Skip to main content

Illumio Core 22.2 Administration Guide

How to Import Traffic Flow Summaries

Static Illumination provides “moment-in-time” visibility of inter-workload traffic. This visibility is useful to model policies, to look for specious traffic flows, and to ensure that metadata for labels is accurate.

Goal

Load workload and traffic data needed for analysis with static Illumination.

Setup

This tutorial relies on the following data to import.

  • 1,000 workloads defined in the file bulkworkloads-1000.csv, which has the following columns:

    hostname,ips,os_type
10.14.59.8.netstat,10.14.59.8,linux
10.4.78.178.netstat,10.4.78.178,linux
10.37.134.179.netstat,10.37.134.179,linux
...

  • 1,000,000 traffic flows defined in the CSV file traffic.clean-1m.csv, which has the following columns:

    src_ip,dst_ip,dst_port,proto
10.40.113.86,10.14.59.8,10050,6
10.14.59.8,10.8.251.138,8080,6
10.40.113.124,10.14.59.8,22,6
...
Steps

The workflow is authenticated to the PCE and run two ilo bulk_upload_csv commands.

  1. Authenticate to the PCE via API key or explicit login.

  2. Load the workload data:

    ilo workload bulk_upload_csv --file bulkworkloads-1000.csv

  3. Load the traffic flow data:

    ilo traffic bulk_upload_csv --file traffic.clean-1m.csv
Results

The data from the CSV files are uploaded.