Is there a way to organize "NetFlow Sources" into groups

Question

Hi everyone,

I'm new here. I would like to ask if there is any way to group Router/Interface in the NTA Summary/"NetFlow Sources" into groups of, say any of the custom fields that I populated for them.

Our environment has only around 150 routers (in NTA), but it is getting harder and harder to get to the wanted Router/Interface because the list is quite long already.

I haven't found anything, given my research skill, so I decided to ask directly here.

Thanks in advance.

NightEdition · Answer

Any update on this request? We have 1000's of Netflow sources which means we get a VERY long scroll bar (and long page loading times) for the Netflow Summary page which contains the "Netflow Sources" resource widget.

It would be great if the "Netflow Sources" resource widget had the ability to be grouped with the same type of options available in the node tree widget within NPM.

drew.a · Answer

The best I could come up with is to have a custom SWQL query that filters on what you're looking for.  With the Custom Query resource, you can tell it how many results to show on the page so you don't get a long, unmanageable list.

Here's an example you can try in your own environment.  AD_Site_Code and Device_Category are both Node custom properties.  Change them in the SELECT and WHERE in order to match the filter in your own environment.  You can add more if you'd like as well.  Make sure to uncomment the WHERE section for when implementing it in the "search" section.

SELECT

n.Caption AS [Node Name]

,'/Orion/TrafficAnalysis/NetflowNodeDetails.aspx?NetObject=NN:' + TOSTRING(nfs.NodeID) AS [_LinkFor_Node Name]

,'/Orion/images/StatusIcons/Small-' + n.StatusLED AS [_IconFor_Node Name]

,ncp.AD_Site_Code AS [Site Code]

,ncp.Device_Category AS [Device Category]

,i.Name AS [Interface Name]

,'/Orion/TrafficAnalysis/NetflowInterfaceDetails.aspx?NetObject=NI:' + TOSTRING(nfs.InterfaceID) AS [_LinkFor_Interface Name]

,'/Orion/images/StatusIcons/Small-' + i.StatusLED AS [_IconFor_Interface Name]

--,i.InterfaceAlias AS [Interface Description]

,nfs.LastTime AS [Last NetFlow]

,nfs.CBQoSLastTime AS [Last CBQoS]

FROM Orion.Netflow.Source nfs

LEFT JOIN Orion.NPM.Interfaces i ON i.InterfaceID = nfs.InterfaceID

LEFT JOIN Orion.Nodes n ON n.NodeID = nfs.NodeID

LEFT JOIN Orion.NodesCustomProperties ncp ON ncp.NodeID = nfs.NodeID

--WHERE ncp.AD_Site_Code LIKE '%${SEARCH_STRING}%'

--OR i.FullName LIKE '%${SEARCH_STRING}%'

ORDER BY i.FullName ASC

Example of how the Custom Query resource looks:

This is how it looks on the summary page (with 10 rows):

jreves · Answer

We don't currently support this, but it's a great feature request!  We may reach out to you at some point in the future to discuss how you would expect to see this implemented in the product!

jreves​