Fluke Recording Equipment manual Saved Filters, Long-term Reports, Executive Reports

Page 64

User’s Guide – version 3.1.3

NetFlow Tracker

Saved Filters

Saved filters can be defined that can be added wherever a filter editor appears in the software. A saved filter allows you to attach a name to, for example, a time-of-day mask or a filter that selects traffic related to a particular multi-port application or group of servers.

To create a saved filter, type a name in the box and click “New…”, then use the provided Filter Editor to define the filter. You can copy an existing filter by clicking the icon, and you can change the order in which saved filters appear by clicking the and

icons. To edit or delete a filter click its name.

Long-term Reports

NetFlow Tracker allows any report that can be created using the filter editor to be set up as a long-term report. A custom long-term report has a name, a report template and a type. It can also have its own storage settings overriding those in Database Settings, a time mask and a filter.

The report type determines how it is accessed. A basic report is created across the entire system, and thus it is strongly recommended that it has a filter on at least source device. A basic report can only be accessed from the long-term filter editor.

A long-term report can also be created for each device in the system, or for each interface inbound or outbound. These reports can still have a filter or time mask applied if desired. A per-device, inbound interface or outbound interface report can be accessed from the long-term filter editor or by drilling down from the long-term device or interface charts.

To create a custom long-term report, enter a name and select a report template and type and click “New…”. A new page for the report will be opened, allowing you to give the report non-default storage settings, a time mask and a filter. Click “Ok” to go back the main Report Settings page or “Delete” to cancel.

You can delete a long-term report or edit its name, storage settings and filter by clicking its name. It is not possible to change the report template, type or time mask of an existing report due to the way long-term data is stored.

Executive Reports

An executive report is a pre-configured template that contains one or more reports or charts and user-defined HTML content. They can be used to provide easy access to often-used reports or to group related reports together on one page.

To create an executive report, enter a name and click “New…”. You can edit an existing report by clicking its name.

The first part of defining an executive report is specifying the sub-reports that you would like to embed within it. To add a sub-report, give it a name that will identify it when you layout the executive report and select whether it is a real-time or long-term report. You can then use the provided filter editor to define the report. You can add custom parameters to alter anything about the report not configurable using the filter editor; see Report Format Parameters for more.

If you select “Default/Custom” as the time range of the report and do not add custom time range parameters the time range used will be whatever is passed to the executive report itself, or the default real-time or long-term time range according to the report.

64

Image 64
Contents NetFlow Tracker Software License Agreement Grant of Licence and Payment of FeesCopyright Customer Remedies Confidential Information and Security User’s Guide version NetFlow Tracker Definitions Support Services Support ChargesUndertakings by You Supplier’s UndertakingsIntellectual Property Rights Limitation of Liability and indemnityTermination Confidential Information and Security MiscellaneousSupport Hours Exceptions to Support ServicesResponse Times Contents LONG-TERM Reports Appendix 2 CSV File Format What is NetFlow? What is NetFlow Tracker?Features and Benefits IntroductionUser’s Guide version NetFlow Tracker Installation Pre-installation ChecksMinimum System Requirements Operating System SupportInstallation on Microsoft Windows Installation on Solaris and Linux Post-installation Tasks Set up Snmp community strings Set up web front-end securityConfigure your routers and switches Add listener portsUsing NetFlow Tracker Device traffic meters InterfacesWorking with Charts Changing the displayed chartChart legend Per-AS dataView a standard chart as a pie chart View a standard chart as a tabular reportZooming Zooming outWorking with Pie Charts Working with Tabular Reports User’s Guide version NetFlow Tracker Address Reports Report TemplatesSession Reports Network Reports QoS ReportsInterface Reports Creating Filtered Reports Traffic Identification ReportsOther Reports Report TemplateSample Size Source DataStart Time End TimeOut Interface In/Out InterfaceVPN Out VPNRecognised Application Identified ApplicationToS DiffServDestination Subnet Source/Destination SubnetSource Mask Destination MaskLong-term Reports Devices and InterfacesPer-device and Per-interface Long-term Reports Filter EditorUser’s Guide version NetFlow Tracker Executive Reports General Form Report URL FormatReport Format Parameters Chart 00230024 0025Number TrueFalse HeadingFeatures Sections128 256Time Range Parameters Hour DayWeek MonCalendar-based advanced Applying a time-of-day mask to the time range HHmmDay1-day2/time1-time2 110 105100 113115 120140 125285 300Minute DailyFilter Parameters Port/name NamePort/number Tos PrecPrec%20tos Byte CodeAddr/mask Password PasswordSecurity Parameters Secret Management Portal Access Control ParametersNull Aclid specifies a permitted long-term report Features Performance Tuning Database Server SettingsDisk Speed Query SizeConfiguration Guide Snmp SettingsLicensing Listener PortsDevice Settings Device SettingsDevice List Traffic Classes ArchivingIdentified Applications VPNs Security SettingsDeleting a Device Management Portal Settings Report Settings Long-term Reports Saved FiltersExecutive Reports Span class=repdesctextTest/span Content Nelements=5 and chartWidth=400Sub-reports User’s Guide version NetFlow Tracker IP Application Names Hostname Resolution SettingsDiffServ Names AS Names Database SettingsSubnet Names User’s Guide version NetFlow Tracker Backup ArchivingMemory Settings Performance CountersUnprocessed Flowsets Interface ScansMissed Flows Missed ExportsAppendix 1 Device Configuration Enabling Netflow Export on an IOS DeviceIp cef Ip flow-export destination addressIp flow-cache timeout active Ip flow-cache timeout inactiveShow ip flow export Show ip cache flow Show ip cache verbose flowIp route-cache flow infer-fields Mls netflowMls nde sender version Mls aging longUser’s Guide version NetFlow Tracker Set mls bridged-flow-statistics enable vlanlist Set mls nde enableSet system name name Set mls nde addressFlow-sampler-map allflows mode random one-out-of 1 exit Enabling Flow Detail Records on a Packeteer DeviceEnabling NetFlow on an Enterasys Device Using sflowtool to Convert sFlow Records to NetFlow AddressAppendix 2 CSV File Format Chart CSV formatTabular report CSV format Appendix 3 Third Party Software Components