Flow Interface Manager

Manage Device Level Flows

• Select one or more devices and the following highlighted controls are available from the navigation bar and drop-down to manage the selected device(s) and its associated flow data.

  

• • Allow Flows - to process the flow data across all interfaces on the selected devices.

  • Deny Flows - to not process the flow data for the selected devices.

  • Delete Device Rules to delete the selected flow device(s) and its associated flow data.

    To be able to delete a device from Flow Interface Manager, the incoming flows must be stopped from the device being deleted. Otherwise, it will be immediately be recreated and not deleted.

• CSV - to create a .csv report on all devices with flow. This includes such details as peer name, flows per second, maximum sample rate, interface, etc.

• Stats - click the drop-down and select Selected Devices to view statistics for selected devices or All devices to view statistics for all devices. This creates a .csv file with information such as number of accepted flows, number of dropped flows by duration, total number of dropped flows, etc.

• Display - click the drop-down to display rules for All Sources, Allowed Sources, or Denied Sources.

• Click and select Purge Device Flows to delete the flow data processed for the devices.

Delete Device Level Flow

• Select a device from the list or hover in the Actions column on a row for the device and its associated flow data you wish to delete. Click on to delete the flow device and its associated flow data.

  

• Click on OK in the warning message pop-up if you are sure you want to delete the selected flow device. Click on Cancel or x to cancel the operation.
  

  This allows deletion of only one selected flow device at a time.

Manage Interface Level Flow

• Select a device from the list or hover in the Actions column on a row for the device whose interface you want to manage. Click on to manage the selected device's interface.

  

• The Edit Flow Interfaces pop-up enables you to manage flow rules at the interface level.

  

• The list displays the following information for each individual interface on the selected device.

• • Interface - Displays the interface number the device sends to SevOne NMS.

  • Last Seen - Displays the last time flow data passed through the interface.

  • Last Write - Displays the last time flow data from this interface was written to the database. This is either the last time flow data was received for the interface or the last time SevOne NMS wrote flow data to the database based on the Write Interval you define on the Cluster Manager > Cluster Settings tab > FlowFalcon subtab.

  • Direction - Displays Incoming for incoming flow data or displays Outgoing for outgoing flow data.

  • Flows/Sec - Displays the number of flows processed per second across the interface over the past minute.

  • Sample Rate - Displays the flow data sample rate when the interface sends sampled flow data.

    • n/a – Flow data has yet to be received from the interfaces.

    • 1x - Sample rate is 1-to-1 (data is not sampled).

    • <n>x – The sample rate (e.g., if 1 packet out of 100 packets is received, this column displays 100x).

      

      The sample rate enables SevOne NMS to scale the data to compensate for the lack of notification of sampled data. The Sample Rate column is only available when you select the Display Flow Sample Rates check box on the Cluster Manager > Cluster Settings tab > FlowFalcon subtab.

  • Permission - Displays Allow when data is processed across the interface. Displays Deny when data is not processed across the interface.

  • Creator - Displays System when SevOne NMS creates the interface or a FlowFalcon Interface rule updates the interface. Displays User when a user creates or updates the interface.

  • Reason - Displays Normal when data can be processed across the interface. Displays Exceeds Capacity when the object count exceeds the peer license capacity and flows cannot be processed for the interface. For licensing purposes, each interface is equal to 300 objects.

• To manage the interface(s), select one or more interface from the list. Click drop-down and select one of the following options.

  

  • Allow Flows - to process the flow data across the selected interface(s).

  • Deny Flows - to not process the flow data across t he selected interface(s).

  • Delete Interface - to delete the selected flow device interface(s) and its associated flow data.

    To be able to delete an interface from a device, the flows received, related to this device, must not contain information for the interface to be deleted. Otherwise, it will be automatically recreated and not deleted.

  • Purge Interface Data - to delete the flow data for the interfaces.

Delete Interface Level Flow

• Select an interface from the list or hover in the Actions column on a row for the interface you want to delete. Click on to delete the selected interface and its associated flow data.

  

• Click on OK in the warning message pop-up if you are sure you want to delete the selected interface. Click on Cancel or x to cancel the operation.
  

  This allows deletion of only one selected interface at a time.