Loading

×Sorry to interrupt
This page has an error. You might just need to refresh it.
[NoErrorObjectAvailable] Uncaught ReferenceError: addCTracking is not defined
Failing descriptor: {markup://c:KM_ArticleThemeLayout}

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

vRealize Network Insight Sample Search Queries (52778)

Last Updated: 5/26/2018Categories: InformationalTotal Views: 9186Language:
English

3 like this article

Subscribe to get an email
newsletter with new updates

3 people found this helpful Please provide article feedback:

Purpose

This articles provide sample vRealize Network Insight search queries

Resolution

Below mentioned are few search queries which are used in  vRealize Network Insight

Flow Related Queries

Show VMs per L2 segment (can restrict with where vlan = xyz). Replace vlan with vxlan if using logical switches.

vm by vlan where vlan = “xyz”

Show a list of VMs with their gateway, network, VLAN etc:

L2 Network , vlan, ip address, default gateway of vms

Search a MAC address or IP address. Just type the address into the search bar.

00:50:56:a6:31:cc

Show me all network traffic going to the internet

flows where Flow Type = 'Src is VM' and Flow Type = 'Dst is Internet' by bytes

Show me all network traffic going to physical

flows where Flow Type = 'VM-Physical' by bytes

Show me the same thing, but totals:

sum(total bytes) of flow where Flow Type = 'VM-Physical'

Say you have two data centres (separate vCenter per site). Show me traffic totals between them (i.e. DCI link utilisation)

sum(bytes) of flows where (Dst Manager = 'abc' AND src manager = 'cba') OR (Dst Manager = 'cba' AND src manager = 'abc')

Total amount of VTEP traffic:

sum(bytes) of flows where Flow Type = 'Src is VTEP' or flow type = 'Dst is VTEP'

VTEP traffic grouped by VMkernel IP (Can’t see this in the vRNI demo labs – has to be in a real life lab):

sum(bytes) of flows where Flow Type = 'Src is VTEP' or flow type = 'Dst is VTEP' group by src ip

Show internet traffic totals for every src IP

sum(bytes) of flows where Flow Type = Internet' group by src ip

Series of 3 days where each point is an aggregate of 2 hours (7200 seconds) of metrics. The aggregate function being applied is supplied in the query – max, sum etc.

series(max(byte rate), 7200) of flows where flow type = 'Src is Physical' and flow type = 'Dst is Internet' in last 3 days

Find switch-ports or router-interface having packet drops

show Max Packet Drops, total packet drop ratio, network Rate of Switch Ports by Total Packet Drop Ratio

Network rate of all hosts (ordered by the highest)

network rate of host order by Max Network Rate

Show total flows grouped by ports

sum(bytes) of flow group by port

Look at Internet flows grouped by port with traffic totals:

sum(bytes) of flows where Traffic Type = 'INTERNET_TRAFFIC' group by port

Information About VMs

Show which network segments have the highest VM count:

vm group by l2 network

Which datastores have highest VM count:

vm group by datastore

ESX Host Information

Show me a list vSphere versions installed in the environment and a total of hosts:

host group by version

Show me a list of vSphere builds and how many hosts they have:

host group by OS

Show me hosts with how many VMs they contain:

vm group by host

Firewall rules

Show rules which have an any source (can combine with specific port if you like)

vm where incoming rules.Source Any

Show VMs with an affected rule of xyz

vm where Firewall Rule = 'Prod MidTier to Prod DB - DBService'

Show firewall rules where any port is allowed

firewall rule where action = allow and service any = true

Not operator:
!=
Not like

Aggregations:

max(byte rate) of flows
sum(total bytes)
sum(bytes)
avg(CPU Usage Rate), avg(memory utilization) of VMs

Troubleshooting

Show which VNIs my controllers are responsible for:

controller of Vxlan group by controller

Which controller is responsible for my Prod-Midtier segment

Primary Controller of Vxlan 'Prod-Midtier'

Where is my Prod-Midtier-1 VM and what info do I want to know about it (i.e. MAC, IP, host it’s on)?

mac address, ip, vxlan, host of vm 'Prod-Midtier-1'

Show routes for Provider edge 3:

routes where vrf = 'Provider Edge 3'

Show routes of DMZ DLR:

routes where VRF = 'LDR-DMZ'

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
English

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

KB
•
Download and Install VMware Fusion (2014097)

Results 1-2 of 2

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware vRealize Network Insight

Related Versions:

VMware vRealize Network Insight 3.x

VMware vRealize Network Insight 2.x

Take Our Survey

Support Assistant