03-09-2023 12:52 PM
We have two x695 switches running XOS 31.7.1.4 31.7.1.4-patch1-36. We opened a case to see if there was a way to disable analytics on a specific port and were told that it can be done but is not officially supported. The port in question is the external side of our firewall and it is generating a lot of traffic that fills up the logs (and causes concern even the firewall is blocking the traffic). We tried the unofficial steps of trying to remove the port from telemetry but that failed (below)
* Summit-BTP-x695-01.12 # configure access-list telemetry ports 1-15,17-62 ingress
Error: ACL install operation failed - filter hardware full for vlan *, port 62
Is there any way in Analytics to filter out a specific port or IP from being displayed in the Application Flows?
03-17-2023 08:32 AM
I realized that I was misunderstanding the filters and needed to make two rules (sip=0.0.0.0/0,exclude:dip=144.202.238.155/32 and sip=144.202.238.155/32,exclude:dip=0.0.0.0/0).
However, if we could filter out specific switch ports, that would be ideal for what we are looking to do.