search cancel

Flow Forensics Reports Failing in NFA


Article ID: 20577


Updated On:


CA Application Delivery Analysis MTP (NetQoS / ADA) CA Infrastructure Performance



In NFA, a few of our customers have run into issues with running Flow Forensic reports.

The reports would fail with one of the errors below:

"Error executing Flow Forensics report on host x.x.x.x"

<Please see attached file for image>

Figure 1


<Please see attached file for image>

Figure 2

"Query was killed due to a report cancellation"

If you check the <Install_dir>\NFA\Netflow\logs\oursql_*_error.log (which is the log responsible for flow forensics), you may see some errors where it is trying to write to a log that doesn't exist.

For example:

"ERROR - NFA CSE could not access [D:\CA\NFA\\Netflow\logs\NFAStorageEngine.log]"

<Please see attached file for image>

Figure 3

It then fails to write to the log and the NQmySql service stops (and the report fails to execute with one of the errors above).



Release: RAIB1H99000-9.1-Network Flow Analysis-Interface Bundle-Hardware


  1. Manually create the 'NFAStorageEngine.log' in each of the Harvester servers' \Netflow\Logs' directory.
  2. Restart the 'NetQos NQMySql' Service in Windows Services.
  3. Then run the report again it should now be able to write what it needs to the log file and the report should now successfully execute.
  4. If it does not run please review the newly created 'NFAStorageEngine.log' and the 'oursql_*_error.log' for any new errors.


1558693126857000020577_sktwi1f5rjvs16h7a.gif get_app
1558693125009000020577_sktwi1f5rjvs16h79.gif get_app
1558693123234000020577_sktwi1f5rjvs16h78.gif get_app
1558693121567000020577_sktwi1f5rjvs16h77.gif get_app
1558693119934000020577_sktwi1f5rjvs16h76.gif get_app
1558693118091000020577_sktwi1f5rjvs16h75.gif get_app