SD-WAN Flow Views Additional Configuration Guide
Additional Configuration
This guide explains how to use the additional fields in SD-WAN Flow Views options templates.
SevOne NMS provides the ability to report on flow fields available in IPFIX Data templates directly. This includes Generic IPFIX Fields which has Standardized fields defined by the IPFIX protocol and Enterprise Fields which has Custom fields that are defined by specific vendors or organizations.
Enhance Data with Options Templates
Users can augment data from source templates by incorporating additional information from the options templates. The options templates provide a detailed explanation of source IDs present in the data templates, enabling the conversion of these IDs into vendor-specific attributes. For example: Application IDs can be converted into Application names and Application category.
This can be achieved by creating Synthetic Keys on SevOne NMS.
Synthetic Keys on SevOne NMS
The Synthetic Key Field combines one or more fields from the options templates, creating a new composite field. Once created, this field is automatically appended to each source template that contains the corresponding scope field. This enables granular reporting and analysis along with providing enriched insights by combining relevant data points.
Create a Synthetic Key
- From Administration, select Flow Configuration > FlowFalcon View Editor.
- Select the Devices & Templates tab, then click on the Options Templates tab.
- Click the Configure icon for any options templates. This will open the Synthetic Key
Field Editor.
- Display Name - name of the Synthetic Key Field to be created. It must be unique across all other defined NetFlow fields.
- Resolve Key - refers to the scope field on which the expression is defined. The scope field must exist in the source template.
- Expression - defines the format for the text displayed, based on the selected fields.
- Enabled - select the check box when data should be collected for the Synthetic Key Field as shown below.
-
Once all fields are populated, click on Save as New to create the Synthetic Keys. Upon saving, the Synthetic Key Field is automatically appended to all source templates.
- To access the Synthetic Key Field, execute the steps below.
- Navigate to Administration > Flow Configuration > FlowFalcon View Editor.
- Select the Devices & Templates tab.
- Under the Source Templates tab, scroll to the bottom of the list to select the new
Synthetic Key Field added above.
Create Flow Views with Synthetic Key Fields
- From FlowFalcon View Editor, select FlowFalcon Views tab to create a new view.
- Complete the required information for the new view you want to create.
- Include the newly added Synthetic Key Field from Available Fields pane to the Fields In View pane.
- Optionally, add any other key fields you want to include in the view to further customize it.
- Click Save to complete the creation of the new view.
Example
