Querying Data¶

When using InfluxDB as timeseries backend in ntopng, it is possible to explore data by running queries with the InfluxQL SQL-like query language. In order to run queries it is possible to use the influx CLI tool itself, which ispart of the influxdb-client package.

The following sections provide examples of queries using the InfluxQL SELECT statement that cover common use cases.

Number Of Hosts In The Last Minute¶

Type: gauge
Query:

SELECT "num_hosts" FROM "iface:hosts"
WHERE ifid='1' and time >= now()-60s and time <= now()

Traffic On An Interface In The Last Minute¶

Type: counter
Query:

SELECT NON_NEGATIVE_DERIVATIVE("bytes") FROM "iface:traffic"
WHERE ifid='1' AND time >= now() - 60s AND time <= now()

Traffic On An Interface In The Last Hour, Per Minute¶

Type: counter
Query:

SELECT NON_NEGATIVE_DERIVATIVE(mean("bytes"))/60 FROM "iface:traffic"
WHERE ifid='1' AND time >= now() - 1h AND time <= now() group by time(60s)

Traffic On An Interface In The Last Hour¶

Type: counter
Query:

SELECT SUM(value) FROM (
   SELECT NON_NEGATIVE_DIFFERENCE("bytes") as value FROM "iface:traffic"
   WHERE ifid='1' AND time >= now() - 1h AND time <= now())