Filter
Top Products
2-19
Cisco NetFlow Collector User Guide
OL-11399-01
Chapter 2 Using the NetFlow Collector User Interface
Configuration
Multi-Field Map
The Multi-Field Map editor is applet-based and is different than the forms for other key builder types
because of the hierarchical nature of a multi-field map. A tree on the left-hand side of the Multi-Field
Map editor shows the elements of the map. A form on the right-hand side of the Multi-Field Map editor
shows the attributes for the selected item in the tree.
The top level of the tree contains the following attributes.
Beneath the top level of the tree are one or more conditions. After selecting the top tree item, create a
condition as follows:
1. Select the condition type (integer, IP address, or string).
2. Choose the key builder that will produce values for the condition.
3. Click Add condition.
A new condition will be added following all other conditions at that level and will be selected in the tree.
The form displayed on the right side will display the new condition. In this form, select Add case one
or more times to add cases for each value or range of interest. A new tree item for the case is added
following all other cases under this condition's tree item; the new tree item is selected; and a form for
the case is displayed on the right hand side.
A single case has one or more values and ranges and the label associated with a match for these values
and ranges. The values and ranges for one case must be unique for all cases for this condition. To add a
value or range to the case, select Add value or Add range. A new value or range is added to the case; a
tree item for the value or range is added beneath the case's tree item; and a form is displayed on the right
hand side for the new value or range.
Each case can also have one or more conditions nested beneath it that reference a different key builder.
Therefore for a particular value, range, or set of values for one key, the value of a different key can
further refine the result of the multi-field map. Conditions are added to a case as described above for
adding conditions to the top level of the tree.
Selecting Move for a case or condition moves the tree item for the case or condition up. After the item
is at the top, it cycles back to the bottom. The order of cases has no impact on performance when
evaluating a condition. However, because the conditions at one level in the tree are evaluated top-down
in the order they appear, the order of conditions within one level can have an effect on performance.
Therefore, if one condition is more likely than another, declare it first or move it before less likely
conditions.
Any item in the tree including the items beneath it can be removed by selecting Remove. Pressing the
back button on the browser also causes any changes to be discarded. Remove items with care because
no cut, paste, or undo capability is provided. Changes are not committed until you select Update map
or Remove map.
The symbol [ !]at the beginning of any item in the tree indicates that the configuration specified at that
level of the tree is incomplete and must be updated before the multi-field map can be added or updated.
Attribute Description
ID ID that uniquely identifies this map.
Output name Column name displayed in output for this key
builder.
Default label Default value shown in output if no match for the
specified conditions is found.