NetFlow Management options ensure that you are able see all flow data available from flow-enabled devices on your monitored network. On new installations, all the options are enabled by default.
- Due to the volume of data involved in flow monitoring, you may find it necessary to disable the inclusive monitoring options to save database space.
- Only SNMP nodes, which is an interface on the node, can be added as a NetFlow Source.
NetFlow management options
Enable automatic addition of NetFlow sources
If selected, all flow-enabled devices in the Orion database sending flow data to the server hosting SolarWinds NTA are automatically added as NetFlow sources. All recognized NetFlow sources are listed under NetFlow Sources on NTA Summary.
Allow monitoring of flows from unmonitored ports
If selected, SolarWinds NTA retains all flow data provided by NetFlow sources on your network, including flow data for ports that you are not actively monitoring.
A benefit of having this data is that, should you see a significant percentage of unmonitored traffic under Top XX Applications, you can expand the tree to drill down to the interface level. Click Monitor Port to track this traffic by port.
To save space in your database and discard data from unmonitored ports, clear this option.
This option may significantly increase the processing load on both your SolarWinds NTA server and your SolarWinds Orion database server.
Allow monitoring of flows from unmanaged interfaces
If selected, SolarWinds NTA automatically monitors flow packets even if one of the involved interfaces is not managed by SolarWinds NPM.
If you want SolarWinds NTA to discard any flow packets where only one of the involved interfaces is managed by SolarWinds NPM, clear this option.
Clearing this option may significantly decrease the processing load on both your SolarWinds NTA server and your SolarWinds Orion database server, but it will also decrease the amount of flow data stored in your SolarWinds Orion database.
Allow matching nodes by another IP address
If selected, SolarWinds NTA automatically associates a flow with an appropriate SolarWinds NPM node if the node has multiple IP addresses and is sending flows from a non-primary address.
Show notification bar for unknown traffic events
If this option is selected and an unknown traffic event occurs, SolarWinds NTA notifies you about it in the yellow banner below the main tool bar.
Show interfaces for Wireless Controllers
Enable this option for SolarWinds NTA to monitor interfaces for Wireless Controller nodes on the NetFlow sources widget and on the Manage sources page.
Process IPv6 flow data
This option is enabled by default. Disable this option if you do not want to process and store IPv6 flow data.
Show unknown traffic events
Click this link to navigate to the Last 200 Unknown Traffic Events page. This page provides a list of traffic events involving flow data received from an unmanaged interface. You can use that page to add the relevant interface to NetFlow Sources. For more details, see Resolve Unknown Traffic.