SevOne logo
You must be logged into the NMS to search.

Table of Contents (Start)

Map Flow Objects

The Object Mapping page enables you to map the indicators on the objects that plugins poll to a flow interface. This enables you to display a FlowFalcon report of the flow data that is related to the poll data from an indicator that appears in an Instant Graph. When multiple objects rely on flow data from a single interface you can map multiple objects to a single flow interface, even if the objects are on different devices. Objects for which you define a mapping display a NetFlow button when you create an Instant Graph or enable the ability to chain from a report attachment that contains the object to a FlowFalcon attachment. The object mapping includes the designation of the FlowFalcon view and the definition of the filters for the FlowFalcon Reports page to use to display the flow information you specify. When you click the NetFlow button on an instant graph, the FlowFalcon Reports page appears with the view, settings, and filters you define from the Object Mapping page.

To access the Object Mapping page from the navigation bar, click the Administration menu, select Flow Configuration, and then select Object Mapping.

images/download/attachments/42867953/mapobjects.png

When you enable the SNMP plugin for a device and you enable the device to send flow data to SevOne NMS, most SNMP objects are automatically mapped to their corresponding flow interface. For other plugin objects and SNMP objects such as QoS, the Object Mapping page enables you to map the indicator to an interface and to define the FlowFalcon report parameters that are applicable for the data.

Example: To display the flows for QoS Queues, create an object mapping that uses a FlowFalcon view that contains DSCP and has an appropriate filter to display a FlowFalcon report of the traffic that moves across the queue.

Users have access to view devices to which user has permissions. To give a user permissions to view a flow device, the user should be granted Device View access to a plugin device that is mapped to this flow device via object mapping relation.

Map List

The list displays the mapping relationship between an indicator and its corresponding flow interface.

  • Device - Displays the name of the device that contains the indicator the plugin polls.

  • Plugin - Displays the name of the plugin that polls the object that contains the indicator.

  • Object - Displays the name of the object that contains the indicator you map to a flow interface.

  • Indicator - Displays the name of the indicator you map to a flow interface.

  • Flow Device - Displays the name of the device that contains the interface that sends flow data to SevOne NMS.

  • Flow Interface - Displays the name of the flow interface to which you map the indicator.

  • Flow Direction - Displays the mapping direction.

  • View - Displays the name of the FlowFalcon view the FlowFalcon Reports page uses for the FlowFalcon report that displays the flow information for the indicator/interface.

  • Filter - Displays the name of the filter you define to apply to the FlowFalcon report.

  • Validated - Displays all valid and invalid NetFlow entries. Valid entries are displayed as Yes and invalid entries are displayed as No in this column. When you hover over a row in this column with an invalid entry, it provides a tooltip with the exact validation failure message.

Manage Mappings

The Add/Edit Object Mapping pop-up contains four sections. The SevOne Device section enables you to select the indicator to which to map the flow interface. The Flow Device section enables you to select the flow interface to which to map the indicator. The View section enables you to select the FlowFalcon view to use for the FlowFalcon report. The Filter section enables you to define the filter to apply to the FlowFalcon report. Each filter is composed of rules and if a rule is not applicable for the FlowFalcon view, the filter ignores the rule. This enables you to create filters that are applicable for multiple FlowFalcon views.

  1. Click Add Object Mapping or click images/download/attachments/42867953/editnew.png to display the Add/Edit Object Mapping pop-up

  2. In the SevOne Device section, click the Device drop-down and select the device that contains the indicator.

  3. Click the Object drop-down and select the object that contains the indicator to map.

  4. Click the Indicator drop-down and select the indicator.

  5. In the Flow Device section, click the Device drop-down and select the flow device that contains the interface.

  6. Click the Interface drop-down and select the interface to which to map the indicator.

  7. Click the Direction drop-down and select the direction of the interface mapping.

  8. In the FlowFalcon View section, click the View drop-down and select the view for the FlowFalcon Reports page to display for the indicator's interface data.

  9. Select the Filter check box to add a filter to the FlowFalcon report that limits the results in the FlowFalcon report.

  10. Click the Filter drop-down and select a filter. To create a new filter, select New Filter.

  11. In the Filter Name field, enter the filter name.

  12. Click Add Filter Rule or click images/download/attachments/42867953/editnew.png to display a new line in the list or to make the rule editable.

  13. Click the Field drop-down and select the field on which to apply the rule. Fields from the view you select appear first in the list followed by every known field from flow data. The FlowFalcon View Editor displays field details.

  14. Click the Boolean drop-down and select Is to define the rule with an Is Boolean operator or select Is Not to define the rule with an Is Not Boolean operator.

    The filter Boolean expression works such that for each unique field, SevOne NMS creates a Boolean expression that consists of the negative rules and the positive rules. The negative rules are AND'd to form a sub-expression and the positive rules are OR'd to form a sub-expression. These sub-expressions are then AND'd to form the final expression for each unique field. Then, each unique field's composite expression is AND'd to other field expressions.

  15. Click the Operator drop-down and select a comparison operator. Most operators are self-evident.

    • Select Mask to report on flow data that must match in the manner of IP address subnet masking.

    • Select Subnet to report on flow data that must be from the subnet you select from the Subnet drop-down. You define subnets on the Network Segment Manager.

  16. In the First Value field enter the first value on which to filter data.

  17. In the Second Value field, enter the second value in a value range, when applicable.

  18. Click Update to save the rule.

  19. Repeat these steps to add additional rules to the filter.

  20. To delete a filter, click the Filter drop-down and select the filter to delete then click Delete Filter.

  21. Click Save to save the mapping changes.

Created with Scroll Wiki HTML Exporter for Confluence.