FastNetMon has very solid and extensive support for exporting metrics and alerts to InfluxDB. We recommend using our installer tool for installing and enabling integration with InfluxDB. This article will cover InfluxDB integration in details and will provide enough information for you to integrate FastNetMon with existing or third party installation of InfluxDB.

FastNetMon can export two types of data to InfluxDB:

FastNetMon does not export flows as is to InfluxDB as this database is not suitable for storing this kind of data. In this case we recommend using Clickhouse.

To enable InfluxDB integration (both for metrics and alerts) you need to enable InfluxDB integration:

sudo fcli set main influxdb true

Then you need to provide IP address and port where you’ve installed InfluxDB:

sudo fcli set main influxdb_host 127.0.0.1
sudo fcli set main influxdb_port 8086

As influxdb_host you can use IPv4, IPv6 address or even hostname which will be resolved by FastNetMon using system resolver. IPv6 address should be provided in following format without any square brackets:

sudo fcli set main influxdb_host ::1

Then you need to set InfluxDB database name:

sudo fcli set main influxdb_database fastnetmon

By default, FastNetMon does not enable authentication for InfluxDB but we have support for it:

sudo fcli set main influxdb_auth true
sudo fcli set main influxdb_user fastnetmon 
sudo fcli set main influxdb_password secure_password

To create user in InfluxDB site run influx tool and run following command:

CREATE USER admin WITH PASSWORD 'influxsecure999' WITH ALL PRIVILEGES

By default, FastNetMon exports metrics every second to offer real time visibility but you can control it using this option:

sudo fcli set main influxdb_push_period 1

If you have multiple FastNetMon instance which export data to same InfluxDB you may consider option to add custom tags this way:

sudo fcli set main influxdb_custom_tags true

Then you can add single tag with following name and value:

sudo fcli set main influxdb_tag_name server
sudo fcli set main influxdb_tag_value fastnetmon5

As another option you may add any number of tags this way:

sudo fcli set main influxdb_tags_table foo=bar
sudo fcli set main influxdb_tags_table server=superserver5

To remove tag use this command:

sudo fcli delete main influxdb_tags_table server

In addition to option to export metrics directly into InfluxDB we offer Kafka integration which can be used for HA setups. You can read more details about it here.

To enable attack alerts export to InfluxDB you need to use following options:

sudo fcli set main influxdb_attack_notification true

By default, FastNetMon export total (IPv4, IPv6), per network (IPv4, IPv6), per host (IPv4, IPv6) and per hostgroup and system counters to InfluxDB. In some cases per host IPv4 counters generate very significant load on database and we offer option to disable per host traffic export this way:

sudo fcli set main influxdb_skip_host_counters true

IPv6 per host counters are enable by default but you can disable them this way:

sudo fcli set main influxdb_push_host_ipv6_counters false

For flexible traffic counters we offer optional capability to export all flexible metrics to InfluxDB which can be enabled this way:

sudo fcli set main influxdb_push_host_ipv4_flexible_counters true
sudo fcli set main influxdb_push_host_ipv6_flexible_counters true

To debug any issues with InfluxDB export we offer following system metrics:

sudo fcli show system_counters |grep influx
influxdb_writes_total                                      9536189 
influxdb_writes_failed                                     0 

To configure disk space usage for InfluxDB we can recommend following articles:

24/7 Tech Support

support@fastnetmon.com

Email Us

sales@fastnetmon.com