Technical Tip: Accelops Problem - Configured Netflow on Cisco ASA to send to AO but cannot find events in AO

This article describes a configured netflow on the Cisco ASA to send to AO but it is impossible to find the events in AO.  

Solution

Summary of Topic.

This can happen if the NetFlow template is not sent frequently enough to the 'collector', which in this case is AccelOps.  If AO does not know how to parse the NetFlow events, which requires the NetFlow template, then AO discards the events.

Often it is possible to resolve this problem by increasing the frequency of sending the Netflow template.

The command to run on your Cisco ASA to increase the frequency is:

flow-export template timeout-rate 1

Additional Resources:

Netflow on ASA

Version application:

All.