Hello ,
I am trying to set up Cisco PI as network collector for branch sites.
I am using flexible netflow with configuration
flow exporter netflow-Export
destination X
source Loopback0
transport udp 9991
flow record netflow-Record
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
collect ipv4 dscp
collect interface output
collect flow direction
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last
collect application name
flow monitor netflow-Monitor
exporter netflow-Export
cache timeout active 60
record netflow-Record
on every subinterface
ip flow monitor netflow-Monitor input
ip flow monitor netflow-Monitor output
Also, I have set up NetFlow configuration on the Hub site. So Netflow data are sent duplicate.
During my testing only data on Dashboard/Performance/Client - once it is filtered are correct.
If I use Dashboard/Performance and I filtered Site and time Frame Top N servers and Top N clients are showing incorrect information even If I use only 1 data source / Branch router/
The same under Site Summary
Could you help me what more I could check? It looks like PI is not correlating data correctly.
My goal is to find out on every site which IP addresses utilizing the bandwidth the most.
Regards,
Marek
