Hello, Paolo.
Paolo Lucente wrote:
> It depends: if nfacctd_time_new is set to true then stamp_inserted does
> refer to when data is received at the collector; otherwise the original
> timestamp received from the probe, ie. flowStartSeconds, is used. Whereas
> stamp_updated refers to the last time a certain record is touched; the
> likes of flowEndSeconds are mostly ignored unless nfacctd_sql_log is set
> to true, ie. creation of time-bins is disabled, causing timestamps up to
> the second resolution to be used to populate stamp_inserted/stamp_updated
> fields. Lastly, hoping the probe doesn't provide more than a single time
> source for a certain template, nfacctd is able to use flowStartSeconds,
> flowStartMilliseconds or flowStartSysUpTime as indication - if multiple
> are defined, one is picked in a deterministic way, ie. flowStartSysUpTime
> wins over flowStartMilliseconds which in turns wins over flowStartSeconds.
> Hope this helps.
>
Thank you very much for your help! nfacctd_sql_log key is just what I
was needed. Actually while I read docs previously I thought it was
related to logging of pmacct daemons itself and just skipped that. My
bad.
Thanks again, Paolo.
--
Best regards,
Anatoly
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
