Flow Analytics

The Flow Analytics Service computes Top-N aggregations for 1 minute, 30 minutes, and 1-day intervals and also evaluates thresholds on interface usage. It provides Traffic Ingress and Egress details of every interface level.

The Flow Analytics Service is also responsible for aggregation processes. It refines the raw data, filters the results, and aggregates the KPI values. The values are aggregated by SUM, and the results are then stored in Network Performance Insight® database.

Flow Analytics Service aggregates the data every 1 minute, 30 minutes, and 1-day intervals. For 1-minute aggregation, it is distributed based on record segmentation and the aggregation is based on SUM of RAW data. For 30 minutes and 1-day aggregation, it is distributed based on the aggregation type. The aggregation for 30 minutes is based on SUM of 1-minute data and for daily aggregation is based on SUM of 30-minutes data.

The Flow Analytics Service also triggers the IP to Domain Name, and Domain Name to IP resolution to DNS service.

Flow Analytics Service provides these basic functions:
  • Categorizes, aggregates, and ranks the data that is collected by the Collector Service.
  • Detects and alerts real-time threshold violations. A threshold is a value that is compared against metrics to determine whether the metrics exceed or drop below a specific constraint. Currently, only burst threshold is supported. Burst threshold ignores the natural network bursts by evaluating how long in a row the violations occurred per resource. Burst thresholds can be set and reset multiple times.