cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
503
Views
0
Helpful
11
Replies

Cisco ACI NetFlow Data template timeout

I configured the NetFlow and am sending the NetFlow to Cribl but cribl is rejecting the netflow mentioning that Data Template interval is 0 Seconds and Leaf exporter settings are saying the same:

show flow exporter
Flow exporter XXX:
    Destination: 172.x.v.f
    VRF: tenant1:vrf1 (1)
    Destination UDP Port 2055
    Source: 172.x.x.x
    DSCP 16
    Export Version 9
        Sequence number 10481479
        Data template timeout 0 seconds
    Exporter Statistics
        Number of Flow Records Exported 211781270
        Number of Templates Exported 12048
        Number of Export Packets Sent 1064268
        Number of Export Bytes Sent 9340609016
        Number of Destination Unreachable Events 0
        Number of No Buffer Events 0
        Number of Packets Dropped (No Route to Host) 0
        Number of Packets Dropped (other) 0
        Number of Packets Dropped (Output Drops) 0
        Time statistics were last cleared: Never

How do I change the data template timeout?

11 Replies 11

AshSe
Level 4
Level 4

Try the below commands (NXOS style):

 

Step 1

Enter the configuration mode.

apic1# config

Step 2

Configure the node policy.

apic1(config)# flow node-policy nodePol

apic1(config-flow-node-pol)# flow timeout collection 100

apic1(config-flow-node-pol)# flow timeout template 123

apic1(config-flow-node-pol)# exit

Verification:

leaf# show flow timers

Check the link: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Cisco_APIC_and_NetFlow.html

Wishing you the best!

I did the same but show flow exporter output shows data template timeout as 0.

@shubhanshu_jaiswal  can you please paste output of the command: show flow timers

leaf01#show flow timers

Flow Export Timer: 120
Flow Template Timer: 600

AshSe
Level 4
Level 4

@shubhanshu_jaiswal  here I would like to elaborate significance of the output "Data template timeout 0 seconds":

In Cisco Application Centric Infrastructure (ACI), NetFlow is used for monitoring and analyzing network traffic. The message "Data template timeout 0 seconds" refers to the configuration of the data template timeout setting for NetFlow.

NetFlow uses templates to define the structure of the data records that are exported to a collector. These templates describe the fields and their formats in the flow records. The "data template timeout" setting determines how often these templates are sent to the collector.

When the output says "Data template timeout 0 seconds," it means that the data templates are being sent continuously without any delay. This is typically not a common configuration because it can lead to excessive network traffic and processing overhead. Normally, you would set a reasonable timeout value (e.g., 30 seconds, 60 seconds, etc.) to balance between keeping the collector updated with the latest template information and minimizing the overhead.

In summary, "Data template timeout 0 seconds" means that the data templates are being sent immediately and continuously, which might not be ideal for most scenarios. It is usually better to configure a non-zero timeout value to optimize performance and resource usage.

AshSe
Level 4
Level 4

@shubhanshu_jaiswal  Can you share your Data template time configuration here.

I have already provided timer value. 

leaf01#show flow timers

Flow Export Timer: 120
Flow Template Timer: 600

Do you need any other output?

I mean to say Data template time configuration commands here.

I have following node-policy configured:

apic# show running-config flow node-policy nodpol
# Command: show running-config flow node-policy nodpol
# Time: Thu Oct 17 11:13:00 2024
flow node-policy nodpol
flow timeout template 60
exit

I have flow template timeout set to 60 but still exporter out is as below:

show flow exporter
Flow exporter XXX:
    Destination: 172.x.v.f
    VRF: tenant1:vrf1 (1)
    Destination UDP Port 2055
    Source: 172.x.x.x
    DSCP 16
    Export Version 9
        Sequence number 10481479
        Data template timeout 0 seconds
    Exporter Statistics
        Number of Flow Records Exported 211781270
        Number of Templates Exported 12048
        Number of Export Packets Sent 1064268
        Number of Export Bytes Sent 9340609016
        Number of Destination Unreachable Events 0
        Number of No Buffer Events 0
        Number of Packets Dropped (No Route to Host) 0
        Number of Packets Dropped (other) 0
        Number of Packets Dropped (Output Drops) 0
        Time statistics were last cleared: Never

 



flow node-policy nodpol
flow timeout template 60
exit

I have flow template timeout set to 60 but still exporter out is as below:

Can you try changing Flow timeout template to 600 instead of 60

I did but still the same situation.

Review Cisco Networking for a $25 gift card

Save 25% on Day-2 Operations Add-On License