Table of Contents (Start)
- Topics
- Introducing SevOne
- Login
- Startup Wizard
- Dashboard
- Global Search - Advanced Search
- Report Manager
- Report Attachment Wizard
- Report Properties
- Report Interactions
- Instant Graphs
- TopN Reports
- Alerts
- Alert Summary
- Alert Archives
- Instant Status
- Status Map Manager
- Edit Status Maps
- View Status Maps
- FlowFalcon Reports
- NBAR Reports
- Telephony Reports
- Telephony Browser
- Logged Traps
- Unknown Traps
- Trap Event Editor
- Trap Destinations
- Trap Destination Associations
- Policy Browser
- Create and Edit Policies
- Threshold Browser
- Create and Edit Thresholds
- Probe Manager
- Discovery Manager
- Device Manager
- New Device
- Edit Device
- Object Manager
- High Frequency Poller
- Device Summary
- Device Mover
- Device Groups
- Object Groups
- Object Summary
- Object Rules
- VMware Browser
- Calculation Plugin
- CallManager Plugin
- Database Manager
- Deferred Data Plugin
- DNS Plugin
- HTTP Plugin
- ICMP Plugin
- IP SLA Plugin
- JMX Plugin
- NAM
- NBAR Plugin
- Portshaker Plugin
- Process Plugin
- Proxy Ping Plugin
- SNMP Plugin
- Telephony Plugin
- VMware Plugin
- Web Status Plugin
- WMI Plugin
- xStats Plugin
- Indicator Type Maps
- Device Types
- Object Types
- Object Subtype Manager
- Quality of Service
- Calculation Editor
- xStats Source Manager
- User Role Manager
- User Manager
- Authentication Settings
- Preferences
- Cluster Manager
- Processes and Logs
- Metadata Schema
- Baseline Manager
- Flow Rules
- Flow Interface Manager
- FlowFalcon View Editor
- MPLS Flow Mapping
- Flow Template Status
- Network Segment Manager
- Map Flow Objects
- Flow Protocols and Services
- FlowFalcon Views
- xStats Log Viewer
- SNMP Walk
- SNMP OID Browser
- MIB Manager
- Work Hours
- Administrative Messages
- Enable CallManager
- Enable Flow Technologies
- Enable JMX
- Enable NBAR
- Enable SNMP
- Enable Web Status
- Enable WMI
- IP SLA
- SNMP
- Telephony
- Perl Regular Expressions
- Trap Revisions
- Integrate SevOne NMS With Other Applications
- Email Tips and Tricks
- SevOne NMS Web APC Statistics
- SevOne NMS PHP Statistics
- SevOne NMS Usage Statistics
- Glossary
- Quick Starts and User Guides
- SevOne NMS 5.4 Best Practices Guide - Cluster, Peer, and HSA
- SevOne NMS 5.4 Device Certification Guide
- SevOne NMS 5.4 Quick Start Guide - CallManager
- SevOne NMS 5.4 Quick Start Guide - Flow
- SevOne NMS 5.4 Quick Start Guide - IP SLA
- SevOne NMS 5.4 Quick Start Guide - JMX
- SevOne NMS 5.4 Quick Start Guide - LDAP
- SevOne NMS 5.4 Quick Start Guide - SNMP
- SevOne NMS 5.4 Quick Start Guide - Telephony
- SevOne NMS 5.4 Quick Start Guide - VMware
- SevOne NMS 5.4 Quick Start Guide - Web Status
- SevOne NMS 5.4 Quick Start Guide - WMI
- SevOne NMS 5.4 Quick Start Guide - xStats
- SevOne NMS 5.4 Implementation Guide
- SevOne NMS 5.4 Installation Guide
- SevOne Installation Guide - Virtual Appliance
- SevOne NMS 5.4 Quick Start Guide - Self-monitoring
- SevOne NMS 5.4 Quick Start Guide - Metadata
- SevOne NMS 5.4 Quick Start Guide - Hierarchical Types
FlowFalcon Views
This documentation applies to NMS version 5.4. An online version of the software can be found here.
SevOne NMS provides starter set FlowFalcon views to enable you to run common flow reports right out of the box. The default view is Top Talkers.
There are two types of FlowFalcon report views.
-
Aggregation Disabled (Granular) views use raw flow data to allow for more specificity in the result set at the tradeoff of longer report execution times and less historical data availability. You can choose to run each aggregated view in the granular mode.
-
Aggregation Enabled views use aggregated flow data to present the most relevant flow data for faster report creation. Your SevOne appliance hardware determines the maximum number of aggregated views. Aggregated views display an asterisk <*> in the lists below.
FlowFalcon Metrics
Bandwidth is the most common flow metric to monitor and Bandwidth views appear by default. The Cluster Manager Cluster Settings tab provides an Advanced FlowFalcon Views check box to enable you to use Medianet views for Cisco Medianet metrics and to use Response Time views for networks that use Cisco NAM devices. When you select the Advanced FlowFalcon Views check box, a Metrics drop-down field appears on the FlowFalcon Reports page, the FlowFalcon View Editor, and the Object Mapping page.
The FlowFalcon View Editor enables you to create FlowFalcon views that are specific to your network requirements.
Bandwidth Metric Views
Bandwidth views are available whether or not you select the Advanced FlowFalcon Views check box. If you select the Advanced FlowFalcon Views check box, click the Metrics drop-down and select Bandwidth to populate the View drop-down list with Bandwidth views.
Bandwidth views appear in the following view categories: Application Reports, IP Reports, Network Reports, Protocol Reports, and QoS Reports. Aggregated views display an asterisk <*> in the list.
|
FlowFalcon View Name |
Included Flow Template Fields |
|
Bandwidth Metrics - FlowFalcon Report Views |
|
|
APPLICATION REPORTS |
|
|
Top Clients with Applications |
Client IP, Protocol, Application Port |
|
Top Clients with Client Applications |
Client IP, Protocol, Client Port |
|
Top Flows |
Application IP, Client IP, Protocol, Application Port, Client Port |
|
Top Flows and Direction |
Application IP, Application Direction, Client IP, Protocol, Application Port, Client Port |
|
Top Flows with Next Hop |
Application IP, Client IP, Next Hop IP, Protocol, Application Port, Client Port |
|
Top Flows with Next Hop and Direction |
Application IP, Application Direction, Client IP, Next Hop IP, Protocol, Application Port, Client Port |
|
Top Next Hops with Applications |
Next Hop IP, Protocol, Application Port |
|
Top Next Hops with Client Applications |
Next Hop IP, Protocol, Client Port |
|
Top Talkers with Protocol and Applications |
Application IP, Protocol, Application Port |
|
Top Talkers with Protocol and Client Applications |
Application IP, Protocol, Client Port |
|
IP REPORTS |
|
|
*Top Clients |
Client IP |
|
*Top Clients with Next Hop |
Client IP, Next Hop IP |
|
Top Conversations |
Application IP, Client IP |
|
*Top Conversations and Direction |
Application IP, Application Direction, Client IP |
|
Top Conversations with Next Hop |
Application IP, Client IP, Next Hop IP |
|
*Top Conversations with Next Hop and Direction |
Application IP, Application Direction, Client IP, Next Hop IP |
|
Top Next Hops |
Next Hop IP |
|
*Top Talkers |
Application IP |
|
*Top Talkers with Applications |
Application IP, Application Port |
|
Top Talkers with Next Hop |
Application IP, Next Hop IP |
|
NETWORK REPORTS |
|
|
Top Destination AS |
BGP Destination AS Number |
|
Top Destination Mask |
Destination Prefix |
|
Top Source AS |
BGP Source AS Number |
|
Top Source Mask |
Source Prefix |
|
Top Talkers AS |
BGP Source AS Number, BGP Destination AS Number |
|
PROTOCOL REPORTS |
|
|
*Top Applications |
Application Port |
|
Top Applications (Bi-directional) |
Protocol, Application Port, Client Port |
|
Top Client Applications |
Protocol, Client Port |
|
*Top Protocols |
Protocol |
|
QoS REPORTS |
|
|
*Top Applications with Next Hop and ToS |
Application Port, Next Hop IP, ToS |
|
Top Applications with ToS |
Protocol, Application Port, ToS |
|
Top Client Applications with ToS |
Protocol, Client Port, ToS |
|
Top Conversations with Application and ToS |
Application IP, Client IP, Application Port, ToS |
|
*Top Conversations with Application and ToS and Direction |
Application IP, Application Direction, Client IP, Application Port, ToS |
|
Top Flows with Next Hop and ToS |
Application IP, Client IP, Next Hop IP, Protocol, Application Port, Client Port, ToS |
|
*Top Flows with Next Hop and ToS and Direction |
Application IP, Application Direction, Client IP, Next Hop IP, Protocol, Application Port, Client Port, ToS |
|
Top Flows with ToS |
Application IP, Client IP, Protocol, Application Port, Client Port, ToS |
|
Top Flows with ToS and Direction |
Application IP, Application Direction, Client IP, Protocol, Application Port, Client Port, ToS |
|
Top Source Applications with ToS |
Protocol, Source Port, ToS |
|
Top Talkers with Application and ToS |
Application IP, Protocol, Application Port, ToS |
|
Top Talkers with Client Application and ToS |
Application IP, Protocol, Client Port, ToS |
|
Top Types of Service |
ToS |
Medianet Metric Views
Medianet views are available when you select the Advanced FlowFalcon Views check box on the Cluster Manager.
|
FlowFalcon View Name |
Included Flow Template Fields |
|
Medianet Metrics - FlowFalcon Views |
|
|
Top Media Destinations |
Destination IP, Destination Port |
|
Top Media Flows |
Source IP, Source Port, SSRC, Destination IP, Destination Port, DSCP |
|
Top Media Sources |
Source IP, Source Port |
Response Time Metric Views
Response Time views are available when you select the Advanced FlowFalcon Views check box on the Cluster Manager. Response Time views appear in the following view categories: Application Reports and IP Reports.
|
FlowFalcon View Name |
Included Flow Template Fields |
|
Response Time Metric - FlowFalcon Views |
|
|
APPLICATION REPORTS |
|
|
Top Applications |
Application Port |
|
Top Conversations with Application |
Application Port, Application IP, Client IP |
|
Top Conversations with Application and Direction |
Application Port, Application IP, Client IP, Application Direction |
|
Top Talkers with Application |
Application Port, Application IP |
|
IP REPORTS |
|
|
Top Clients |
Client IP |
|
Top Conversations |
Application IP, Client IP |
|
Top Conversations with Direction |
Application IP, Client IP, Application Direction |
|
Top Talkers |
Application IP |