Cisco Cisco ASA 5512-X Adaptive Security Appliance
23
Cisco ASA NetFlow Implementation Guide
Configure NSEL Collectors (CLI)
The template keyword indicates the template-specific configurations. The timeout-rate keyword
specifies the time before templates are resent. The minutes argument specifies the time interval in
minutes at which the templates are resent. The default value is 30 minutes.
specifies the time before templates are resent. The minutes argument specifies the time interval in
minutes at which the templates are resent. The default value is 30 minutes.
Change the Time Interval for Sending Flow-Update Events to a Collector
To change the time interval for sending flow-update events to a collector, perform the following steps:
Procedure
Step 1
Configure NetFlow parameters for active connections.
flow-export active refresh-interval
value
Example:
ciscoasa(config)# flow-export active refresh-interval 30
The value argument specifies the time interval between flow-update events in minutes. Valid values are
from 1 - 60 minutes. The default value is 1 minute.
from 1 - 60 minutes. The default value is 1 minute.
If you have already configured the flow-export delay flow-create command, and you then configure the
flow-export active refresh-interval command with an interval value that is not at least 5 seconds more
than the delay value, the following warning message appears at the console:
flow-export active refresh-interval command with an interval value that is not at least 5 seconds more
than the delay value, the following warning message appears at the console:
WARNING: The current delay flow-create value configuration may cause flow-update events to
appear before flow-creation events.
If you have already configured the flow-export active refresh-interval command, and you then
configure the flow-export delay flow-create command with a delay value that is not at least 5 seconds
less than the interval value, the following warning message appears at the console:
configure the flow-export delay flow-create command with a delay value that is not at least 5 seconds
less than the interval value, the following warning message appears at the console:
WARNING: The current delay flow-create value configuration may cause flow-update events to
appear before flow-creation events.
Delay the Sending of Flow-Create Events
To delay the sending of flow-create events, perform the following steps:
Procedure
Step 1
Delay the sending of a flow-create event by the specified number of seconds.
flow-export delay flow-create
seconds
Example:
ciscoasa(config)# flow-export delay flow-create 10