cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
692
Views
5
Helpful
5
Replies

MARS Utilization status

davidcruise
Level 1
Level 1

as we know that the MARS capacity is masured by :

-events/sec

-netflow event/sec

i have MARS 100 installed in my network , it has capacity:

-5000 event/sec.

-150000 netflow/sec

how can i know the status of the current utilization (events/sec , netflow/sec) for My deployed MARS , because i want to know if it near the full capacity or not ?

5 Replies 5

Farrukh Haroon
VIP Alumni
VIP Alumni

On the MARS 'Summary' page you see the EPS for the whole day (last 24 hours). You can divide that figure to get the approx. EPS. e.g.

Netflow 128,862

Events 9,384,184

9,384,184 / 86,400 = 108.6 EPS

1 day = 86,400 seconds.

Regards

Farrukh

bj2001holt
Level 1
Level 1

I have found the best way to do this is to log into the console of the box and look at the backend logs (show log backend). Every couple of minutes it will log the current EPS and Netflow calculations. You should also watch the database usage to ensure that log data is not being overwritten to quickly (pndbusage).

Thanks for your reply , but i don't find the command "show log backend" , when i access the CLI through SSH , should i access console or what?

The command is 'pnlog show backend'

Please rate if helpful,

Regards

Farrukh Haroon

This must be done on the Local controllers for those of you that have Local and Global controllers out there as the Global do not "receive" events

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: