The LiveNX Flow reports have a Search field to filter the flow report results based on the system and flow entities. The Search alphanumeric field is located in the report header. Searchable system entities include device, interface, site, tag and WAN parameters. Searchable flow entities include IP address, DSCP, port, protocol and application.
- Click on the Search field to begin typing in the desired search parameters.
- The general syntax of the search field is shown in the example displayed as a default entry.
(site = Honolulu | site = Chicago) & wan & flow.app = webex-meeting
- Use the Enter key to apply the search. Click on the ‘X’ to clear the search field. Click on the down carat symbol to display a history of previous searches. The searches are kept on a per client basis; the history is removed with the LiveNX Client is closed.
- Boolean expressions OR = ‘|’ and AND = ‘&’; grouping uses ‘( )’ )
The Search editor provides tool tips to assist in creating the search expressions. Click on the desired entity to add it to the expression. NBAR uses dynamic lists based on the capability of the device.
Filtering can also be done through the Filter combo box; filtering is done first with the combo box and then the Search alphanumeric field. The Search is done with a one pass search. In addition, the system level entities need to be in a single clause. For example, (site = Honolulu | site = Chicago) & flow.ip=18.104.22.168 is allowed, but (site = Honolulu & flow.ip=22.214.171.124) | (site = Chicago & flow.ip=126.96.36.199) is not allowed.
LiveNX supports a large number of system and flow searchable entities. Click on the ? to display the list of searchable entries as well as some example search expressions.
Drill Down/Change Report
When viewing a time-series or aggregation flow report, you can drill-down to provide in-depth analysis of a particular flow in the report or change the flow report without changing the report configuration options. If you would like to drill down to see details on a particular entry, click on the desired flow, right-click and choose a drill down option.
In this example, selecting Drill Down on 192.168.1.33 and then selecting DSCP report creates a DSCP flow report as a tabbed selection next to the Bidirectional Network Pair report. The drilled down DSCP report shows the DSCP values filtered on the IP address chosen from the previous chart. The Filter: IP designation is automatically added to the Tags and Filters configuration header of the flow report.
To drill down further, select the desired DSCP value and select another report. In this case, selecting the Drill Down on 0 and then selecting Source Country report will create a Source Country flow report as another tab, filtered by IP address and DSCP value. The resultant flow report will indicate both the Filter. IP and the Filter: DSCP in the Tags and Filters section of the flow report.
You can change report from a given flow report using the same report configuration parameters by right-clicking on a flow in the table and be selecting one of the other reports in the drop-down menu. Instead of using the Drill Down feature, which automatically filters the list, selecting a report will create a new unfiltered flow report as another tab. In this example, highlighting a flow and clicking on DSCP report will create another DSCP report as a second tab, this time with no filters.
Since it is not a Drill Down on type report, LiveNX creates another DSCP tab containing a DSCP flow report that does not have an IP filter in the Tags and Filters section.
Right-clicking on an Address flow report allows three other features: Add to IP Blacklist, Add to IP Mapping, Copy to Clipboard.
- Add to IP Blacklist – right click on the desired IP address in an Address flow report and select Add to IP Blacklist to move this IP address to the blacklist stored in LiveNX. Details on the IP Blacklist can be found in Chapter 11 – Tools.
- Add to IP Mapping – right click on the desired IP address in an Address flow report and select Add to IP Mapping to bring up the Add IP Mapping dialog box. Details on the IP Mapping feature can be found in Chapter 11 – Tools.
- Copy IP Address to Clipboard – right click on the desired IP address in an Address flow report and select Copy IP Address to clipboard to copy the IP address to the client clipboard. In this example, using View by Application creates a Combined Application flow report using the selected flow.
There are seven report actions: Save, Save As, Delete, Schedule, PDF, Export to CSV and Help. The flow report has an additional report action: Create.
- Save – LiveNX brings up a dialog box. Enter a report name in the dialog box. The report will be saved under Custom Reports.
- Save As – after selecting a saved report for viewing, if you change any report attribute (e.g., time span, device, interface), you can create a new custom report by clicking on Save As and naming the report with a different report name.
NOTE: LiveNX will not allow you to save another custom report with the same report name.
- Create – create a custom flow report choosing a user-defined title and report fields. By clicking and dragging on the headers shown in the Preview window, you can further customize your flow report by reordering the data fields within your report. Clicking on Create will add the new custom report to the Custom Reports section. The Create feature is available for Admin users only.
- Delete – deletes a report. Select a report name under Custom Reports and click on Delete.
- Schedule – allows automatic generation and delivery of custom reports. Additional details can be found in the Report Scheduler section of this chapter.
- PDF – allows creating and saving a pdf version of the report. For flow reports with multiple tabs, clicking on PDF provides a user-selectable choice between creating a PDF of only the current tabbed report or a PDF of all the tabbed reports in one collated report.
- Export to CSV – allows you to save all the data shown in the table, which is useful for external analysis.
- Help – launches the LiveNX User Guide.
Only Admin and Full Config users can add, edit, and delete reports. All other users can generate reports, including viewing saved reports.
Routing reports give you information on routing adjacency history and events. You can access the reports by selecting Reporting > Routing > Reports in the main menu or clicking on the Reports button in the toolbar in the Routing tab.
LiveNX provides two types of routing reports as shown in the list in the top left-hand window. The Routing Adjacency History report displays any and all OSPF or EIGRP adjacencies established during the specified time period for a specified device or all devices. In between the two dropdown lists is a … labeled button. Click to display a device pick list with an alphanumeric entry for searching the list. For more details on the device pick list, please see the Device Pick List section in the QoS reports. The Adjacency Events report shows the time-stamped history of adjacency status changes (from up to down, or down to up).
NOTE: The neighbor up/down events in the Adjacency Events report is determined differently for OSPF, IS-IS, and EIGRP. For OSPF, a neighbor’s up or down status indicates that the neighbor state changed from any of the non-full states to full, or from full to any non-full states, respectively. For IS-IS, up indicates that the adjacency state is up and down indicates that the adjacency state is down, init or failed. For EIGRP, a neighbor’s up or down status is determined by whether the neighbor exists in the SNMP table.
The Routing Neighbor History report displays all OSPF, IS-IS or EIGRP adjacencies established during the specified time period for a specified device or all devices.
The length of historical data is selectable at the top of the chart, and there are five to choose from 1h (one hour), 6h (six hours), 1d (one day), 1w (one week) and Custom. When selecting Custom, select the desired Start Time and End Time for the report. Select the desired device or All Devices in the combo box.
Click Execute Report to generate a report. Any report configuration can be saved as a custom report for easy retrieval at a later time.
IP SLA Reports
IP SLA reports give you in-depth information on the tests running in LiveNX. You can access the reports by selecting the Reporting > IP SLA > Reports menu item in the main menu or clicking on the Reports button in the toolbar in the IP SLA tab.
You can view report data for the following time ranges:
- 1h – one hour
- 6h –six hours
- 1d – one day
- 1w – one week
- 30d – thirty days
- Custom (specify a custom date and time range for the report)
- Click on a time range in the report header to select it.
Warning thresholds allow you to customize the dashboard parameters. Click the “+” icon next to the “Warning Thresholds” label to expose the following options:
- Video – video test types include telepresence, IP TV, and VSC. Latency, loss, and jitter values are configurable, allowing you to fine-tune the test to your needs.
- Voice – the MOS score is used to determine health.
- Data Applications – data applications are a collection of IP SLA test types, including, DNS, DHCP, HTTP, FTP, PATH_ECHO, UDP_ECHO, and ICMP_ECHO tests. Latency is the most important value for these tests.
Several default report types are shown in the left-hand tree view:
- Overall Health – displays a table with the average IP SLA test results and health values for all tests.
- Overall System Health – displays the same values as the Overall Health report, but results are aggregated by system test instead of individual tests.
- Single Test Time Series – displays a time series report for an individual IP SLA test.
- Single Type Health – displays the min/max/average and health values for a single test type (DHCP, DNS, FTP, etc.). You can run the report for all devices or a single device that you specify. The columns in the report change depending on the test type. For example, a data application test type will only show latency, whereas a video test will show latency, loss, and jitter.
- Video Operation Threshold – displays the health attempts of all video tests. You can run the report for all devices or a specified device. • Video Operation Time Series – displays the loss, jitter, and latency values of all videos tests on all devices or a specified device in a time-series report.
Device Pick List
The Single Test Time Series, Single Type Health, Video Operation Threshold and Video Operation Time Series reports provide a device drop-down menu and a … labeled Device Pick List button. Click to display a device pick list with an alphanumeric entry for searching the list. For more details on the device pick list, please see the Device Pick List section in the QoS reports.
Drilling-down to Reports
You can drill-down from a report to see a different view of the data. For example, you can right-click on a row in the Overall Health report to display a time-series report of the selected test.
You can configure a report and save the selected parameters, making it easy for you or other users to run the report at a later time. Configure the parameters of the report and then click the Save or Save As button in the lower-right section of the IP SLA Reports dialog.
Printing and Exporting Reports
Click the “View HTML” button to create an HTML file of the report, making it easy to print and share the report. Click the Export to CSV button to export the data shown in the report to a comma-separated value file. Additional Ways to Create Reports Reports can be created from the system topology view. Find a test that you want to run a report on, right-click the test’s edge and select Show Time Series Report. Reports can also be created from the IP SLA device view. Right-click on an item in the test legend (right-hand panel), and select Show Time Series Report.