hi i recently configured netflow on my router and i collect them with pmacct and save them into influxdb. in influx when i type show field keys, it prints:
fieldKey fieldType
bytes float
and when i type show tag keys, it prints:
tagKey
etype ip_dst ip_proto ip_src port_dst port_src tos
when i config my router to work with netflow, i create template like this:
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match flow direction
match interface input
collect interface output
collect counter bytes long
collect counter packets long
collect transport tcp flags
collect routing next-hop address ipv4
collect ipv4 source prefix
collect ipv4 destination prefix
collect timestamp sys-uptime first
collect timestamp sys-uptime last
as you see, i collect lots of different things but the only things i have is bytes
my question is why the only available field in influx is bytes and how can i have more fields?
Thanks.
No comments:
Post a Comment