On 31/03/2015 00:15, Jason Calhoun wrote:
Actually, we gave up on the sqlite for historical data and switched to
Elasticsearch.

Which reminds me, is there a way to add to the data sent to elasticsearch?  I'd
like to have the data include some layer 7 information, specifically, hostname
and get string/URL data from HTTP requests.  I haven't spent much time with it,
but I didn't see that information in the es data when I tried it.


Currently the only way to dump additional data on ElasticSearch is to modify the source code to do it; ntopng dumps on ElasticSearch the same data it does on sqlite, namely flows info. The new Historical interface that will be added to the professional version (which is now work in progress) will use ElasticSearch as a backend; when such an interface will be added you will see more data added to ES.

Thank you,
Arianna


Thanks,
Jason

On 03/29/2015 01:39 PM, Arianna Avanzini wrote:
Hi Jason,

On 27/02/2015 17:10, Jason Calhoun wrote:
I take it back, I'm still getting the errors.  This is on a new install, CentOS
7.  ntopng version 1.2.2-8637.


We fixed something in the sqlite interface lately, are you still getting
errors with the latest SVN?

Thanks,
Arianna


/etc/ntopng/ntopng.conf:

-G=/var/tmp/ntopng.pid
-U root
-D all
-F db
-d /home/ntopng
-e
-w 80
-n 2
-i ens33


Thanks,
Jason

On 2/25/2015 5:13 PM, Arianna Avanzini wrote:
On 24/02/2015 22:32, Jason Calhoun wrote:
I'm running ntopng-1.2.2-8865 and I'm getting constant SQL errors in the log
file.  The errors are of the form:

24/Feb/2015 14:27:02 [DB.cpp:163] ERROR: [DB] SQL error: INSERT INTO flows
VALUES (NULL, 0, '<internal IP>', 50614, '<external ip>', 80, 6, 312,
1424275799, 0, 2870691498, '{ "8": "<internal ip>", "7": 50614, "12":
"<external
ip>", "11": 80, "4": 6, "58": 0, "59": 0, "57590": 7, "6": 23, "2": 0, "1": 0,
"24": 0, "23": 0, "22": 1424275799, "21": 0.000000, "json": "{ }" }'); [no
such
table: flows]

Any ideas?  Have I done something wrong in the configuration?


It doesn't seem like a configuration issue, but may I ask what configuration
are you using?

Thank you,
Arianna


Thanks,
Jason

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop






_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop


--
/*
 * Arianna Avanzini
 * [email protected]
 * http://ava.webhop.me
 */
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to