Netify Netify logo Contact Us
Products Resources Documentation Blog Sign In

Aggregator Telemetry - Type 4

The Type 4 Aggregator provides interval-based rollups of traffic statistics using fixed start and end timestamps. It is optimized for periodic reporting pipelines where compact, time-bucketed summaries are preferred over per-flow detail.

Each record contains a stats array with protocol/application dimensions, endpoint context, and upload/download counters for the interval. This format is useful for historical trend analysis, billing-oriented summaries, and destination-focused traffic monitoring.

Requirements

Aggregator Type 4 telemetry was introduced in the Aggregator Plugin in version 1.0.87. To begin streaming the telemetry:

Source
Aggregator Plugin
Plugin Release
1.0.87

Flat vs. Nested Formats

The aggregator formats are available in two different formats. The flat format is well suited for importing into databases, creating CSVs, and managing other row-based solutions. The nested format is well suited for cache keys, internal data structures in memory, and other key-based solutions.

Flat

{
    "key1": "key value1",
    "key2": "key value2",
    "key3": "key value3",
    "data1": "aggregate data1",
    "data2": "aggregate data2",
    "data3": "aggregate data3"
}

Nested

{
    "key value1": {
        "key value2": {
            "key value3": {
                "data1": "aggregate data1",
                "data2": "aggregate data2",
                "data3": "aggregate data3"
            }
        }
    }
}

Attributes

Please review the upload/download conventions documentation for context on other_ip, other_port and upload/download.

log_time_start

integer
Unix epoch timestamp (seconds) for the beginning of the aggregation interval.

log_time_end

integer
Unix epoch timestamp (seconds) for the end of the aggregation interval.

stats

array[object]
List of aggregated statistic buckets.

stats.application_id

integer
Netify application ID.

stats.protocol_id

integer
Netify protocol ID.

stats.ip_protocol

integer
IANA IP protocol number (for example: 6 for TCP, 17 for UDP).

stats.ip_version

integer
IP version used by traffic.
Values
4 6

stats.other_ip

string
Other endpoint IP address.

stats.other_port

integer
Transport-layer port for the other endpoint.

stats.upload

integer
Total upstream bytes observed.

stats.download

integer
Total downstream bytes observed.

stats.packets

integer
Total packet count observed.

stats.vlan_id

integer
VLAN identifier associated with the bucket (or 0 when untagged).

Aggregator Type 4 Attributes - Example

{
  "log_time_end": 1745002614,
  "log_time_start": 1745002604,
  "stats": [
    {
      "application_id": 10909,
      "download": 935,
      "ip_protocol": 17,
      "ip_version": 4,
      "other_ip": "142.250.80.14",
      "other_port": 443,
      "packets": 5,
      "protocol_id": 188,
      "upload": 748,
      "vlan_id": 0
    },
    {
      "application_id": 0,
      "download": 66,
      "ip_protocol": 6,
      "ip_version": 4,
      "other_ip": "104.18.43.204",
      "other_port": 443,
      "packets": 2,
      "protocol_id": 196,
      "upload": 66,
      "vlan_id": 0
    }
  ]
}