Excellent stuff, Anthony. Precisely what we need, experience from ops. Look forward to it and to giving it the proper visibility.
Paolo On Sat, Mar 03, 2018 at 04:24:12PM +0000, Anthony Caiafa wrote: > Depending on your level of netflow you may have to look for an alternative > backend. I am currently working on a post that describes how I am using > pmacct to process about 100Billion records a day and storing it for > visualization with superset. > > On Sat, Mar 3, 2018 at 11:15 AM Paolo Lucente <pa...@pmacct.net> wrote: > > > > > Anthony is correct. The incarnation of that blog entry about pmacct + > > ELK is the pmacct-to-elasticsearch project that you can find on GitHub: > > > > https://github.com/pierky/pmacct-to-elasticsearch > > > > Also here you can find a guide on how to integrate pmacct with InfluxDB > > (on top of the same blog entry that Anthony already referenced about > > ELK): > > > > https://github.com/pmacct/pmacct/wiki/External-Links > > > > Paolo > > > > On Sat, Mar 03, 2018 at 03:30:38PM +0000, Anthony Caiafa wrote: > > > It seems you can probably build one based off these two > > > > > > > > https://blog.pierky.com/integration-of-pmacct-with-elasticsearch-and-kibana/ > > > > > > > > https://blogs.cisco.com/security/step-by-step-setup-of-elk-for-netflow-analytics > > > > > > > > > I am sure with a little more is googling you’ll be able to find something > > > or put a post together. > > > > > > On Sat, Mar 3, 2018 at 9:12 AM Jon Nistor <nis...@snickers.org> wrote: > > > > > > > That would be really awesome if there were a guide :> > > > > > > > > > > > > From: Mike Hammett <pmacct-discuss...@ics-il.net> > > > > <pmacct-discuss...@ics-il.net> > > > > Reply: pmacct-discussion@pmacct.net <pmacct-discussion@pmacct.net> > > > > <pmacct-discussion@pmacct.net> > > > > Date: March 3, 2018 at 9:03:00 AM > > > > To: pmacct-discussion@pmacct.net <pmacct-discussion@pmacct.net> > > > > <pmacct-discussion@pmacct.net> > > > > Subject: [pmacct-discussion] pmacct + ELK made easy? > > > > > > > > Anyone know of a good A - Z pmacct - ELK stack guide? Debian preferred, > > > > but not required. > > > > > > > > > > > > > > > > > > > > ----- > > > > Mike Hammett > > > > Intelligent Computing Solutions > > > > http://www.ics-il.com > > > > <https://www.facebook.com/ICSIL> > > > > <https://plus.google.com/+IntelligentComputingSolutionsDeKalb> > > > > <https://www.linkedin.com/company/intelligent-computing-solutions> > > > > <https://twitter.com/ICSIL> > > > > Midwest Internet Exchange > > > > http://www.midwest-ix.com > > > > <https://www.facebook.com/mdwestix> > > > > <https://www.linkedin.com/company/midwest-internet-exchange> > > > > <https://twitter.com/mdwestix> > > > > _______________________________________________ > > > > pmacct-discussion mailing list > > > > http://www.pmacct.net/#mailinglists > > > > > > > > _______________________________________________ > > > > pmacct-discussion mailing list > > > > http://www.pmacct.net/#mailinglists > > > > > _______________________________________________ > > > pmacct-discussion mailing list > > > http://www.pmacct.net/#mailinglists > > > > > > _______________________________________________ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists