Documentation forServer & Application Monitor

SolarWinds NetFlow Traffic Analyzer Database

This template reports database statistics gathered about the Orion database by SolarWinds NetFlow Traffic Analyzer (NTA). To learn about using NTA, see:

In SAM 2019.4, this template was updated as follows:

  • The Number of Details Table component was removed because it is now obsolete.
  • Internal code was updated to support template localization in future releases.
  • The query for the "Number of CBQoS Interfaces not Receiving Data" component was updated due to database changes.

To update this template in pre-SAM 2019.4 installations, click here, download the latest version from THWACK, and import it into SAM.

Prerequisites

SolarWinds NTA is installed and licensed in your environment.

Credentials

SQL Server user name and password.

Component monitors

To learn more about component monitors, see Use SAM templates, application monitors, and component monitors.

Status of NetFlow maintenance

This monitor checks to make sure database maintenance is running properly. If the NTA maintenance is functioning properly, this component will return a value of zero. If the returned value is greater than zero, NTA Maintenance is not performing properly which can lead to performance issues. If this is the case, run NTA Database Maintenance manually. See the NTA Administrator Guide for details.

Number of NetFlow Interfaces Receiving Data

This monitor returns the number of NetFlow interfaces that received data within two minutes. If this counter is consistently zero, problems with receiving this information exist.

By default, this component monitor is disabled and should only be enabled for troubleshooting purposes.

Number of CBQoS Interfaces Receiving Data

This monitor returns the number of Class Based Quality of Service (CBQoS) interfaces that received data within two minutes. If this counter is consistently zero, problems with receiving this information exists.

By default, this component monitor is disabled and should only be enabled for troubleshooting purposes.

Number of NetFlow Interfaces not Receiving Data

This monitor returns the number of NetFlow interfaces which should have received data within two minutes. The value returned should be as low as possible. If the returned value is greater than zero, a flow was not received even though the interfaces are configured to receive this type of flow. This could indicate an improperly configured switch. If so, ensure that the switch exports a flow for that interface or disable the interface in NetFlow Sources.

Number of CBQoS Interfaces not Receiving Data

This monitor returns the number of CBQoS interfaces which should, but have not yet, received data within two minutes. The returned value should be as low as possible. If the returned value is greater than zero, a flow was not received even though the interfaces are configured to receive this type of flow. This could indicate an improperly configured switch. If so, ensure that the switch exports a flow for that interface or disable the interface in NetFlow Sources.

NetFlow Service Status

This monitor returns the running state of the NetFlow service by comparing the current time with the KeepAlive timestamp. If the difference is greater than 15 minutes, a zero value is returned, indicating a problem with the service status; otherwise, a value of one is returned. If so, verify that the NTA service is running properly on the server.

By default, this component monitor is disabled and should only be enabled for troubleshooting purposes.

High Priority Queue Addresses that are not Processed

This monitor returns the number of addresses in the high priority queue that are not processed but should be processed. The returned value should be near or at zero. If the value remains above zero, this means DNS server cannot process all incoming IP addresses. If so, adjust your DNS server to process more requests per second, or switch DNS resolving to On Demand. This counter will function only when the DNS resolution is set to "persistent."

Low Priority Queue Addresses that are not Processed

This monitor returns the number of addresses in the low priority queue that are not processed but should be processed. The returned value should be near or at zero. This queue contains IP addresses which were not resolved and should be resolved when the first queue is empty. If the returned value continues to grow, it may indicate an improperly configured DNS which is not able to resolve IP addresses.

This counter only functions if the DNS resolution is set to "persistent."

Number of records in NTA Summary table 1

This monitor returns the number of records in NetFlowSummary1 table. This value should be around the same value for each summary table. Compare this monitor with "Number of records" in NTA Summary table 2 and "Number of records" in NTA Summary table 3 monitors. If the value grows daily, this may indicate that the NTA Database Maintenance is not working properly. If needed, run NTA Database Maintenance manually.

By default, this component monitor is disabled and should only be enabled for troubleshooting purposes. SolarWinds recommends running this query once per day because it consumes many resources.

Number of records in NTA Summary table 2

This monitor returns the number of records in NetFlowSummary1 table. This value should be around the same value for each summary table. Compare this monitor with Number of records in NTA Summary table 1 and Number of records in NTA Summary table 3 monitors. If the value grows daily, this may indicate that the NTA Database Maintenance is not working properly. If needed, run NTA Database Maintenance manually.

By default, this component monitor is disabled and should only be enabled for troubleshooting purposes. SolarWinds recommends running this query once per day because it consumes many resources.

Number of records in NTA Summary table 3

This monitor returns the number of records in NetFlowSummary1 table. This value should be around the same value for each summary table. Compare this monitor with Number of records in NTA Summary table 1 and Number of records in NTA Summary table 2 monitors. If the value grows daily, this may indicate that the NTA Database Maintenance is not working properly. If needed, run NTA Database Maintenance manually.

By default, this component monitor is disabled and should only be enabled for troubleshooting purposes. SolarWinds recommends running this query once per day because it consumes many resources.

Number of Detail Tables

This monitor returns the number of Detail Tables in the database, per node. Each node has a specific number of Detail Tables which can be changed in the NetFlow Settings. The default is four.

If the number of Detail Tables per node exceeds the allowed maximum and continually grows, this could be an indication that there is a problem with the NTA service. If this is the case, verify that all services are running properly. If needed, run NTA Database Maintenance manually.

Number of polling Huawei devices

This monitor returns the number of Huawei devices with interface mapping that are enabled and working properly. If you do not have any Huawei devices, the value returned should be zero. If you have devices with interface mapping enabled and the returned value is zero, interface mapping may not be working properly.

By default, this component monitor is disabled and should only be enabled for troubleshooting purposes.