RCSP Study Guide - NetFlow Timers
Adjusting NetFlow Timers
By default, the Steelhead appliance will export active flows every 30 minutes and inactive flows every 15 seconds. An inactive flow is defined as a flow where no traffic has been sent in the last 15 seconds.
Terminated flows (either with a FIN or RST packet) will be exported immediately. Some NetFlow collectors provide real-time reporting and the 30 minutes export may be too long. In this case, you can use the CLI command to change the timeout.
ip flow-setting active_to (seconds)
ip flow-setting inactive_to (seconds)