Thank you for your feedback.

Data collection and discovery using VPC Flow Logs


Data collection and discovery using VPC Flow Logs


Using VPC Flow Logs for collecting data is one of the traffic-based discovery methods. Other methods deployed by Service Mapping are using netstat and lsof commands and the Netflow protocol. For more information, refer to Traffic-based discovery in Service Mapping.


  2. The MID Server collects the data from the flow log and processes it.

  5. Every time Service Mapping checks the ECC queue and receives information on a CI discovered using patterns, it also checks if there is any data on outbound connections related to this CI. This information is in tables holding data discovered using traffic-based discovery: [cmdb_tcp] and [sa_flow_connection]. If these two tables contain unique data that patterns did not discover, Service Mapping enriches the information about the CI connections and adds them to the map.