Difference between revisions of "Clickhouse"
From Initech Technical Wiki
Line 3: | Line 3: | ||
== [[pmacct]] == | == [[pmacct]] == | ||
This is a collection of configurations and scripts which effectively enable netflows/IPFIX records to be collected and imported into a [[clickhouse]] database. | This is a collection of configurations and scripts which effectively enable netflows/IPFIX records to be collected and imported into a [[clickhouse]] database. | ||
− | + | ||
− | + | === Importing netflows === | |
+ | # [[pmacct]] uses [[pmacct|nfacct.conf]] to collect netflows/IPFIX records and output them to /tmp/nfacct.json in JSONEachRow format and then triggers the [[nfacct-clickhouse-import]] script. | ||
+ | # The [[nfacct-clickhouse-import]] script pre-filters the /tmp/nfacct.json file using grep and PCRE patterns stored in [[nfacct_drop_patterns]] and imports what is left into [[clickhouse]] into the [[netflow.nfacct]] table. |
Revision as of 21:45, 18 October 2019
You'll find my collection of scripts and things related to Clickhouse here.
pmacct
This is a collection of configurations and scripts which effectively enable netflows/IPFIX records to be collected and imported into a clickhouse database.
Importing netflows
- pmacct uses nfacct.conf to collect netflows/IPFIX records and output them to /tmp/nfacct.json in JSONEachRow format and then triggers the nfacct-clickhouse-import script.
- The nfacct-clickhouse-import script pre-filters the /tmp/nfacct.json file using grep and PCRE patterns stored in nfacct_drop_patterns and imports what is left into clickhouse into the netflow.nfacct table.