3 Replies Latest reply on Feb 15, 2013 3:17 PM by zzz

    Netflow Data Retention

    aliendan

      We have a requirement from my Network architects to keep uncompressed netflow data for 7 days. We need the ability to see spikes that happen up to a week back. When the data gets summarized to days, by then the  event spike is ironed out. If this is a setting, I can’t find it. If this is not an option I have a feature request to add it. I think the app should not be set to what will work for most. This locks out users that need be a little different.  

        • Re: Netflow Data Retention
          kweise

          aliendan,

          I don't think it's possible (at least not in NTA 3.5) to store uncompressed data for 7 days.  The setting seems to be limited to a drop down box with 240 minutes being the maximum amount of time you can store uncompressed data.  I'm guessing the limit is due to the amount of storage that would be required to store that much uncompressed data.  Even on network monitoring a few netflow interfaces, you'd end up with a rather large database storing that much uncompressed data.  We're monitoring almost 500 Netflow interfaces.  If I tried to keep 7 days of uncompressed data I'm pretty sure our DBAs would put me on their most wanted list.

          • Re: Netflow Data Retention
            dmg31981

            Hi ALiendan, i saw a post of you about changing the rentention of the uncompress netflow information for more than 240m ,i have the same problem. did you recived an asnwer about this? Did you solved it?

            Thanks in advance.

            Diego