you so much for your time and effort.

borgan · Answer

The message is indeed normal. I suspect that the message may not actually function on the demo site.

One more thing to keep in mind if you eventually plan to increase the flows you send to NTA. You should use the following formula to determine how much storage you will need to store the flow data for the default 30 day period:

Size = 20 GB + (8 GB per 1000 fps)

So, start with a minimum of 20 GB then add an additional 8GB for every 1000 flows per second ingressing your NTA server. In your screenshot above, you show an average of 311 fps during the last 5 minutes and 232 in the last 24 hours. If you use a rounded value of 300, then you would need 20+(8*0.3) = 22.4 GB of storage for 30 Days. Keep in mind that your flow profile is very tiny right now, so you are not even using 50% of that amount. Also, you can see that if you increase the flows tenfold, you will need 10 times more storage. If you decide to keep the data for 90 days, you will need to triple the storage, and so on.