icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading NTO Statistical Reporting
SHA256 checksum (nto-statistical-reporting_20.tgz) 6ce1fb37b0d12f01a867c32b55aa3f5166f38e01fd98ca6c5ac1e431add0e4ea SHA256 checksum (nto-statistical-reporting_10.tgz) 70834d6788a49c243c44045bda64ee13145b66b8d2e8423b34058c5f0b5542dc
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

splunk

NTO Statistical Reporting

This app has been archived. Learn more about app archiving.
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
Details
The Ixia NTO application for Splunk allows Ixia Net Tool Optimizer (NTO) statistical data to be indexed and reported in Splunk. This data helps an IT organization to monitor, correlate and troubleshot the health of their network visibility infrastructure - for example see a report of the percentage of duplicate packets so that un-necessary packet overhead can be remove (i.e. by the NTO), allowing for improved performance of network, security and application monitoring tools.

** Author: Iordache Nicolae, Greg Copeland **

The Ixia NTO app for Splunk provides basic statistics reporting from the Net Tool Optimizer (NTO) by Ixia, The app relies of the NTO's WebApi feature that is available starting with the 3.9.0/4.1.0 releases of the NTO.

Each configured NTO chassis is polled for statistics periodically through a scripted input. The
the received statistics are indexed into Splunk, and can be visualized from the reporting views. Statistics for all types of ports (tool, network) and dynamic filters can be collected and visualized. Bidirectional ports are treated as both tool ports & network ones (and will provide both types of statistics)

1) Target Platform . The Ixia NTO app is intended to be used with Splunk 5.0.5.or newer.

2) System requirements. This app has been tested with Splunk running on Windows & Mac based operating systems. (other OS are possible, but not tested at this time)

3) Installation. Install the app using the Splunk platform;
Go to Manager -> Apps -> Install App from File
- Browse for the "anue_app.spl" file
- Click Upload
- The Splunk Framework detects that it needs to restarts itself
- Click to Restart Splunk
After installation the app label is visible and can be run within the Splunk Platform "App" tab.

4) Configuration. The app starts with no settings configured. Use the in-app
"Setup" tab to add chassis. Input the desired NTO chassis ip address, along with
the credentials necessary to access it and the WebApi port (leave the default tcp port 8000 ). Then for each added chassis the app allows the possibility to configure what tool/network/bidirectional ports and dynamic filter to poll . Use the "Setup" menu anytime you need to change the current poll configuration.

Note: Within the Splunk Manager->Data Inputs->Script , do not change the properties
for the app's inputed script, that is "...\anue.py"

5) Running the Ixia NTO app. After at least one port a dynamic filter has been configured for a NTO, the app periodically polls that NTOs and ask statistics for the configured entities . The received statistics are indexed within Splunk, and used to build visualizations. The available views are grouped into three menu tabs. Tool Port Statistics, Network Port Statistics, Dynamic Filters Statistics.
Tool Port Statistics menu contains views concerning tool ports only : "Current Utilization", "Current Rate", "Current Drops" and "De-Duplication". The "De-Duplication" view provides visualization only for Advanced Feature Module (AFM) type TOOL ports.
Network Port Statistics menu contains views associated only with network ports: "Pass Deny Rate","Current Rate","Current Utililization", "De-duplication". Again the "De-Duplication" view provides visualization only for Advanced Feature Module (AFM) type NETWORK ports.
The Dynamic Filters Statistics menu groups views related to dynamic filters : "Current Rate in Bits","Current Rate in Packets".
In each of the available views there is a UI dropdown that allows to select the available NTO from which to visualize statistics. Selecting an option from the mentioned dropdown generates an additional dropdown containing the configured entities for the selected NTO, if there are any available. The time range can be selected using the Splunk build-in time range picker.

6) Feature list. Currently the following statistics are available for visualization:
TOOL Ports :
- tp_current_tx_utilization (Current Utilization view)
- tp_current_pass_percent_packets (Current Utilization view)
- tp_current_tx_rate_bits (Current Rate view)
- tp_current_drop_rate_packets (Current Drops view)
- tp_current_tx_rate_packets (Current Drops view)
- tp_current_insp_rate_packets (Current Drops view)
- tp_total_dedup_percent_packets (De-Duplication view)

NETWORK Ports :
- np_current_pass_rate_packets (Pass Deny Rate)
- np_current_deny_rate_packets (Pass Deny Rate)
- np_current_rx_rate_bits (Current Rate)
- np_current_rx_utilization (Current Utililization)
- np_total_dedup_percent_packets (Deduplication)

DYNAMIC FILTERS :
- df_current_pass_rate_bits 
- df_current_insp_rate_bits
- df_current_deny_rate_bits
- df_current_pass_rate_packets
- df_current_insp_rate_packets
- df_current_deny_rate_packets

7) Troubleshooting. If the Ixia NTO app does not behave as expected, check the app logs
for indication of encountered problem. These are located at :
-[SPLUNK_HOME]\var\log\splunk\"Anue-nto_ip_address".log for each NTO
-[SPLUNK_HOME]\var\log\splunk\AnueController.log
-[SPLUNK_HOME]\var\log\splunk\AnueChassisSelector.log
-[SPLUNK_HOME]\var\log\splunk\AnueIdSelector.log
-[SPLUNK_HOME]\var\log\splunk\AnueConfigParser.log
If the problem persists, restarting the Splunk Framework is suggested.

8) Known issues and limitation.
- The "Custom time" option in Time Range Picker is not well supported.

Release Notes

Version 2.0
Dec. 19, 2013
Version 1.0
Oct. 21, 2013

The Anue Application for Splunk allows indexing & reporting of select Anue Net Tool Optimizer (from IXIA) statistics in Splunk. Included README file provides more details.


Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.