Solarwinds DB sending huge data to secondary poller

Please move this discussion to the 'Netflow Traffic Analyzer' forum

Which version of NTA are you using? Assuming you are still using 3.x version of NTA (which is most likely the case), this is likely due to the constant data aggregation process. NTA v4 would definitely alleviate this to a very large degree since NTA v4 uses a Flow Storage DB to store the flow data as opposed to the MS SQL database. NTA v4 will still use the MS SQL database, but the traffic volume would be nowhere near the volume it would generate in 3.x versions. You can read about NTA v4 below to plan your upgrade

SolarWinds Knowledge Base :: NTA 4.0 Installation: Frequently Asked Questions

it seems like the network team are using version 7

You mean NTA v3.7?

i am not a network guy, but from the webconsole it states manageengine netflow analyzer 7 professional

You are in the SolarWinds forum

yes, understand that Solarwinds are for 'network guys' but the management are pushing it to the server team instead.

i think i got u, u got it all wrong. the network team are using the manageengine netflow analyzer to check the traffic not the NTA at solarwinds. so am i in the right channel or you put me in the wrong channel?

hi, my apologies. I misunderstood the question. Which Solarwinds products and versions are installed on the primary and additional pollers? You can find this information in the footer of the web console. Is the 4GB usage happening fairly evenly throughout the day?

no prob, thanks for the help and below are the version that we are using. I had randomly filter the usage for the whole day and yes, it happens on all the dates that I had choosen from 00:00 till 23:59. i'm having hard time to figure out why the sql server is sending twice the data to poller and we are not sure what it was sending.

Orion Core 2012.2.2, SAM 5.5.0, IPAM 3.0, NCM 7.0.2, NPM 10.4.2, IVIM 1.5.0

I meant - is the 4GB spread evenly across the 24 hour period (i.e., 0.167 GB per hour on any given day)? Or is the bulk of that happening at specific hours of the day?

And, when you say secondary poller - you mean an additional polling engine (not secondary server for Failover Engine) and this 4GB is traffic going to this additional polling engine (not the main SolarWinds server). Correct?  The polling engine simply writes the results to the database. Read actions like Advanced Alerts and Reports are all done from the main SolarWinds server. So, this should not result in the 4GB usage. You may want to check the Syslog rules (from the Syslog Viewer) and Trap rules (from the Trap viewer) from the respective polling engines.  These rules may be processed from the polling engines directly.