This is an old revision of the document!
Searching Subscriber Statistics by IP Address
The following licenses are required:
The data set to be stored depends on the type of subscriber:
- For a public IP address, exporting Full NetFlow to QoE Stor is sufficient. Configuring export in IPFIX (Netflow 10)
- For a private IP address, additional NAT Flow data collection — translation information — is required. NAT Flow Configuration
Information is searched through aggregated data. Initially, SSG exports raw data to QoE Stor, and by default, aggregation is performed every 15 minutes. More on changing aggregation and re-aggregation intervals.
Raw unaggregated data is available in the following sections of QoE Analytics in the GUI:
- Raw Full NetFlow (by default, data is stored for 2 hours)
- Raw NAT Flow (by default, data is stored for 2 hours, QoE license required)
Aggregated statistics are available in the following sections of QoE Analytics in the GUI:
- NetFlow (by default, data is stored for 14 days)
- NAT Flow (by default, data is stored for 14 days, QoE license required)
Configuring Data Retention Period
In the GUI, go to Administrator → GUI Configuration → Settings → QoE Stor: DB lifetime settings:
- For Raw Full NetFlow, select QoE Stor fullflow main log lifetime in hours (1).
- For NAT Flow, select QoE Stor NAT aggregated log lifetime in days (2).
When increasing the data retention period, it's recommended to enable the deletion of old data when the disk fills up: Administrator → GUI Configuration → Settings → QoE Stor: Disk settings → Select Enable force moving data for DEFAULT disk – choose Enable data removing! → Select Move factor for DEFAULT disk – set the value to 0.1.
You can find out how much disk space logs are using in QoE Analytics → Administrator → Reports → Tablespace info.
Searching for Subscriber Activity in the SSG GUI
For a Private IP Address. NAT Flow Section. QoE License Required
The ability to view subscriber activity data appears after generating the NAT log — instructions NAT Flow Configuration.
In the GUI, navigate to QoE Analytics → NAT Flow.
In the NAT Flow section, you need to:
- Select the time period
- Enable the “IPv4 source address” and “IPv4 destination address” filters (check the box)
- Enter values for the enabled filters and apply changes
For a Public IP Address from Aggregated Data. NetFlow Section
In the GUI, navigate to QoE Analytics → NetFlow.
In the NetFlow section, you need to:
- Select the time period (by default stored for only 14 days!)
- Enable the “Subscriber,” “Login,” and “Host IP” filters (check the box)
- Enter values for the enabled filters and apply changes
For a Public IP Address. Raw Full NetFlow Section
In the GUI, navigate to QoE Analytics → Raw Full NetFlow.
In the Raw Full NetFlow section, you need to:
- Select the time period (by default stored for only 2 hours!)
- Enable the “IPv4 source address” and “IPv4 destination address” filters (check the box)
- Enter values for the enabled filters and apply changes