<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
+1 for elasticflow<br>
<br>
But make sure to clear the indexes, as it wasn't included with
the project, when we installed ours.<br>
<br>
Here's our solution that delete them after 90 days.<br>
<br>
----- Crontab<br>
<br>
0 12 * * * (cd /usr/local/<your corp>/scripts; ./<your
corp>_elastiflow_prune.sh) > /dev/null 2>&1<br>
<br>
----- Content of the *_prune.sh for Linux<br>
<br>
#!/bin/csh -f<br>
<br>
set d_current=`date "+%s"`<br>
set d_90=`expr ${d_current} - \( 90 \* 24 \* 60 \* 60 \)`<br>
set idx=`date -d @${d_90} "+%Y.%m.%d"`<br>
<br>
curl -XDELETE <a class="moz-txt-link-rfc2396E" href="http://localhost:9200/elastiflow-${idx}">"http://localhost:9200/elastiflow-${idx}"</a><br>
<br>
<pre class="moz-signature" cols="72">-----
Alain Hebert <a class="moz-txt-link-abbreviated" href="mailto:ahebert@pubnix.net">ahebert@pubnix.net</a>
PubNIX Inc.
50 boul. St-Charles
P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
Tel: 514-990-5911 <a class="moz-txt-link-freetext" href="http://www.pubnix.net">http://www.pubnix.net</a> Fax: 514-990-9443
</pre>
<div class="moz-cite-prefix">On 2019-05-18 00:19, Crist Clark wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAAcrURJ8Kr5dtQ-h_H3YLibh27Kvm9XToc0KBpwqAdJW8f-cXA@mail.gmail.com">
<pre class="moz-quote-pre" wrap="">Been loving Elastiflow. Way overkill for what you need, but it's
actually pretty easy to setup.
<a class="moz-txt-link-freetext" href="https://github.com/robcowart/elastiflow">https://github.com/robcowart/elastiflow</a>
On Fri, May 17, 2019 at 7:25 AM Dennis Burgess via NANOG
<a class="moz-txt-link-rfc2396E" href="mailto:nanog@nanog.org"><nanog@nanog.org></a> wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">
I am looking for a free program to take netflow and output what the top traffic ASes to and from my AS are. Something that we can look at every once in a while, and/or spin up and get data then shutdown.. Just have two ports need netflow from currently.
Thanks in advance.
Dennis Burgess, Mikrotik Certified Trainer
Author of "Learn RouterOS- Second Edition”
Link Technologies, Inc -- Mikrotik & WISP Support Services
Office: 314-735-0270 Website: <a class="moz-txt-link-freetext" href="http://www.linktechs.net">http://www.linktechs.net</a>
Create Wireless Coverage’s with <a class="moz-txt-link-abbreviated" href="http://www.towercoverage.com">www.towercoverage.com</a>
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
<br>
</body>
</html>