10-14-2024 06:06 AM - edited 10-17-2024 04:16 AM
I configured the NetFlow and am sending the NetFlow to Cribl but cribl is rejecting the netflow mentioning that Data Template interval is 0 Seconds and Leaf exporter settings are saying the same:
show flow exporter
Flow exporter XXX:
Destination: 172.x.v.f
VRF: tenant1:vrf1 (1)
Destination UDP Port 2055
Source: 172.x.x.x
DSCP 16
Export Version 9
Sequence number 10481479
Data template timeout 0 seconds
Exporter Statistics
Number of Flow Records Exported 211781270
Number of Templates Exported 12048
Number of Export Packets Sent 1064268
Number of Export Bytes Sent 9340609016
Number of Destination Unreachable Events 0
Number of No Buffer Events 0
Number of Packets Dropped (No Route to Host) 0
Number of Packets Dropped (other) 0
Number of Packets Dropped (Output Drops) 0
Time statistics were last cleared: Never
How do I change the data template timeout?
10-16-2024 12:24 AM
Try the below commands (NXOS style):
Step 1 | Enter the configuration mode. apic1# config |
Step 2 | Configure the node policy. apic1(config)# flow node-policy nodePol apic1(config-flow-node-pol)# flow timeout collection 100 apic1(config-flow-node-pol)# flow timeout template 123 apic1(config-flow-node-pol)# exit |
Verification:
leaf# show flow timers
Check the link: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Cisco_APIC_and_NetFlow.html
Wishing you the best!
10-16-2024 12:58 AM - edited 10-16-2024 12:59 AM
I did the same but show flow exporter output shows data template timeout as 0.
10-16-2024 02:37 AM
@shubhanshu_jaiswal can you please paste output of the command: show flow timers
10-16-2024 03:21 AM
leaf01#show flow timers
Flow Export Timer: 120
Flow Template Timer: 600
10-16-2024 09:17 PM
@shubhanshu_jaiswal here I would like to elaborate significance of the output "Data template timeout 0 seconds":
In Cisco Application Centric Infrastructure (ACI), NetFlow is used for monitoring and analyzing network traffic. The message "Data template timeout 0 seconds" refers to the configuration of the data template timeout setting for NetFlow.
NetFlow uses templates to define the structure of the data records that are exported to a collector. These templates describe the fields and their formats in the flow records. The "data template timeout" setting determines how often these templates are sent to the collector.
When the output says "Data template timeout 0 seconds," it means that the data templates are being sent continuously without any delay. This is typically not a common configuration because it can lead to excessive network traffic and processing overhead. Normally, you would set a reasonable timeout value (e.g., 30 seconds, 60 seconds, etc.) to balance between keeping the collector updated with the latest template information and minimizing the overhead.
In summary, "Data template timeout 0 seconds" means that the data templates are being sent immediately and continuously, which might not be ideal for most scenarios. It is usually better to configure a non-zero timeout value to optimize performance and resource usage.
10-16-2024 09:25 PM - edited 10-16-2024 10:41 PM
@shubhanshu_jaiswal Can you share your Data template time configuration here.
10-17-2024 01:15 AM
I have already provided timer value.
leaf01#show flow timers
Flow Export Timer: 120
Flow Template Timer: 600
Do you need any other output?
10-17-2024 02:39 AM
I mean to say Data template time configuration commands here.
10-17-2024 04:15 AM - edited 10-17-2024 04:15 AM
I have following node-policy configured:
apic# show running-config flow node-policy nodpol
# Command: show running-config flow node-policy nodpol
# Time: Thu Oct 17 11:13:00 2024
flow node-policy nodpol
flow timeout template 60
exit
I have flow template timeout set to 60 but still exporter out is as below:
show flow exporter
Flow exporter XXX:
Destination: 172.x.v.f
VRF: tenant1:vrf1 (1)
Destination UDP Port 2055
Source: 172.x.x.x
DSCP 16
Export Version 9
Sequence number 10481479
Data template timeout 0 seconds
Exporter Statistics
Number of Flow Records Exported 211781270
Number of Templates Exported 12048
Number of Export Packets Sent 1064268
Number of Export Bytes Sent 9340609016
Number of Destination Unreachable Events 0
Number of No Buffer Events 0
Number of Packets Dropped (No Route to Host) 0
Number of Packets Dropped (other) 0
Number of Packets Dropped (Output Drops) 0
Time statistics were last cleared: Never
10-18-2024 01:15 AM
flow node-policy nodpol
flow timeout template 60
exitI have flow template timeout set to 60 but still exporter out is as below:
Can you try changing Flow timeout template to 600 instead of 60
10-18-2024 02:25 AM
I did but still the same situation.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide