Proper shutdown sequence for Network Flow Analysis

Products

• Network Flow Analysis

Issue/Introduction

What is the proper shutdown sequence for a scheduled/intentional power down of an entire distributed Network Flow Analysis system?

Environment

Network flow analysis

Resolution

Minimum Safe Shutdown Stop the MySQL and CA/NetQoS services on all boxes and power down in this order: harvester, reporter console, DSA.

Cleanest Safe Shutdown:

On the NFA harvesters, stop the harvester service only.  Make sure the Reaper service is still running.  Let the reaper process the rest of the files in <Install path>\Netflow\datafiles\ReaperInput.  Once this directory is empty, wait for <Install path>\Netflow\datafiles\ReaperWork to empty as well. Make sure there are no .rpr files in <Install path>\netflow\datafiles\NFMInput. 

If there are, wait until they are processed. Stop MySQL and all other CA/NetQoS services on harvesters.  You can now power them down.  

On the NFA console, make sure all of the sub-directories of <Install path>\reporter\datashare\data\<IP-of-DSA> are empty in case of a 3-tier system that includes the DSA.  If not, wait a minute or so until they are processed. Stop the MySQL service and all CA/NetQoS services, and power down.

If the system contains the NFA DSAs, stop the MySQL and CA/NetQoS services and power down.