Understanding and Maintaining Collected Data › Data Collection › 1-Minute Data

1-Minute Data

The following types of data are stored as 1-minute resolution data by default.

Hosts

Traffic to and from the top 300 IP hosts

Conversations

Traffic to and from the top 300 IP conversations

Protocols

• Overall: Top 150 protocols for traffic that travels in and out of each interface
• Hosts: Traffic to and from the top 25 hosts that use the top 25 protocols
• Conversations: Traffic for the top 25 conversations that use the top 25 protocols

ToS

• Protocols: Traffic for the top 25 protocols that use the top 5 ToS values
• Hosts: Traffic for the top 25 hosts that use the top 5 ToS values
• Conversations: Traffic for the top 25 conversations that use the top 5 ToS values

Data Lifespan: The default maximum storage period for 1-minute data is 1 month.

Storage Location: The 1-minute data is stored on the Harvester in both two-tier and three-tier deployments.

Reports: This type of data is often used for troubleshooting and granular analysis. The data appears in the following reports, provided that the reports are configured to show time ranges of 2 hours or less:

• Interface views and reports
• CA Performance Center views and reports of CA Network Flow Analysis data

Raw Data: Raw data is used for even more granular analysis in Flow Forensics reports. Raw data is stored on the Harvester for a maximum of 24 hours by default.