21.7.2_1 flowd aggregate died

[TomT]

Hi,

My dashboard is showing Insight Aggregator as stopped.

Looking at: SYSTEM: LOG FILES: GENERAL I get:

Code Select Expand

flowd aggregate died with message Traceback (most recent call last): File "/usr/local/opnsense/scripts/netflow/flowd_aggregate.py", line 160, in run aggregate_flowd(self.config, do_vacuum) File "/usr/local/opnsense/scripts/netflow/flowd_aggregate.py", line 80, in aggregate_flowd stream_agg_object.add(copy.copy(flow_record)) File "/usr/local/opnsense/scripts/netflow/lib/aggregates/interface.py", line 75, in add super(FlowInterfaceTotals, self).add(flow) File "/usr/local/opnsense/scripts/netflow/lib/aggregates/__init__.py", line 185, in add self._update_cur.execute(self._update_stmt, flow) sqlite3.DatabaseError: database disk image is malformed

I've gone into REPORTING: SETTINGS and tried Repair Netflow Data, and then Reset Netflow Data.  Neither have made a difference.

Any idea how I resolve this ?

thanks.

[alexroz]

You can try to repair netflow database thru: Reporting -> Settings -> "Repaire Netflow Database".
Take into consideration that this process may take hours.
I monitor sqlighte DB repairing process by periodically running "ls -halt /var/netflow" thru ssh to opnsense