Cisco Systems OL-11399-01 manual Value Builders, String, Subnet Address

Chapter 2 Using the NetFlow Collector User Interface

Configuration

String

A String key builder obtains a UTF-8 string value from a flow. It has the following attributes.

Attribute

Output name

Field

Regrex filter

Allow null value

Description

Column name in output.

ID of the field to obtain from a flow.

If specified, the regular expression is applied to the string in flow data. The first matching sequence becomes the value of the key. If the regrex contains one or more capturing groups, the first match is returned.

If not selected, an error is logged if a flow does not contain the indicated field

Subnet Address

A Subnet Address key builder obtains an IP address and mask from a flow, applies the mask to the address, and outputs a network address in the format n.n.n.n/m. It has the following attributes.

Attribute	Description
Output name	Column name in output.
Address field	ID of the address field to obtain from a flow.
Mask field	ID of the mask field to obtain from a flow.
Allow null value	If not selected, an error is logged if a flow does not
	contain the indicated field

Value Builders

A value builder is associated with one or more fields in flow data and produces a non-key value in an aggregation record. A value builder can be referenced by an Aggregation Scheme and corresponds with one column in a NetFlow Collector output file.

Clicking on the Value Builders folder of the navigation tree displays a table of all existing value builders, as shown in Figure 2-11. Click on the appropriate link to modify or remove a value builder.

	Cisco NetFlow Collector User Guide
OL-11399-01		2-21