Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Netflow IP Address group view - only from one "source"

In my case, we have a bunch of sites. I want to be able to view all flows from a site in one page - i.e. across multiple netflow sources. I have redundant entry points for these sites. I seem to only be able to look at info from one source at a time via the below link model...If I remove the N:93 (source) it breaks.

/Orion/TrafficAnalysis/NetflowIPAddressGroupDetails.aspx?NetObject=NG:9;N:93

Is there a way to query to/from an IP group to/from anything across all sources?

thanks

Find more posts tagged with

Accepted answers

All comments

Jan.Krivanek

Hello njoylif,

If I understand it right, you are trying to get view on whole monitored system, filtered just by some specific condition (something like summary view, but filtered by specific IP group, or something like IP group view but not filtered by node).

Unluckily, this is not currently possible – you can either have unfiltered view of whole system (summary view), or filtered view, but just for one specific node or interface. This is given by design (partially because of performance reason), but we already performed some researches here and this will probably be addressed in some future release (based on other items priority, for list of items that we are working on see this thread)

njoylif

Ok, so its been a while, but revisiting as renewed interest from management. I think this would be a VERY VALUABLE feature.

So, what I am looking for specifically would be if I took the "Top XX IP Groups" for 1 group.

I basically created a group per external "site" or IP. Instead of taking the EXTENSIVE resources of "get top ip groups" query, I'd love to be able to "get NG=y" where y is the groupID for a given configured group.

I've created a report that lists the groups I've created and tried to figure out how to link to this summary, as well as looking at the asp code, but it appears to be above my pay grade.

Boiled down, I'd like to be able to get a summary of all traffic flows for a given group into any node/interface like the top xx IP groups does but given a specific groupID like below:

OlgieD

+1.

We're using IP groups to identify traffic to and from subnets that don't have netflow generators. Being able to see all traffic (independent of capturing source) would be a big plus.