Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Netflow Traffic Analyzer (NTA) > NTA Netflow sources are not automatically added even if proper settings are applied

NTA Netflow sources are not automatically added even if proper settings are applied

Updated January 30, 2017

Overview

You may find that new Netflow sources may not be automatically added and cannot be found in the Last 25 Traffic Analyzer Events on the Netflow tab even when following the settings in the Enable the automatic addition of flow sources article.

Environment

All NTA environments, particularly those upgraded from 3.11 to 4.x

Cause 

This is can be caused by a NodeID with a NULL value in the dbo.NetflowSources table.

Please be sure to check this directly when this behavior is identified as there are no events that can be tied to this issue in the logs.

There are issues with the NetflowSources table due to a number of false entries that were not automatically verified in NPM interfaces and nodes information. 

Resolution

Note: Before removing these nodes, make sure to take a backup of your database.

  1. Stop Orion services - Use Orion service manager.
  2. Go to Database Manager - Use Database Manager to view the Solarwinds database.
  3. On Orion database, right-click and select New Query.
  4. Use the following query to clear the entries with NodeID=NULL values:
    DELETE FROM [dbo].[NetflowSources] WHERE NodeID IS NULL
  5. Use the following query to truncate the table and clear the flowsources data:
    TRUNCATE table NetflowSources

 

You should be able to see new NetFlow sources added automatically once NetFlow is received by the listener.  If not, please make sure that the devices are properly exporting NetfFow data to the Collector server - NTA shows Data Not Available.

 

Last modified
17:38, 28 Jun 2017

Tags

Classifications

Public