Establishing traffic data feeds between an Analyzer and a Collector
The Real User Analyzer pulls data from Real User Collector components. You can manage the connections between Analyzer and Collectors on the Administration > Data flow settings > Analyzer & Collectors management page of the Real User Analyzer by using the following options:
- Monitor the flow of traffic data into the Real User Analyzer on the Status tab:
- Total traffic received — total traffic received by the Analyzer from all Collector feeds
- Discarded traffic — traffic that was excluded from analysis according to traffic exclusion policies
- Traffic received — traffic received by the Analyzer from this Collector feed
- Status — periods when the Collector was connected to the Analyzer (with green color)
The Status tab
Configure the Maximum Wait Time on the Analyzer settings tab.
A configurable delay period called Maximum Wait Time defines out of sync. For example, if you set the Maximum Wait Time to 15 minutes, a Collector feed that is more than 15 minutes behind other Collectors is considered out of sync. Additionally, Real User Analyzer stops pulling data from all Real User Collectors for a maximum of 15 minutes before dropping the delinquent feed and starting to pull data again through other feeds.
The Maximum Wait Time is also used to determine how much historical data is pulled from Real User Collectors after a period of Real User Analyzer unavailability has ended. Real User Collector components can retain up to 2 hours of historical data.
- Manage the list of associated Collector feeds on the Collector feeds settings tab.
Collector feeds settings tab
If the connection between the Analyzer and one of its Collectors is temporarily broken, or if one of the Collector feeds seems to be out of sync with other Collector feeds, the Analyzer stops pulling data from all Collectors until the connection is restored, the synchronization issue is resolved, or a configurable delay period has expired.
The system automatically disconnects the Collector feeds that have been inactive for seven days. To remove an inactive component from the components list, use the Disconnect command on the Status page for a specified data-receiving component.
To add a Collector feed on the Analyzer
To perform this procedure, you must have Administrator-level access, or higher.
From a supported browser, enter the IP address or host name of the Real User Analyzer.
Example (Linux with custom ports):
- On the Login page, enter your user name and password, and press Log In.
- Open the Administration > Data flow settings > Analyzer & Collectors management page.
- Switch to the Collectors feeds settings tab.
- On the Action menu, click Add.
In the Name and Description boxes, type a meaningful name and description to identify the Real User Collector that you want to feed data from.
The name and description identify the component throughout the system.
In the IP/DNS namebox, type the name or IP address (IPv4 or IPv6) of the Real User Collector.
- In the Port box, type the port number used to access the component.
- Fill in the Username on Collector and Password on Collector boxes with valid credentials to access the component.
- To accept the Collector's default certificate, select the Allow self-signed certificate check box.
- To apply the settings globally to this Collector, select Manage configuration. Note that this will override the existing configuration for this Collector.
To permit this Real User Analyzer to handlegenerated by this Real User Collector, select the Accept Alerts from Collector box.
To set the priority of this Real User Collector, in the Priority section, click High or Low. The Real User Analyzer does not reject data (via sampling) from high-priority feeds.
- Do one of the following:
To feed all traffic that this component collects to the Real User Analyzer, select Capture all traffic from the Collector.
To feed only a specific subset of traffic that this component collects to the Real User Analyzer, add a filter expression to identify the traffic that you want to capture.
To compose an expression using the Expression Builder, click Build a filter expression.
- Click Save.
The new Real User Collector feed appears in the list of Collector feeds. An icon in the Connection column shows the status of the connection to the Real User Collector:
- – Connected
- – Not connected, trying to reconnect
- – Unknown status (for feeds that are turned off)
To turn the feed on immediately, click ON in the row for the Real User Collector.
You can either add different Real User Collector feeds or set up multiple feeds from a single Collector by using filters to differentiate the data that is pulled through each.
If you change the settings for an existing Real User Collector feed, the system purges all data from the associated Real User Analyzer.
To verify the the traffic is being processed correctly, see Validating traffic capture on an Analyzer.