# Kibana settings for IPFIX/Netflow **URL:** \ **Category:** Elasticsearch\ **Created:** [July 21, 2014, 8:50am UTC](https://discuss.elastic.co/t/kibana-settings-for-ipfix-netflow/18757 "2014-07-21T08:50:27Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Janet](https://avatars.discourse-cdn.com/v4/letter/j/5e9695/32.png) [@Janet](https://discuss.elastic.co/u/Janet)\ **Post date:** [July 21, 2014, 8:50am UTC](https://discuss.elastic.co/t/kibana-settings-for-ipfix-netflow/18757/1 "2014-07-21T08:50:27Z")
Every minute, we take a 1/4096 sample of traffic using IPFIX. I want to graph this data as bits/sec in a histogram. However, my math & kibana skills are failing me. Here is how I think it should be set up, but it's always too low a value for Gbit/s: Chart Value: total Value Field: bytes (bytes per minute field) Scale: 32768 (4096 \* 8 bits in a byte) Seconds, checked Interval 1m Y Format bytes Help? Maybe I'm missing the obvious, but its 2 a.m. and I'm mystified. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/73ae7aaffd5d44f290d16a14c679e2f8%40BN1PR07MB039.namprd07.prod.outlook.com](https://groups.google.com/d/msgid/elasticsearch/73ae7aaffd5d44f290d16a14c679e2f8%40BN1PR07MB039.namprd07.prod.outlook.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Janet](https://avatars.discourse-cdn.com/v4/letter/j/5e9695/32.png) [@Janet](https://discuss.elastic.co/u/Janet)\ **Post date:** [July 21, 2014, 9:19am UTC](https://discuss.elastic.co/t/kibana-settings-for-ipfix-netflow/18757/2 "2014-07-21T09:19:42Z")
I'm tired, I didn't explain that well, we use pmacct to do 1 minute aggregations. From: [elasticsearch@googlegroups.com](mailto:elasticsearch@googlegroups.com) [[mailto:elasticsearch@googlegroups.com](mailto:elasticsearch@googlegroups.com)] On Behalf Of Janet Sullivan Sent: Monday, July 21, 2014 1:50 AM To: [elasticsearch@googlegroups.com](mailto:elasticsearch@googlegroups.com) Subject: Kibana settings for IPFIX/Netflow Every minute, we take a 1/4096 sample of traffic using IPFIX. I want to graph this data as bits/sec in a histogram. However, my math & kibana skills are failing me. Here is how I think it should be set up, but it's always too low a value for Gbit/s: Chart Value: total Value Field: bytes (bytes per minute field) Scale: 32768 (4096 \* 8 bits in a byte) Seconds, checked Interval 1m Y Format bytes Help? Maybe I'm missing the obvious, but its 2 a.m. and I'm mystified. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/f60cf590cb4146698ec2e4eacc8815b8%40BY2PR07MB043.namprd07.prod.outlook.com](https://groups.google.com/d/msgid/elasticsearch/f60cf590cb4146698ec2e4eacc8815b8%40BY2PR07MB043.namprd07.prod.outlook.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Dhanasekaran\_Anbalag](https://avatars.discourse-cdn.com/v4/letter/d/f6c823/32.png) [@Dhanasekaran\_Anbalag](https://discuss.elastic.co/u/Dhanasekaran_Anbalag)\ **Post date:** [July 21, 2014, 4:19pm UTC](https://discuss.elastic.co/t/kibana-settings-for-ipfix-netflow/18757/3 "2014-07-21T16:19:59Z")
Hi Janets, currently I am also trying pmacct It's processing result. I am storing data to elasticsearch, But currently struggling with dashboard creation, can you share your kibana dashboard file. it's very useful to me. -Dhanasekaran. Did I learn something today? If not, I wasted it. On Mon, Jul 21, 2014 at 5:19 AM, Janet Sullivan [janets@nairial.net](mailto:janets@nairial.net) wrote: > I’m tired, I didn’t explain that well, we use pmacct to do 1 minute > aggregations. > > _From:_ [elasticsearch@googlegroups.com](mailto:elasticsearch@googlegroups.com) [mailto: > [elasticsearch@googlegroups.com](mailto:elasticsearch@googlegroups.com)] \*On Behalf Of \*Janet Sullivan > _Sent:_ Monday, July 21, 2014 1:50 AM > _To:_ [elasticsearch@googlegroups.com](mailto:elasticsearch@googlegroups.com) > _Subject:_ Kibana settings for IPFIX/Netflow > > Every minute, we take a 1/4096 sample of traffic using IPFIX. I want to > graph this data as bits/sec in a histogram. However, my math & kibana > skills are failing me. > > Here is how I think it should be set up, but it’s always too low a value > for Gbit/s: > > Chart Value: total > > Value Field: bytes (bytes per minute field) > > Scale: 32768 (4096 \* 8 bits in a byte) > > Seconds, checked > > Interval 1m > > Y Format bytes > > Help? Maybe I’m missing the obvious, but its 2 a.m. and I’m mystified. > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/f60cf590cb4146698ec2e4eacc8815b8%40BY2PR07MB043.namprd07.prod.outlook.com](https://groups.google.com/d/msgid/elasticsearch/f60cf590cb4146698ec2e4eacc8815b8%40BY2PR07MB043.namprd07.prod.outlook.com) > [https://groups.google.com/d/msgid/elasticsearch/f60cf590cb4146698ec2e4eacc8815b8%40BY2PR07MB043.namprd07.prod.outlook.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/f60cf590cb4146698ec2e4eacc8815b8%40BY2PR07MB043.namprd07.prod.outlook.com?utm_medium=email&utm_source=footer) > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAJzooYdPZOny6EqgCWD-QWGBXVhSbXj0HKWxc-arqAu9kbE\_7A%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAJzooYdPZOny6EqgCWD-QWGBXVhSbXj0HKWxc-arqAu9kbE_7A%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![tpnoonan](https://avatars.discourse-cdn.com/v4/letter/t/76d3ee/32.png) [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Post date:** [July 18, 2015, 2:34pm UTC](https://discuss.elastic.co/t/kibana-settings-for-ipfix-netflow/18757/4 "2015-07-18T14:34:29Z")
I'd love to know just how you are processing IPFIX data. the current codec in log stash, as far as i know and am told will only process v5/9 net flow? How are you processing your ipfix data into ES? ---
**Author:** ![gugansankar](https://avatars.discourse-cdn.com/v4/letter/g/e274bd/32.png) [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Post date:** [July 27, 2015, 9:50am UTC](https://discuss.elastic.co/t/kibana-settings-for-ipfix-netflow/18757/5 "2015-07-27T09:50:28Z")
If possible, could you please share me the sample kibana json file to explore the bytes data into bits/sec ? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 11:58pm UTC](https://discuss.elastic.co/t/kibana-settings-for-ipfix-netflow/18757/6 "2017-07-05T23:58:52Z")