Querying Data #############

When using InfluxDB as timeseries backend in ntopng, it is possible to explore data by running queries with the InfluxQL SQL-like query language. In order to run queries it is possible to use the influx CLI tool itself, which ispart of the influxdb-client package.

The following sections provide examples of queries using the InfluxQL SELECT statement that cover common use cases.

Number Of Hosts In The Last Minute

• Type: gauge
• Query:

.. code:: sql

SELECT "num_hosts" FROM "iface:hosts" WHERE ifid='1' and time >= now()-60s and time <= now()

Traffic On An Interface In The Last Minute

• Type: counter
• Query:

.. code:: sql

SELECT NON_NEGATIVE_DERIVATIVE("bytes") FROM "iface:traffic" WHERE ifid='1' AND time >= now() - 60s AND time <= now()

Traffic On An Interface In The Last Hour, Per Minute

• Type: counter
• Query:

.. code:: sql

SELECT NON_NEGATIVE_DERIVATIVE(mean("bytes"))/60 FROM "iface:traffic" WHERE ifid='1' AND time >= now() - 1h AND time <= now() group by time(60s)

Traffic On An Interface In The Last Hour

• Type: counter
• Query:

.. code:: sql

SELECT SUM(value) FROM ( SELECT NON_NEGATIVE_DIFFERENCE("bytes") as value FROM "iface:traffic" WHERE ifid='1' AND time >= now() - 1h AND time <= now())