Hi,
I am trying to build an overall dashboard for 5 specific applications which are defined under applications in netflow. The idea would be to see rates, class of service, CBQoS.
The idea would be to have one page with overall traffic and then tabs for individual sites using the same applications. I am trying to use SWQL in a table and chart to see the trend and development in each.
I am using latest version of SDK, however I keep seeing strange results.
I am doing below:
SELECT
[flow].[TimeStamp],
[flow].[ApplicationID],
[apps].[Name],
(SUM([flow].[EgressBytes])/60) AS eBytes,
(SUM([flow].[IngressBytes])/60) AS iBytes,
(SUM([flow].[TotalBytes])/60) AS TotalBytes
FROM Orion.NetFlow.Flows AS flow
INNER JOIN Orion.Netflow.Applications AS apps ON [flow].[ApplicationID] = [apps].[ApplicationID]
WHERE [apps].[ApplicationID] = xxxxxxx AND ([flow].[TimeStamp] >= (GetUTCDate() - 0.5))
GROUP BY [flow].[TimeStamp] ,[flow].[ApplicationID]
ORDER BY [flow].[TimeStamp] asc
Where xxxxxxx is the application ID.
If I try to limit using more than one appID like WHERE [apps].[ApplicationID] = xxxxxxx OR [apps].[ApplicationID] = xxxxxxx. It suddenly reports all application ids, not just the once I filter.
At a later stage I would like to only include certain nodes or interfaces.
Am I doing something wrong here
Best Regards
Troels