Hi Luca,

When you use -F es.. like this when do flows get sent to Elastic Search? As 
they expire? Once a day?
Same question when you use -F db.

Thanks,
Steve

On 02/20/2015 05:00 AM, Luca Deri wrote:
Bruce,
-F db dumps all flows on disk and thus it can quickly exhaust your storage. i 
suggest you to write data externally (e.g. -F es...) in ElasticSearch and let 
ES implement your retention policy

Cheers Luca

On 02/18/2015 12:04 AM, Bruce Griffis wrote:
Someone provided great instructions for installing NTOPNG 1.2 on Ubuntu, so I 
upgraded my 1.1 to the current release (thank you!). I enabled saving historic 
flows (-F option). I noticed that it is eating up a LOT of space, and of course 
it is - since storing flows for all traffic on my home LAN is a lot - with some 
23 active devices (and a few lower use devices).

Does ntopng re-use database storage when it starts hitting storage constraints? 
Is there a utility to just keep the previous X number of days and delete the 
rest? My storage utilization was less than 1% when I first started storing 
flows. Now I am at 12% in just 2 days or so. What happens when I start bumping 
up against storage constraints on my harddrive?


_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop



_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop


--
Stephen Clark
*NetWolves Managed Services, LLC.*
Director of Technology
Phone: 813-579-3200
Fax: 813-882-0209
Email: [email protected]
http://www.netwolves.com
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to