Hi Robert, We had good results with grafana and influxdb using below : -src_as,dst_as,peer_src_as,peer_dst_as,peer_src_ip,as_path,dst_net,src_net,dst_mask,src_mask,in_iface,std_comm,med,proto,src_as_path
We export the flow records from pmacctd to kafka then import into influxdb and from there is just a matter of creating the templates. The only custom thing is kafka to influx , and we use kafka-influxdb with a inhouse parser * (kafka-influxdb). <https://github.com/mre/kafka-influxdb>* take a look * here <http://cpmarvin.blogspot.co.uk/2016/08/open-source-netflow-analysis-tool.html>* On Wed, Nov 9, 2016 at 10:55 PM, Robert Juric <[email protected]> wrote: > What I'm not sure of is whether or not time-series is the correct way to > store my data? I am currently aggregating nfacctd data based on flow > timestamps for accounting purposes. For those using InfuxDB and > Graphite/Graphana, what primitives are you aggregating on and what do you > pull out of the data in the graphing solution? > > > > On Wed, Nov 9, 2016 at 4:21 PM, Rasto Rickardt <[email protected]> wrote: > >> I would use InfluxDB as database & Grafana for graphing. >> >> As you already using memory plugin, you can use pmacct client and push >> data to InfluxDB. It is webservice, so simple bash & curl will work. >> >> r. >> >> On 11/09/2016 11:01 PM, Robert Juric wrote: >> > After fiddling around for a few days I'm still at a loss for finding a >> > good graphing option. >> > >> > I've been working today trying to use the memory plugin and cacti to >> > graph some data, but I realized that it won't be good for dynamic type >> > graphs. I could easily graph total tcp/udp traffic since those don't >> > alter too much. Ideally I'd like to aggregate the dst_ports but I'd like >> > to graph the top 5. I understand Cacti may not be the best for this >> > since you have to define the data sources manually. >> > >> > What other options are available or commonly used for graphing? >> > Preferably something that can be aggregated on a per conversation basis? >> > >> > >> > _______________________________________________ >> > pmacct-discussion mailing list >> > http://www.pmacct.net/#mailinglists >> > >> >> _______________________________________________ >> pmacct-discussion mailing list >> http://www.pmacct.net/#mailinglists >> > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists >
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
