SolutionPack for Traffic Flows Summary Sheet – Service Assurance Suite 9.4
Table of Contents
Overview
Learn how to install and configure the SolutionPack for Traffic Flows. This SolutionPack provides reports that give you a clear understanding of your IT network traffic. It generates a wide spectrum of network traffic reports that highlight key performance indicators (such as router CPU and processor memory used and the most active network devices and applications) to help you better understand their impact on the network of your data center.
Technical specifications
SolutionPack version
2.0
Compatible EMC M&R versions
6.4 and later
Support list
Netflow v5.0 and v9.0
Cisco ASA NSEL (Network Security Event Logs)
IP Flow Information Export (IPFIX) v10
Data collection method
Flow Listener
Main reports
Global, Exporter, Interface-level Reporting
TopN Reports
Conversations
Protocol and Applications
Back to TopWhere to find the latest SolutionPack software
Install the latest core software update for your product suite. SolutionPacks distributed with core software have a 30-day free evaluation period. If you plan to use the software longer than 30 days, you must install a SolutionPack license before the trial period ends.
This 30-day free evaluation only applies to new installations and is not available for upgraded installations. If you upgrade the core software and want to try a new SolutionPack, you must request a license for that SolutionPack by completing a Support Request (SR) form, which is available on the EMC Online Support website at http://support.emc.com.
Back to TopInstalling a SolutionPack
After you log in as an administrator, you can install a SolutionPack from Centralized Management.
Before you begin
Determine whether you need a SolutionPack license file by checking the feature names and expiration dates listed in http://support.emc.com.
. If not listed, obtain a license by completing a Support Request (SR) form, which is available on the EMC Online Support website at- Make sure the core modules, such as the Module-Manager, are up-to-date on all servers since not all module dependencies are validated during the SolutionPack installation. See the EMC M&R (Watch4net) Installation and Configuration Guide for more information.
Procedure
- Log in to the EMC M&R platform with your user name and password.
- Select Administration.
- Select Centralized Management.
- Select SOLUTIONPACK CENTER.
- Select the SolutionPack in the Browse and Install SolutionPacks screen.
- Read the summary information and click Install.
- Select the components to install.
- Type the instance name.
- Select the servers in one or more list boxes. For example, select the server in the Flow Database, Flow Collection, and Reports list boxes.
- Click Next.
- For each list box you select, a screen appears.
- Click Next after you complete each screen.
- Click Install after you complete the last screen.
The installation process begins. - Select the maximize arrow next to each component to view the installation process.
When the installation successfully completes, green checkmarks appear.
- Select SolutionPack. to verify the installed
Post installation tasks
After you install the SolutionPack for Traffic Flows, complete these tasks in the following order.
- Starting the Flow database
- Creating the tables in the Flow datastore
- Starting the Event Processing Manager
- Editing frontend files
- Starting the Tomcat service
Starting the Flow database
Procedure
Creating the tables in the Flow datastore
Procedure
- Follow these steps to create the tables in the Flow datastore:
Operating system Steps Windows - Navigate to
APG\Event-Processing\APG-Datastore-Writer\<instance_name>\dll.
The instance name was set during the installation of the SolutionPack.
- Open the setup-db.dll file and copy its contents.
- Navigate to APG\Databases\APG-Datastore\Default\bin.
- Run the datastore-client.cmd script to connect to the datastore.
- At the SQL> prompt, press CTRL+V to paste the contents from the buffer.
Linux - Navigate to
/opt/APG/Event-Processing/APG-Datastore-Writer/<instance_name>/dll.
The instance name was set during the installation of the SolutionPack.
- Type /opt/APG/Databases/APG-Datastore/Default/bin/datastore-client.sh < flow-setup-db.ddl.
- To check the progress of the above command, type /opt/APG/Databases/APG-Datastore/Default/bin/datastore-client.sh.
A message similar to this appears:Welcome to APG-Datastore 5.0 CLI (Ctrl+D to exit). Connected to jdbc:x100://localhost:12345/ ! sql>
- Navigate to
APG\Event-Processing\APG-Datastore-Writer\<instance_name>\dll.
- To view the new tables in the Flow datastore, type .tables; at the SQL> prompt.
Starting the Event Processing Manager
By starting the Event Processing Manager (EPM), you begin traffic flow collection.
Before you begin
Before starting EPM, use the Simple Network Management Protocol (SNMP) to discover the flow exporters, which are managed as routers, into the EMC M&R platform.
Procedure
- To start EPM, type /opt/APG/bin/manage-modules.sh service start event-processing-manager <instance_name>
- To verify EPM has started, check the
processing-00.log file in
/opt/APG/EventProcessing/Event-Processing-Manager/<instance_name>.
This message appears at the end of the log:
Processing manager started!
- Ignore this warning in the log file:
WARNING -- [2013-12-16 08:13:50 EST] -- ComponentClassLoader::init(): Component type EventPropertyTagger is deprecated, please update your Event-Processing-Manager configuration to use Event-Property-Tagger instead !
Example
Editing frontend files
Procedure
- Open sever.xml in /opt/APG/Web-Servers/Tomcat/Default/conf.
- Uncomment this section to set the connection to the Traffic Flow database for the datastore:
<!-- <Resource name="jdbc/FLOW-TF-DATA" auth="Container" type="javax.sql.DataSource" maxActive="10" maxIdle="10" validationQuery="SELECT 1" testOnBorrow="false" testWhileIdle="true" timeBetweenEvictionRunsMillis="10000" minEvictableIdleTimeMillis="60000" maxWait="10000" username="admin" password="changeme" driverClassName="com.watch4net.x100.jdbc.Driver" removeAbandoned="true" removeAbandonedTimeout="60" logAbandoned="true" url="jdbc:x100://localhost:48443/Databases/APG-Datastore" /> -->
- Open APG.xml in /opt/APG/Web‐Servers/Tomcat/Default/conf/Catalina/localhost.
- Uncomment this section to provide access to the Traffic Flow data:
<!-- <ResourceLink name="jdbc/FLOW-TF-DATA:{ mapping=FLOW-TF-DATA.xml, table=FLOW_RAW_DATA__SEQ_0_4__}" global="jdbc/FLOW-TF-DATA" type="javax.sql.DataSource" /> <ResourceLink name="jdbc/FLOW-TF-PROTO:{ mapping=FLOW-TF-PROTO.xml, table=FLOW_PROTOCOL__SEQ_0_4__}" global="jdbc/FLOW-TF-DATA" type="javax.sql.DataSource" /> <ResourceLink name="jdbc/FLOW-TF-APP:{ mapping=FLOW-TF-APP.xml, table=FLOW_APPLICATION_TOPN__SEQ_0_4__}" global="jdbc/FLOW-TF-DATA" type="javax.sql.DataSource" /> <ResourceLink name="jdbc/FLOW-TF-SRCADDR:{ mapping=FLOW-TF-SRCADDR.xml, table=FLOW_SRCADDR_TOPN__SEQ_0_4__}" global="jdbc/FLOW-TF-DATA" type="javax.sql.DataSource" /> <ResourceLink name="jdbc/FLOW-TF-DSTADDR:{ mapping=FLOW-TF-DSTADDR.xml, table=FLOW_DSTADDR_TOPN__SEQ_0_4__}" global="jdbc/FLOW-TF-DATA" type="javax.sql.DataSource" /> <ResourceLink name="jdbc/FLOW-TF-CONV:{ mapping=FLOW-TF-CONV.xml, table=FLOW_CONVERSATION_TOPN__SEQ_0_4__}" global="jdbc/FLOW-TF-DATA" type="javax.sql.DataSource" /> <ResourceLink name="jdbc/FLOW-TF-HOSTS:{ mapping=FLOW-TF-HOSTS.xml, table=FLOW_HOSTS__SEQ_0_4__}" global="jdbc/FLOW-TF-DATA" type="javax.sql.DataSource" /> <ResourceLink name="jdbc/FLOW-TF-NOSNMP:{ mapping=FLOW-TF-NOSNMP.xml, table=FLOW_NOSNMP__SEQ_0_4__}" global="jdbc/FLOW-TF-DATA" type="javax.sql.DataSource" /> -->
Starting the Tomcat service
Procedure
Confirming report creation
After you install a SolutionPack, you can view its reports.
To view the reports:
Procedure
- Go to .
- Click the SolutionPack to view its reports.
Results
Troubleshooting
Report display problems
What to do if data does not appear in any reports
Procedure
- After the completion of at least three collection cycles, verify if data is populating into the reports. If there is still no data in the reports, continue to the next step.
- Run the scheduled task to import data into reports. If there is still no data in the reports, continue to the next step.
- To view the log files for errors, go to Centralized Management and click .
Running a scheduled task to import data into reports
After you push a new configuration into a collector, a scheduled task runs and populates the reports with new data. You can manually run the scheduled task to import the data more quickly.
Before you begin
Allow at least three polling cycles to pass before manually running the scheduled task.
Procedure
- Click Administration.
- Click Centralized Management.
- Expand Scheduled Tasks.
- Click Database.
- Select the import-properties-Default task.
- Click Run Now.
- Confirm success in running the task in the Last Result and Last Result Time columns.
What to do if data does not appear in some reports
Procedure
- Run the scheduled task to import data into reports. If there is still no data in the reports, continue to step 2.
- Search for the metric in the database.
- To view the log files for errors, go to Centralized Management and click .
Searching for metrics in the database
You can verify that a metric is being collected and used for reporting when you search and find the metric in the database.
Procedure
- Go to the Administration page.
- Under Modules, click Management of Database Modules.
- On the
Metric Selection page, create the filter, type the number of results, and select the properties to display for the metric.
For example, to list up to 100 results of the SignalWait Time metric with the properties of device and IP, type name=='SignalWaitTime' in the Filter field, 100 in the Maximum results field, and select device and IP for the Properties to show.
- Click
Query.A list of the metric results appears. If nothing displays, the metric is not being collected.
Viewing collector errors in the Collector-Manager log files
Review the Collector-Manager log files to troubleshoot problems with data collection.
Procedure
- Click Administration.
- Click Centralized Management.
- Expand Collecting.
- Click the Collector-Manager for your collector instance.
Collector-Manager::<Collector-Manager instance> - <physical_host_ID>
- Expand Log Files and click the View File icon to review the configuration error messages.