VCF Ops for Networks shows no flows for AWS data source on the data sources page even through flows are being received

Products

• VCF Operations for Networks

Issue/Introduction

• An AWS data source has been configured in VCF Operations for Networks. The count of flows for this data source on the Data Sources page in the UI shows "-".
  
  
• The data source is configured with a primary account that has multiple linked accounts.
• The primary account does not have any VPCs associated with it at AWS, while one or more of the linked accounts do.
• When querying for AWS flows, positive results are returned for one or more of the linked AWS accounts.
  

Environment

VCF Operations for Networks

Cause

This is expected behavior when the primary AWS account has no VPCs associated with it. 

Resolution

This behavior on the Data Sources page can be ignored as long as the expected flow data is seen for linked accounts. 

The following queries can be used to help validate that AWS flow data is being received:

• List of flows for individual reporters:
  
  flows group by reporterEntity.reporter 
  
  
• Count of flows for an individual reporter:
  
  count of flows where reporterEntity.reporter='###'
  
  Note: Replace ### with one of the reporters returned from the first query.