19.5 Customizing the NetFlow Configuration

This section provides information about customizing your NetFlow configuration.

19.5.1 Tuning the Network Flow Data Collection

You can configure the following NetFlow data collection parameters in the /etc/opt/novell/sentinel/config/netflow-collector-configuration.properties file:

Table 19-2 NetFlow Data Collection Configurable Parameters

Parameter

Default Value

Description

netflow.collection.interval

10

Specifies the data collection interval in minutes.

netflow.forwarder.batchsize

6

Number of aggregated records (in thousands) per batch, sent from the NetFlow Collector Manager to the Sentinel server.

rest.endpoint.host

<IP_address>

The IP address or hostname of the Sentinel server that receives network flow data. If you are specifying the hostname, you should specify the fully qualified domain name (FQDN).

netflow.collector.id

<Collector_Manager_ID>

The UUID of the NetFlow Collector Manager. Sentinel identifies the NetFlow Collector Manager by this ID. If you have assigned the NetFlow Collector Manager to a specific tenant, Sentinel uses the UUID to map data from the NetFlow Collector Manager to a specific tenant. Therefore, you should not modify the UUID.

netflow.collection.pool_size

10

Number of simultaneous collection processes that the NetFlow Collector Manager runs. The maximum value is 20.

netflow.reader.nfdump.daemon.port

3578

The port used by the NetFlow Collector Manager to collect raw network flow data from network devices.

rest.endpoint.port

8443

The port used by the NetFlow Collector Manager to connect to the Sentinel server to send data.

netflow.rawdata.lifetime

1

The retention period (in weeks) for the raw network flow data to be stored in the NetFlow Collector Manager.

The minimum value is 10M (10 minutes). You can also set the value in M - Minutes, H - Hours, d - Days, and w - Weeks.

NOTE:M, H, d, and w are case sensitive.

netflow.error.queuesize

5760

The number of output files in queue to be sent to Sentinel. The maximum value is 5760. When the queue size reaches the maximum value, the data collector deletes the oldest output file.

To configure network flow data collection:

  1. Log in to NetFlow Collector Manager computer.

  2. Open the /etc/opt/novell/sentinel/config/netflow-collector-configuration.properties file in an editor.

  3. Change the parameters as necessary. For information about the parameters, see Table 19-2, NetFlow Data Collection Configurable Parameters.

    NOTE:For security reasons, the NetFlow Collector Manager stores the encrypted password in the netflow-collector-configuration.properties file and you cannot change the password in this file. To change the user name and password, you must run the ./configure.sh script. For more information, see Changing the User Name and Password in the NetFlow Collector Manager.

  4. Save the changes.

  5. Restart the NetFlow Collector Manager.

19.5.2 Changing the User Name and Password in the NetFlow Collector Manager

To change the NetFlow Collector Manager user name and password:

  1. Log in to the NetFlow Collector Manager computer.

  2. Change to the following directory:

    /opt/novell/sentinel/bin

  3. Run the NetFlow configuration script as follows:

    /opt/novell/sentinel/setup/configure.sh

  4. Change the user name and password.

  5. Restart the NetFlow Collector Manager.