Network Management

NTA Netflow sources are not automatically added even if proper settings are applied

You may find that new Netflow sources may not be automatically added and can't be found in the Last 25 Traffic Analyzer Events on the Netflow tab, despite the settings below being enabled in the Settings.

First published date

10/18/2018 7:04 PM

Last published date

8/17/2021 1:35 PM

Overview

New Netflow sources may not be automatically added and these events aren't found in the Last 25 Traffic Analyzer Events resource, which can be found on the Netflow Summary tab.
This can happen even when following the settings in the Enable the automatic addition of flow sources  article.

Product section

Netflow Traffic Analyzer

Cause

This is can be caused by a NodeID with a NULL value in the dbo.NetflowSources table.

Please be sure to check this directly when this behavior is identified as there are no events that can be tied to this issue in the logs.

There are issues with the NetflowSources table due to a number of false entries that were not automatically verified in NPM interfaces and nodes information. 

Resolution

Note: Before removing these nodes, make sure to take a backup of your database.

  1. Stop Orion services - Start and stop Orion services
  2. Go to Database Manager - Use Database Manager to view the SolarWinds database
  3. On Orion database, right-click and select New Query.
  4. Use the following query to clear the entries with NodeID=NULL values:
    DELETE FROM [dbo].[NetflowSources] WHERE NodeID IS NULL
  5. Use the following query to truncate the table and clear the flowsources data:
    TRUNCATE table NetflowSources

 

You should be able to see new NetFlow sources added automatically once NetFlow is received by the listener.  If not, please make sure that the devices are properly exporting NetfFow data to the Collector server - NTA shows Data Not Available.