#configuring flow on arubas existing prior art shows us the general steps:
#EF_FLOW_SERVER_UDP_PORT: 9995 #EF_FLOW_SERVER_UDP_PACKET_STREAM_MAX_SIZE: #EF_FLOW_SERVER_UDP_READ_BUFFER_MAX_SIZE: 33554432 #UNICOLLD_SERVER_UDP_PORT: 9595 COLLECTD_DOCKER_APP: 'elk' COLLECTD_DOCKER_TASK: 'elastiflow' EF_FLOW_DECODER_ENRICH_APP_CACHE_SIZE: 262144 EF_FLOW_DECODER_ENRICH_APP_USERDEF_ENABLE: 'true' EF_FLOW_DECODER_ENRICH_APP_USERDEF_PATH: 'settings/apps_user_defined.yml' EF_FLOW_DECODER_ENRICH_APP_USERDEF_PRIVATE: 'true' EF_FLOW_DECODER_ENRICH_APP_USERDEF_PUBLIC: 'true' EF_FLOW_DECODER_ENRICH_ASN_LOOKUP: 'maxmind' EF_FLOW_DECODER_ENRICH_ASN_PREF: 'lookup' EF_FLOW_DECODER_ENRICH_DNS_CACHE_SIZE: 524288 EF_FLOW_DECODER_ENRICH_DNS_ENABLE: 'false' EF_FLOW_DECODER_ENRICH_DNS_RESOLVE_EXPORTER: 'true' EF_FLOW_DECODER_ENRICH_DNS_RESOLVE_IPS: 'all' EF_FLOW_DECODER_ENRICH_DNS_RESOLVE_PRIVATE: 'true' EF_FLOW_DECODER_ENRICH_DNS_RESOLVE_PUBLIC: 'true' EF_FLOW_DECODER_ENRICH_DNS_USERDEF_ENABLE: 'false' EF_FLOW_DECODER_ENRICH_DNS_USERDEF_PATH: 'settings/hostnames_user_defined.yml' EF_FLOW_DECODER_ENRICH_GEOIP_LOOKUP: 'maxmind' EF_FLOW_DECODER_ENRICH_MAXMIND_GEOIP_CACHE_SIZE: 262144 EF_FLOW_DECODER_ENRICH_MAXMIND_GEOIP_ENABLE: 'true' EF_FLOW_DECODER_ENRICH_MAXMIND_GEOIP_LANG: 'en' EF_FLOW_DECODER_ENRICH_MAXMIND_GEOIP_PATH: 'maxmind/GeoLite2-City.mmdb' EF_FLOW_DECODER_ENRICH_MAXMIND_GEOIP_VALUES: 'city,country,country_code,location,timezone' EF_FLOW_DECODER_ENRICH_SNMP_COMMUNITY: 'w01f5paw' EF_FLOW_DECODER_ENRICH_SNMP_ENABLE: 'true' EF_FLOW_LOGGER_ENCODING: 'json' EF_FLOW_LOGGER_FILE_LOG_COUNT: 4 EF_FLOW_LOGGER_FILE_LOG_DIR: '/var/log/elastiflow/flowcoll' EF_FLOW_LOGGER_FILE_LOG_ENABLE: 'false' EF_FLOW_LOGGER_FILE_LOG_INTERVAL: 'weekly' EF_FLOW_LOGGER_FILE_LOG_SIZE: '10MB' EF_FLOW_LOGGER_LEVEL: 'warn' EF_FLOW_OUTPUT_ELASTICSEARCH_ADDRESSES: 'elasticsearch:9200' EF_FLOW_OUTPUT_ELASTICSEARCH_BATCH_DEADLINE: 2000 EF_FLOW_OUTPUT_ELASTICSEARCH_BATCH_MAX_BYTES: 8388608 EF_FLOW_OUTPUT_ELASTICSEARCH_ECS_ENABLE: 'false' EF_FLOW_OUTPUT_ELASTICSEARCH_ENABLE: 'true' EF_FLOW_OUTPUT_ELASTICSEARCH_INDEX_PERIOD: 'daily' EF_FLOW_OUTPUT_ELASTICSEARCH_INDEX_SUFFIX: '' EF_FLOW_OUTPUT_ELASTICSEARCH_INDEX_TEMPLATE_ENABLE: 'true' EF_FLOW_OUTPUT_ELASTICSEARCH_INDEX_TEMPLATE_OVERWRITE: 'true' EF_FLOW_OUTPUT_ELASTICSEARCH_INDEX_TEMPLATE_REPLICAS: 0 EF_FLOW_OUTPUT_ELASTICSEARCH_INDEX_TEMPLATE_SHARDS: 10 EF_FLOW_OUTPUT_ELASTICSEARCH_PASSWORD: 'changeme' EF_FLOW_OUTPUT_ELASTICSEARCH_POOL_SIZE: EF_FLOW_OUTPUT_ELASTICSEARCH_TIMESTAMP_SOURCE: 'end' EF_FLOW_OUTPUT_ELASTICSEARCH_USERNAME: 'elastic' UNICOLLD_DECODER_ENRICH_ASN_LOOKUP: 'maxmind' UNICOLLD_DECODER_ENRICH_DNS_RESOLVE_IPS: 'all' UNICOLLD_DECODER_ENRICH_GEOIP_LOOKUP: 'maxmind' UNICOLLD_DECODER_ENRICH_SNMP_COMMUNITY: 'w01f5paw' UNICOLLD_DECODER_ENRICH_SNMP_ENABLE: 'true' UNICOLLD_LICENSED_CORES: 1 UNICOLLD_OUTPUT_ELASTICSEARCH_ADDRESSES: 'elasticsearch:9200' UNICOLLD_OUTPUT_ELASTICSEARCH_ENABLE: 'true' UNICOLLD_OUTPUT_ELASTICSEARCH_INDEX_TEMPLATE_SHARDS: 10 UNICOLLD_OUTPUT_ELASTICSEARCH_PASSWORD: 'changeme' UNICOLLD_OUTPUT_ELASTICSEARCH_USERNAME: 'elastic' UNICOLLD_OUTPUT_RISKIQ_ENABLE: 'false' UNICOLLD_SERVER_UDP_IP: '198. Problems enountered when using central
#show tech-support #Show activate #show ap debug cloud-server #show log system #show log ap-debug | inc awc
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 show tech-support Show activate show ap debug cloud-server show log system show log ap-debug | inc awc
Troubleshooting Aruba Instant AP Connectivity (swarm debug) Found on The Aruba Blog *Written By arunkumar1 *posted Jun 26, 2014 12:09 PM
How to troubleshoot Aruba AP connectivity.
First:
Check the pound log Pound is a proxy server that intercepts all swarm communication and hands it off to our SwarmHandler (all non-swarm traffic goes to apache). This would be a good command: grep swarm /var/log/pound
A lack of data here would indicate that no requests are arriving from the Instant APs. Troubleshooting Aruba and Sonos
