topic Re: No Application and Network response in ExtremeCloud IQ- Site Engine Management Center

No Application and Network response

JohanHendrikx — Wed, 19 Jul 2023 08:07:13 GMT

In the analitycss dashboard there is no info about networks and application response.

I have checked the config on the switches:

ACL: ok

configure access-list telemetry any ingress
configure access-list telemetryegress any egress

ETMON: ok

configure sflow sample-rate 1024
configure sflow poll-interval 60
enable sflow
configure sflow collector 10.2.x.y port 6343 vr "VR-Default"
configure sflow agent ipaddress 10.2.x.z
configure sflow ports 1 sample-rate 1024
enable sflow ports 1 ingress

Mirror EAN ok

create mirror "EAN"
configure mirror EAN to remote-ip 10.2.x.y from 10.2.x.z ping-check off
enable mirror EAN

What can be wrong?

Re: No Application and Network response

Ryan_Yacobucci — Wed, 19 Jul 2023 12:36:39 GMT

Hello,

Can you check to see if the analytics sensor is up and running:

SSH to analytics and run:

appidctl status

Can you confirm Analytics is receiving both sflow and mirror traffic with a tcpdump:
https://extremeportal.force.com/ExtrArticleDetail?an=000082115

If you re-run appidconfig can you confirm the interfaces are in the correct mode?

Thanks
Ryan

Re: No Application and Network response

JohanHendrikx — Wed, 19 Jul 2023 14:00:20 GMT

The appid and appidserver are running.

The sflow and mirror traffice is reveiving by the analitycs server

Re: No Application and Network response

Zdeněk_Pala — Wed, 19 Jul 2023 13:40:37 GMT

Is Network Time and Application time seen in the Application Flows table?

If it is there then check your endpoint locations

If it is not there then check the ACL mirror information = does the telemetry.pol file contain the relevant information? are you receiving the ERSPAN data on the Analytics Engine?

Re: No Application and Network response

JohanHendrikx — Thu, 20 Jul 2023 11:02:00 GMT

yes there is Network time and application time in the Application Flows table.

Yes the Analityscs engine receives ERSPAN data.

What do I have to check on the endnodes?

I noticed an alarm:

No mirror traffic seen on interface gre1 since 2023-Jul-20 12:36:09

Re: No Application and Network response

Zdeněk_Pala — Thu, 20 Jul 2023 13:42:16 GMT

I suggest to check/define the EndPoint Locations: https://emc.extremenetworks.com/content/oneview/docs/network/devices/docs/c_ov_endpoint_loc.htm

the other feature to check is Dynamic Thersholidng:

https://emc.extremenetworks.com/content/oneview/docs/admin/options/docs/ov_admin_options_impact.html?#ApplicationPerformanceChart

Good luck

Re: No Application and Network response

JohanHendrikx — Fri, 21 Jul 2023 07:14:56 GMT

The endpoint locations are correct.

I cann't find the Dynamic Thresholding .

The document refers to the option tab in the left panel.

I donn't have this option.

Re: No Application and Network response

JohanHendrikx — Fri, 21 Jul 2023 10:43:31 GMT

** Extreme Analytics Version 23.4.12.3 **
process status restarts pid start time
appid started 0 7641 Fri Jul 21 11:53:05 2023
appidserver started 0 7699 Fri Jul 21 11:53:05 2023

To my knowledge the interfaces are in the correct mode. One interface for management en monitoring.

Re: No Application and Network response

Zdeněk_Pala — Fri, 21 Jul 2023 12:32:13 GMT

Re: No Application and Network response

Zdeněk_Pala — Fri, 21 Jul 2023 12:34:04 GMT

if you see values in the flow tab then the underlying infrastructure should be fine (ports, switches).

check the Analytics > Configuration > Configuration > Dynamic Thresholding

Re: No Application and Network response

Ryan_Yacobucci — Fri, 21 Jul 2023 14:56:54 GMT

Have you configured the endpoint locations to include your local networks?

Re: No Application and Network response

JohanHendrikx — Mon, 24 Jul 2023 06:09:01 GMT

All setting checked.

I've configured a new appliance and have now network response. Applicantion still no data.

Any idea?