Enable flow monitoring from unmanaged interfaces
SolarWinds NTA provides the option to retain data for any flow defined with at least one interface monitored by SolarWinds NPM.
It is possible that you may be managing a node in SolarWinds NPM by one interface and IP address, but NetFlow data is coming from a different interface and IP address on that node. In such cases, you can choose to have SolarWinds NTA attempt to associate unknown traffic with a non-primary IP address on a currently monitored SolarWinds NPM node.
For more information about managing interfaces in SolarWinds NPM, see Discovering and Adding Network Devices.
Disabling the option to monitor flows from unmanaged interfaces may significantly decrease the processing load on both your SolarWinds NTA server and your Orion database server, but it will also decrease the amount of flow data stored in yourOrion database.
The following procedure enables the option of monitoring traffic on unmanaged interfaces in SolarWinds NTA.
- Click Settings > All Settings.
- Under Product Specific Settings, click NTA Settings.
- Under NetFlow Management, select Allow Monitoring of Flows from Unmanaged Interfaces.
- Select Allow Matching Nodes by Another IP Address to allow SolarWinds NTA to attempt associating unknown traffic with non-primary IP addresses on a currently monitored SolarWinds NPM node.
- Click Save.
If there are unknown traffic events, resolve the unknown traffic and add the appropriate devices for monitoring first to SolarWinds NPM, and then to SolarWinds NTA. For more details, see Resolve unknown NetFlow traffic.