Targets

Use the Targets tab to configure where and how a monitoring port exports flow records.

A monitoring port always has at least one flow export target. The following configuration is shared by all flow export targets of the monitoring port:

• Active timeout: The time (in seconds) after which an active (long‑lived) flow is exported even if packets still arrive. Range: 4–6000 seconds. Lower values provide more frequent interim statistics (better near‑real‑time visibility) but increase exported record volume and CPU usage and can fragment a single session into many records. Higher values reduce the record volume and CPU overhead but delay updates of long‑running flows and keep the flow state in memory longer.
• Inactive timeout: The time (in seconds) after which a flow is exported when no packets belonging to it were seen. This must be lower than the active timeout. Lower values detect ended flows sooner. Higher values reduce overhead but delay recognition of short or bursty flows ending. Do not set the inactive timeout below 10 seconds because very low values increase expirations of briefly idle flows, inflate record volume, and raise CPU load.
• Output interface index: Sets the IPFIX field ID 14 (egressInterface). Select Manual and enter a value to force a specific egress interface index, or select Same as input to copy the value of IPFIX field ID 10 (ingressInterface).

Flow export targets

To add a new flow export target, click New target. A screen opens where you enter:

• Target: Hostname, IPv4, or IPv6 address of the collector. Use localhost for the built‑in collector on the same appliance.
• Collector port: Listening port on the collector. The typical IPFIX/NetFlow port is 2055.
• Flow sampling rate: Enter 0 to export all flows or N to export every Nth flow. Use this when the collector is overloaded by incoming flows. Sampling causes data loss.
• Network protocol: UDP or TCP. TCP allows you to configure an encrypted TLS connection. TCP is only supported for the IPFIX export protocol.
• Export protocol: IPFIX (recommended), NetFlow v9, or NetFlow v5.
• Filter: Optional flow filter that controls which flows are exported. Manage filters on the Filters page.
• Encryption: Available only when TCP is selected. Select a certificate pair to enable TCP/TLS encryption. Manage certificate pairs and CA certificates on the Certificates page.
• Description: Optional description for the target.

Click OK to save the flow export target.

Edit or delete a target using the pencil or trash bin icon in the Action column.

Click Save to apply all changes to the monitoring port, including changes to the flow export targets.