Andrisoft Wanguard 5.2, Руководство пользователя и администратора, Страница: 33 / 73

WANGUARD 5.2 User Manual & Administrator's Guide
Storage & Graphs Configuration
An important step in confguring WANGUARD is to make sure that the involved servers have enough
resources to process and withhold trafc informaton. Most resource-related parameters are found in Confguraton
» Global Setngs » Storage & Graphs.
The default paths for collected fows and packet dumps exist only on the Console's flesystem. When the
Sensors are installed on diferent systems, you should export these paths towards the Console through NFS. If you
don't, the Console won't be able to display the collected data.
In a later chapter you'll be able to confgure the Sensors to generate trafc graphs for lots of IPs, depending
on the size of the monitored network. If you intend to use this feature then look carefully at the IP graphs
parameters. Changing these parameters later requires the recreaton of all IP graphs.
IP graph fles are stored on the Console's flesystem. There are 2 diferent methods for updatng IP graph
fles, so select the appropriate tab:
●
Write IP graph fles directly on disk
This method creates one fle for every IP address directly on the defned Graphs Disk Path. RRDCache
daemon optmizes I/O access but you must add it's path (usually it's
unix:/var/rrdtool/rrdcached/rrdcached.sock) and you must confgure it frst.
The frst accuracy parameter or "Archive" (default is 5 minutes) specifes the granularity of the graphs
for recent data. It can be set as high as 5 seconds and as low as 10 minutes. The averages and intervals
values specify the accuracy / granularity and for how long do you want the data to be stored.
This method is not suited for updatng tens of thousands of IP graphs with very high granularity.
● Write IP graph fles in RAM or SSD frst
This method is suited for high granularity IP graphs. It creates a fle for every IP address on RAM or SSD
and updates it there. The fles are moved periodically on a larger but much slower disk.
Decoders determine the underlying protocols of each packet or fow. Enabling too many decoders might
cause a performance penalty, but you will be able to beter diferentate the trafc.
Consolidaton functons build consolidated values for Archives. If you are interested in trafc spikes, check
MAXIMUM. If you are interested in average values, check AVERAGE. For low trafc values, check MINIMUM.
All IP graph parameters have a direct impact on the storage space required in the Console's fle system. The
Disk space required for each IP graph fle value will be updated when you click the <<Update>> buton. If you change
the graphs parameters, make sure you delete old .rrd fles from the defned Graphs Disk Path .
The deleton of old data can be automated in Confguraton » Global Setngs » Data Retenton.
- 32 -