Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Performance Issues / Feature Request

wtan2000

We have been long-time users of Orion, and have had Netflow running for 3 months. Unfortunately, the only way we've been able to get respectable performance is to throw hardware at it.

My feature request involves having more flexibility in the data consolidation engine so that we can keep the size of the database or indices down. As an example, I'd be ok with consolidating entries to the hour almost immediately, or aggregating IP addresses into /24s after a day, etc. Or maybe the database architecture can be made to be more efficient.

For those who are interested, we are monitoring about 15 T1 interfaces, have a 60 day retention, and are consolidating aggressively. Our database is about 150GB. Here are the SQL server specs that got us acceptable performance:

1xClovertown 1.67ghz quad core processor
8xSAS15K drives striped
16GB DDR2 ECC667 RAM
Windows R2 Enterprise, SQL 2005

That may sound over the top, but lesser servers haven't cut the mustard as evidenced by high disk queue times in Windows perfmon. It's all about the number of high-speed disk spindles you can dedicate to it.

Find more posts tagged with

Accepted answers

All comments

r0berth1

How are you setting up netflow for a T1 with out it bringing the utilization of the T1 to 90-100%? i have tried to monitor some our or locations accross T1s but it pegs out the utilization of the circuit.

cnorborg

Wow, we run Netflow on quite a few of our T1's with NetQoS and even in our doing testing with Orion NTA we've never had netflow be that much data. Were you monitoring a Layer-3 switch or switches across the link or something? Never heard that before!!

r0berth1

nope, just monitoring a data and voice vlan.

cnorborg

Wow, I'm at a loss, I know netflow data is higher bandwidth than SNMP at times depending on the flows, but that seems very excessive. We're talking like 1-3% on our T1 at the most...

How is your Netflow configured on the router, mostly interested in the commands with "flow" in them. ie: "show run | i flow"