|
| 1 | +Flow Data Storage (output plugin) |
| 2 | +================================= |
| 3 | + |
| 4 | +The plugin converts and stores IPFIX Data Records into FDS file format. The file |
| 5 | +is based on IPFIX, therefore, it provides highly-effective way for long-term |
| 6 | +storage and stores complete flow records (including all Enterprise-specific |
| 7 | +fields, biflow, etc.) together with identification of the flow exporters who |
| 8 | +exported these records. |
| 9 | + |
| 10 | +All data are stored into flat files, which are automatically rotated and renamed |
| 11 | +every N minutes (by default 5 minutes). |
| 12 | + |
| 13 | +Example configuration |
| 14 | +--------------------- |
| 15 | + |
| 16 | +.. code-block:: xml |
| 17 | +
|
| 18 | + <output> |
| 19 | + <name>FDS output</name> |
| 20 | + <plugin>fds</plugin> |
| 21 | + <params> |
| 22 | + <storagePath>/tmp/ipfixcol2/fds/</storagePath> |
| 23 | + <compression>none</compression> |
| 24 | + <dumpInterval> |
| 25 | + <timeWindow>300</timeWindow> |
| 26 | + <align>yes</align> |
| 27 | + </dumpInterval> |
| 28 | + </params> |
| 29 | + </output> |
| 30 | +
|
| 31 | +Parameters |
| 32 | +---------- |
| 33 | + |
| 34 | +:``storagePath``: |
| 35 | + The path element specifies the storage directory for data files. Keep on |
| 36 | + mind that the path must exist in your system. Otherwise, no files are stored. |
| 37 | + All files will be stored based on the configuration using the following |
| 38 | + template: ``<storagePath>/YYYY/MM/DD/flows.<ts>.fds`` where ``YYYY/MM/DD`` |
| 39 | + means year/month/day and ``<ts>`` represents a UTC timestamp in |
| 40 | + format ``YYMMDDhhmmss``. |
| 41 | + |
| 42 | +:``compression``: |
| 43 | + Data compression helps to significantly reduce size of output files. |
| 44 | + Following compression algorithms are available: |
| 45 | + |
| 46 | + :``none``: Compression disabled [default] |
| 47 | + :``lz4``: LZ4 compression (very fast, slightly worse compression ration) |
| 48 | + :``zstd``: ZSTD compression (slightly slower, good compression ration) |
| 49 | + |
| 50 | +:``dumpInterval``: |
| 51 | + Configuration of output files rotation. |
| 52 | + |
| 53 | + :``timeWindow``: |
| 54 | + Specifies time interval in seconds to rotate files i.e. close the current |
| 55 | + file and create a new one. [default: 300] |
| 56 | + |
| 57 | + :``align``: |
| 58 | + Align file rotation with next N minute interval. For example, if enabled |
| 59 | + and window size is 5 minutes long, files will be created at 0, 5, 10, etc. |
| 60 | + [values: yes/no, default: yes] |
| 61 | + |
| 62 | +:``asyncIO``: |
| 63 | + Allows to use asynchronous I/O for writing to the file. Usually when parts |
| 64 | + of the file are being written, the process is blocked on synchronous I/O |
| 65 | + and waits for the operation to complete. However, asynchronous I/O allows |
| 66 | + the plugin to simultaneously write to file and process flow records, which |
| 67 | + significantly improves overall performance. (Note: a pool of service |
| 68 | + threads shared among instances of FDS plugin might be created). |
| 69 | + [values: true/false, default: true] |
0 commit comments