This feature is on the roadmap. No date to share right now.
I have a need to export the raw netflow data (NTA 3.7). Do you have a query or a feature that will allow me to do this?
By default, received Flow data is stored in an uncompressed state for 60 minutes, as designated in the Keep uncompressed data for field on the NetFlow Settings view (Admin > Settings > NTA Settings). This period of may be extended to four hours.
As stored Flow data ages beyond the uncompressed data retention period, it is summarized into 15 minute intervals. After a full day, 15 minute intervals are summarized into one hour intervals.
Thus for each Netflow source, there are 4 tables with the 15 minute's worth of data. For each hour and each week there will be one additional table. This makes 6 tables per Netflow source. If you see 54 such tables, you must have 9 Netflow sources.
The NetflowDetails_#_long#--is all the uncompressed data- 1 hour default-- 4 for each 15 minutes and 2 waiting to be dropped.
After one week, one hour intervals are summarized into daily intervals and then stored for the period indicated in the Keep compressed data for field on the NetFlow Settings view.
Compressed data that is older than the period designated in the Keep compressed data for field is then deleted.
Data is collapsed to the NetflowSummary1 one table every 15 minutes
Data is collapsed to the NetflowSummary2 table every 24 hours
Data is collapsed to the NetflowSumarry3 table very 3 days (Used to be 7 days) and remains here until the retention period and then gets deleted
All the above are the default settings