mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 21:46:22 +01:00
38 lines
3.7 KiB
Plaintext
38 lines
3.7 KiB
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// network_observability/observing-network-traffic.adoc
|
|
|
|
:_mod-docs-content-type: REFERENCE
|
|
[id="network-observability-quickfilter{context}"]
|
|
= Filtering the network traffic
|
|
By default, the Network Traffic page displays the traffic flow data in the cluster based on the default filters configured in the `FlowCollector` instance. You can use the filter options to observe the required data by changing the preset filter.
|
|
|
|
Query Options::
|
|
You can use *Query Options* to optimize the search results, as listed below:
|
|
|
|
** *Log Type*: The available options *Conversation* and *Flows* provide the ability to query flows by log type, such as flow log, new conversation, completed conversation, and a heartbeat, which is a periodic record with updates for long conversations. A conversation is an aggregation of flows between the same peers.
|
|
** *Duplicated flows*: A flow might be reported from several interfaces, and from both source and destination nodes, making it appear in the data several times. By selecting this query option, you can choose to show duplicated flows. Duplicated flows have the same sources and destinations, including ports, and also have the same protocols, with the exception of `Interface` and `Direction` fields. Duplicates are hidden by default. Use the *Direction* filter in the *Common* section of the dropdown list to switch between ingress and egress traffic.
|
|
** *Match filters*: You can determine the relation between different filter parameters selected in the advanced filter. The available options are *Match all* and *Match any*. *Match all* provides results that match all the values, and *Match any* provides results that match any of the values entered. The default value is *Match all*.
|
|
** *Drops filter*: You can view different levels of dropped packets with the following query options:
|
|
*** *Fully dropped* shows flow records with fully dropped packets.
|
|
*** *Containing drops* shows flow records that contain drops but can be sent.
|
|
*** *Without drops* shows records that contain sent packets.
|
|
*** *All* shows all the aforementioned records.
|
|
|
|
** *Limit*: The data limit for internal backend queries. Depending upon the matching and the filter settings, the number of traffic flow data is displayed within the specified limit.
|
|
|
|
Quick filters::
|
|
The default values in *Quick filters* drop-down menu are defined in the `FlowCollector` configuration. You can modify the options from console.
|
|
|
|
Advanced filters::
|
|
You can set the advanced filters, *Common*, *Source*, or *Destination*, by selecting the parameter to be filtered from the dropdown list. The flow data is filtered based on the selection. To enable or disable the applied filter, you can click on the applied filter listed below the filter options.
|
|
|
|
You can toggle between image:arrow-up-long-solid.png[,10] *One way* and image:arrow-up-long-solid.png[,10] image:arrow-down-long-solid.png[,10] *Back and forth* filtering. The image:arrow-up-long-solid.png[,10] *One way* filter shows only *Source* and *Destination* traffic according to your filter selections. You can use *Swap* to change the directional view of the *Source* and *Destination* traffic. The image:arrow-up-long-solid.png[,10] image:arrow-down-long-solid.png[,10] *Back and forth* filter includes return traffic with the *Source* and *Destination* filters. The directional flow of network traffic is shown in the *Direction* column in the Traffic flows table as `Ingress`or `Egress` for inter-node traffic and `Inner`for traffic inside a single node.
|
|
|
|
You can click *Reset defaults* to remove the existing filters, and apply the filter defined in `FlowCollector` configuration.
|
|
|
|
[NOTE]
|
|
====
|
|
To understand the rules of specifying the text value, click *Learn More*.
|
|
====
|