search

Cacti / cacti

Cacti ™
http://www.cacti.net
GNU General Public License v2.0
1.62k stars 403 forks source link

The IN /OUT MAX values ​​in the Aggregate Graphs image are inconsistent with those in the CSV #5617

Closed jackfish0405 closed 5 months ago

jackfish0405 commented 8 months ago

5606 Association

The IN /OUT MAX values ​​in the Aggregate Graph image are inconsistent with those in the CSV Not all Aggregate Graphs have this problem, only some do. The testing time frame is the previous month. Production environment cacti version 1.2.22. Currently importing rra data into cacti latest version 1.2.26, but the problem still exist.

In Graph image MAX IN is 12.1G image

Total IN-MAX on CSV in descending order the maximum is 6.74G image

jackfish0405 commented 8 months ago

After analysis, it was found that the problem of inconsistency between the peak value of the aggregate graph and the CSV data often occurs in the following situations: when traffic switching occurs between multiple interfaces of the aggregate graph.

For example, the aggregation graph in the figure below consists of two interfaces. Between 18:11-19:11, the OUT direction traffic is switched from interface A to interface B. image

The aggregate graph for the previous month shows that the traffic at this point in time is cumulative. image

Selecting the time range for the day's aggregate graph reveals that there are two cumulative peaks before and after the traffic switch. image

Then further select the time range to two hours before the traffic switch, and the peak value of the aggregate graph is displayed normally again. image

It is also normal to view CSV data with a time range of last month at 18:11-19:11, with cumulative peaks appearing every month.

This problem only occurs with aggregated graph displays when the time range spans a long time range.

jackfish0405 commented 8 months ago

My image template uses MAX for drawing. I analyzed that the problem may be that each port performs data compression first during drawing, and a MAX value is taken within the time range of one pixel.

In this way, when the port traffic is switched, it may happen that both ports take the MAX value in the same pixel time range. When these two sets of port data are combined for drawing, the MAX value superposition occurs.

Is it possible to merge the data of multiple ports into a set of data first, and then draw the aggregated graph? This is just my guess.

TheWitness commented 7 months ago

Which Cacti version @jackfish0405 ?

jackfish0405 commented 7 months ago

Is the latest version 1.2.26

github-actions[bot] commented 5 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

TheWitness commented 5 months ago

On this one, you need to be very careful of what Consolidation Function the GPRINT is using. If the Graph line/area is using AVG and the GPRINT is using MAX, they are two different numbers. That's what is going on here.