Netflow DB - Need help understanding SQL Tables

Try getting at the data through the API via SWQL... SolarWinds makes every effort to keep SWQL consistent across upgrades but SQL is not guarenteed to be consistent (especially with such a major upgrade.)

https://github.com/solarwinds/OrionSDK

That said if you're motivated enough I'm sure it's in the DB... just a matter of finding it. I'm mobile now and don't have my dev environment in front of me currently to check.

Hello,

Please see connections between segmentID in flows tables for swis and sql query. 

SWIS Query:

SELECT TOP 5 Segments.IPSegmentID, IPGroup.Name, Ranges.IPRangeStart, Ranges.IPRangeEnd FROM Orion.Netflow.IPAddressGroups AS IPGroup
LEFT JOIN Orion.NetFlow.IPGroupSegments Segments ON Segments.IPGroupID = IPGroup.IPAddressGroupID
LEFT JOIN Orion.Netflow.IPAddressGroupRanges Ranges ON Ranges.IPAddressGroupID =IPGroup.IPAddressGroupID

IPSegmentID is either as SourceIPGroupSegmentID or as DestinationIPGroupSegmentID in swis entity table 'Orion.Netflow.Flows'

SQL Query:

SELECT TOP 5 Segments.IPSegmentID,IpGroups.Name, Ranges.IPRangeStart,Ranges.IPRangeEnd FROM SolarwindsOrion.dbo.NetFlowIPGroups AS IPGroups
LEFT JOIN SolarWindsFlowStorage.[dbo].[NetFlowIpGroupsIpSegments_View] Segments ON Segments.IPGroupID = IPGroups.IPGroupID
LEFT JOIN SolarwindsOrion.dbo.IPAddressGroups Ranges ON Ranges.IPAddressGroupID =Segments.IPGroupID

IPSegmentID in 'NetFlowFlows' tables either as SourceIPGroupSegmentID or as DestinationIPGroupSegmentID

Please let me know if you need more informations

Regards Radek

We were able to get this working and have it all figured out now.  With NetflowIPExport no longer being the source of the IPSegment ID it was very confusing at first.  

I do have a question though - What is the significance of the "versions" in the table NetflowStorageSegments?  We were unable to figure out why our Segments suddenly had so many different versions.

We were using the SDK before but after getting upgraded our query no longer worked as it was looking for IPSegmentID's from a table that is no longer in use(NetflowIPExport)

Hello,

In table NetFlowStorageSegments the "Versions" column is there to help distinguish last changes of existing IP group so NTA knows that previous versions of the same IP segments for this IP group are not valid anymore. So in query we should take into account only maximum version of IP segment  as the most actual version of IP group / IP segment change.

Regards Radek