FlowIQ

This section provides the purpose, elements, and actions performed on the FlowIQ pages.

Overview
Trends
Geolocation
Records
Flows

Purpose

The Overview page displays network flow data analysis with traffic metrics, source and destination IP visualizations, and flow statistics for the selected time period.

Elements

Time Period: Dropdown to select time period (e.g., Last 60 Minutes).
Start: Date and time picker for start time.
End: Date and time picker for end time (can be set to ‘Now’).
Enter IP Address or Port: Filter input for IP address or port.
Refresh Data: Button to refresh the displayed data.
Load View: Button to load a saved view configuration.
Save View: Button to save the current view configuration.
Apply: Button to apply the selected filters and time period.
View By: Dropdown to select view metric (e.g., Traffic Bytes).
Total Traffic: Card displaying total traffic metric.
Total Packet Count: Card displaying total packet count metric.
Unique Source IPs: Card displaying unique source IPs count.
Unique Destination IPs: Card displaying unique destination IPs count.
Source IP: Chart showing top source IPs by the selected View By metric. Use the chart title dropdown to switch between Source IP and Source Host.
Destination IP: Chart showing top destination IPs by the selected View By metric. Use the chart title dropdown to switch between Destination IP and Destination Host.
Source Port: Chart/visualization for source port data.
Destination Port: Chart/visualization for destination port data.
IP Version and Protocol: Chart/visualization for IP version and protocol data.
Autonomous Systems: Chart showing top autonomous systems by the selected View By metric.
Flow Exporters: Chart showing top flow exporters (gateways sending NetFlow data) by the selected View By metric.
Flow Locality: Chart showing traffic breakdown by flow locality by the selected View By metric.
Data Integrity and FlowIQ: Expandable information panel about NetFlow sampling rate and data integrity.
NetFlow Settings: Button that navigates to NetFlow configuration settings.

Actions

View FlowIQ Overview

To view FlowIQ flow data and metrics:

Go to Monitor > FlowIQ > Overview.
The Overview page appears with Total Traffic, Total Packet Count, Unique Source IPs, and Unique Destination IPs cards and visualizations.
Use Time Period, Start, and End to set the time range, and Enter IP Address or Port to filter. Click Apply.
Optionally, use View By, Source IP, Destination IP, Source Port, Destination Port, IP Version and Protocol, Autonomous Systems, Flow Exporters, or Flow Locality to change visualizations.
Optionally, use Load View or Save View to manage view configurations, Refresh Data to refresh, or NetFlow Settings to open NetFlow configuration.

The Overview displays flow analysis for the selected time period and filters.

Parameter Details

CoPilot Parameter Name	Description
View By	Selects the metric shown in the charts below: Traffic Bytes, Traffic Sessions, or Packet Count.
Total Traffic	Shows the total traffic volume for the selected time period and filters.
Total Packet Count	Shows the total packet count for the selected time period and filters.
Unique Source IPs	Shows the count of unique source IP addresses seen in the selected period.
Unique Destination IPs	Shows the count of unique destination IP addresses seen in the selected period.
Data Integrity and FlowIQ	Expandable panel showing the current NetFlow sampling rate and the number of gateways excluded from sampling.
NetFlow Settings	Opens the NetFlow configuration settings.
Source IP / Destination IP	Chart showing top source/destination IPs by the selected View By metric.
Source Port / Destination Port	Chart showing top source/destination ports by the selected View By metric.
IP Version and Protocol	Chart showing traffic breakdown by IP version and protocol.
Autonomous Systems	Chart showing top autonomous systems by the selected View By metric.
Flow Exporters	Chart showing top flow exporters (gateways sending NetFlow data) by the selected View By metric.
Flow Locality	Chart showing traffic breakdown by flow locality (for example, intra-cloud vs. inter-cloud).

Purpose

The Trends page displays time-series charts showing traffic usage trends, source IP trends, and destination IP trends over the selected time period.

Elements

Time Period: Dropdown to select time period (e.g., Last 60 Minutes).
Start: Date and time picker for start time.
End: Date and time picker for end time (can be set to ‘Now’).
Enter IP Address or Port: Filter input for IP address or port.
Refresh Data: Button to refresh the displayed data.
Load View: Button to load a saved view configuration.
Save View: Button to save the current view configuration.
Apply: Button to apply the selected filters and time period.
Traffic Usage: Time-series line chart showing traffic usage trends.
Source IP: Chart title dropdown to toggle the source chart between Source IP and Source Host.
View By: Dropdown to select the metric plotted for the Source IP chart (Traffic Bytes, Traffic Sessions, or Packet Count).
Destination IP: Chart title dropdown to toggle the destination chart between Destination IP and Destination Host.
View By: Dropdown to select the metric plotted for the Destination IP chart (Traffic Bytes, Traffic Sessions, or Packet Count).

Actions

View FlowIQ Trends

To view traffic usage trends:

Go to Monitor > FlowIQ > Trends.
The Trends page appears with Traffic Usage and source/destination IP trend charts.
Use Time Period, Start, and End to set the time range, and Enter IP Address or Port to filter. Click Apply.
Optionally, use Source IP or Destination IP and their View By dropdowns to change trend metrics. Use Load View, Save View, or Refresh Data as needed.

The Trends page shows time-series traffic and IP trends for the selected period.

Parameter Details

CoPilot Parameter Name	Description
Traffic Usage	Time-series line chart showing overall traffic usage over the selected period.
Source IP	Line chart showing the top source IPs (or, when toggled, source hosts) over time. Includes a checkbox legend where Key is the source IP/host name and Value is its metric value; clear a checkbox to hide that series from the chart.
Destination IP	Line chart showing the top destination IPs (or, when toggled, destination hosts) over time, with the same checkbox legend behavior as Source IP.
View By	Selects the metric plotted for the associated chart: Traffic Bytes, Traffic Sessions, or Packet Count.

Purpose

The Geolocation page displays an interactive world map showing the geolocation of network flows with source and destination country visualizations.

Elements

Time Period: Dropdown to select time period (e.g., Last 60 Minutes).
Start: Date and time picker for start time.
End: Date and time picker for end time (can be set to ‘Now’).
Enter IP Address or Port: Filter input for IP address or port.
Refresh Data: Button to refresh the displayed data.
Load View: Button to load a saved view configuration.
Save View: Button to save the current view configuration.
Apply: Button to apply the selected filters and time period.
World Map: Interactive world map showing geolocation of network flows.
Zoom In: Button to zoom in on the map.
Zoom Out: Button to zoom out on the map. Disabled when the map is at its default zoom level.
Reset View: Button to reset the map view to default.
Source Country: Chart showing the top source countries for network flows.
Destination Country: Chart showing the top destination countries for network flows.

Actions

View FlowIQ Geolocation

To view flow geolocation on the map:

Go to Monitor > FlowIQ > Geolocation.
The Geolocation page appears with the World Map showing flow geolocation.
Use Time Period, Start, and End to set the time range, and Enter IP Address or Port to filter. Click Apply.
Optionally, review the Source Country and Destination Country charts, use Zoom In, Zoom Out, or Reset View to adjust the map, and Load View, Save View, or Refresh Data as needed.

The map displays geolocation of network flows for the selected period.

Parameter Details

CoPilot Parameter Name	Description
World Map	Displays an interactive world map showing geolocation of network flows.
Zoom In	Zooms in on the map view.
Zoom Out	Zooms out on the map view.
Reset View	Resets the map view to default.
Source Country	Shows the top source countries for network flows in the selected period.
Destination Country	Shows the top destination countries for network flows in the selected period.

Purpose

The Records page displays a detailed table of network flow records with columns for timestamp, source and destination addresses, direction, bytes, packets, host, duration, throughput, interface names, gateway host name, and source/destination gateway.

Elements

Time Period: Dropdown to select time period (e.g., Last 60 Minutes).
Start: Date and time picker for start time.
End: Date and time picker for end time (can be set to ‘Now’).
Enter IP Address or Port: Filter input for IP address or port.
Refresh Data: Button to refresh the displayed data.
Load View: Button to load a saved view configuration.
Save View: Button to save the current view configuration.
Apply: Button to apply the selected filters and time period.
Search: Search box for filtering records (may be unavailable).
Show filters: Button to show/hide filters.
Select columns: Button to select visible columns.
Export: Button to export records data.

Actions

View Flow Records

To view flow records in table form:

Go to Monitor > FlowIQ > Records.
The Records page appears with a table of flow records (timestamp, source/destination, direction, bytes, packets, host, duration, throughput, interfaces, gateway).
Use Time Period, Start, and End to set the time range, and Enter IP Address or Port to filter. Click Apply.
Optionally, use Search, Show filters, Select columns, Export, Load View, Save View, or Refresh Data as needed.

The Records table shows detailed flow data for the selected period.

Parameter Details

CoPilot Parameter Name	Description
Timestamp	Shows the timestamp when the flow record was captured.
Source Address	Shows the source IP address of the network flow.
Destination Address	Shows the destination IP address of the network flow.
Direction	Shows the direction of the network flow (ingress or egress).
Bytes	Shows the total number of bytes transferred in the flow.
Packets	Shows the total number of packets transferred in the flow.
Host	Shows the host identifier associated with the flow.
Duration	Shows the duration of the network flow.
Throughput	Shows the throughput rate of the network flow.
Ingress Interface Name	Shows the name of the ingress interface for the flow.
Egress Interface Name	Shows the name of the egress interface for the flow.
Gateway Host Name	Shows the host name of the gateway processing the flow.
Source Gateway	Shows the name of the source gateway for the flow.
Destination Gateway	Shows the name of the destination gateway for the flow.

Purpose

The Flows page displays network flow analysis with summary metrics including total traffic, packet count, unique source and destination IPs, and a Sankey diagram visualizing traffic flow between sources and destinations.

Elements

Time Period: Dropdown to select time period (e.g., Last 60 Minutes).
Start: Date and time picker for start time.
End: Date and time picker for end time (can be set to ‘Now’).
Enter IP Address or Port: Filter input for IP address or port.
Refresh Data: Button to refresh the displayed data.
Load View: Button to load a saved view configuration.
Save View: Button to save the current view configuration.
Apply: Button to apply the selected filters and time period.
View By: Dropdown to select view metric (e.g., Traffic Bytes).
Total Traffic: Card displaying total traffic metric.
Total Packet Count: Card displaying total packet count metric.
Unique Source IPs: Card displaying unique source IPs count.
Unique Destination IPs: Card displaying unique destination IPs count.
Show Hostnames: Checkbox to toggle display of hostnames in flow data.
Sankey diagram: Visualization showing traffic flow volume between sources (left axis) and destinations (right axis). Click a node to filter the diagram to that source or destination; a breadcrumb link appears to clear the filter.
Top [N] by [Source/Destination]: Selector above the Sankey diagram to choose how many flows to display (10, 25, 50, or 100) and whether they are ranked by Source or Destination.

Actions

View Flows Summary

To view flow summary metrics and visualizations:

Go to Monitor > FlowIQ > Flows.
The Flows page appears with Total Traffic, Total Packet Count, Unique Source IPs, and Unique Destination IPs cards and a Sankey diagram.
Use Time Period, Start, and End to set the time range, and Enter IP Address or Port to filter. Click Apply.
Optionally, use View By to change the metric, Show Hostnames to toggle hostnames, the Top [N] by [Source/Destination] selector to adjust the Sankey diagram, and Load View, Save View, or Refresh Data as needed.

The Flows page displays flow analysis summary for the selected period.

Parameter Details

CoPilot Parameter Name	Description
View By	Selects the metric to view (e.g., Traffic Bytes).
Total Traffic	Shows the total traffic metric for the selected time period.
Total Packet Count	Shows the total packet count for the selected time period.
Unique Source IPs	Shows the count of unique source IP addresses.
Unique Destination IPs	Shows the count of unique destination IP addresses.
Show Hostnames	Toggles display of hostnames in flow data.
Sankey diagram	Shows traffic flow volume between sources and destinations. Click a node to drill into that source or destination.
Top [N] by [Source/Destination]	Controls how many flows are shown in the Sankey diagram and whether they are ranked by source or destination.

Concepts & Architecture

Guides

Reference

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

​Purpose

​Elements

​Actions

​Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details

Purpose

Elements

Actions

Parameter Details