Graphing
Graphing
Section titled “Graphing”Summary
Section titled “Summary”Graphing is a tool to monitor various RouterOS parameters over time and display collected data in visual graphs. This feature enables network administrators to track performance metrics, identify trends, and troubleshoot issues based on historical data.
The Graphing tool can display graphics for:
- Resource usage: CPU utilization, memory consumption, and disk space usage
- Interface traffic: Bandwidth usage passed through network interfaces
- Queue traffic: Traffic passed through simple queues with QoS applied
Graphing consists of two main components. The first component collects and stores performance data at regular intervals. The second component serves as a web interface that renders the collected data into visual graphs accessible through a web browser.
To access the graphs, navigate to http://[Router_IP_address]/graphs/ in your web browser. The interface displays all enabled graphs organized by category, allowing you to select and view specific metrics over customizable time periods.
Accessing Graphs
Section titled “Accessing Graphs”Web Interface
Section titled “Web Interface”Access graphing data through the built-in web server by visiting http://[router_ip]/graphs/. The page refreshes automatically according to the configured refresh interval (default: 300 seconds).
From the WebFig interface, locate the menu icon (≡) in the top right corner and select “graphs” from the navigation menu.
WinBox Interface
Section titled “WinBox Interface”WinBox provides a dedicated graphing window accessible through Tools → Graphing. Double-click on any enabled entry to view its graphs. The WinBox interface displays the same information as the web interface but within the native application.
Supported Graph Types
Section titled “Supported Graph Types”RouterOS graphing uses RRDtool to generate static PNG graph images. Each graph is available in four time ranges: daily (last 24 hours), weekly (last 7 days), monthly (last 30 days), and yearly (last 365 days).
General Configuration
Section titled “General Configuration”The graphing system is configured under /tool graphing. By default, graphing is disabled on all devices. Enable specific graphing categories by configuring their respective submenus.
Sub-menu Path
Section titled “Sub-menu Path”/tool graphingProperties
Section titled “Properties”| Property | Description | Default |
|---|---|---|
| store-every | How often to write collected data to system drive (24hours, 5min, hour) | 5min |
| page-refresh | How often the graph page auto-refreshes in seconds (or ‘never’) | 300 |
Configuration Example
Section titled “Configuration Example”Enable graphing with hourly data storage and a 60-second page refresh:
/tool graphingset store-every=hour page-refresh=60The store-every parameter controls data resolution and storage requirements. More frequent storage (5min) provides higher resolution but consumes more storage space. Less frequent storage (hour or 24hours) reduces storage needs but provides less granular historical data.
Interface Graphing
Section titled “Interface Graphing”Interface graphing monitors bandwidth utilization for specified network interfaces. This feature helps identify traffic patterns, detect bandwidth congestion, and monitor network utilization trends.
Sub-menu Path
Section titled “Sub-menu Path”/tool graphing interfaceProperties
Section titled “Properties”| Property | Description | Default |
|---|---|---|
| allow-address | IP address range from which graphing information is accessible (IP/IPv6 prefix) | 0.0.0.0/0 |
| comment | Description of the graphing entry | (none) |
| disabled | Whether the graphing entry is active (yes, no) | no |
| interface | Interface to monitor (all, or specific interface name) | all |
| store-on-disk | Whether to store collected data on system drive (yes, no) | yes |
Interface Graphing Examples
Section titled “Interface Graphing Examples”Monitor all interfaces with unrestricted access:
/tool graphing interfaceadd interface=allMonitor a specific interface with restricted access:
/tool graphing interfaceadd interface=ether1 allow-address=192.168.88.0/24Monitor multiple specific interfaces:
/tool graphing interfaceadd interface=ether1add interface=ether2add interface=sfp-sfpplus1Disable storage for memory-constrained devices:
/tool graphing interfaceset [find] store-on-disk=noThe interface parameter accepts either all to monitor every interface on the router, or a specific interface name to limit monitoring to that interface. When monitoring all interfaces, each interface generates a separate graph.
Access control via allow-address restricts which clients can view the graphs. Set this to specific subnets or individual IP addresses to prevent unauthorized access to performance data.
Queue Graphing
Section titled “Queue Graphing”Queue graphing monitors traffic that passes through simple queues. This feature is useful for tracking bandwidth consumption per queue, verifying QoS policies, and identifying traffic patterns for specific clients or services.
Sub-menu Path
Section titled “Sub-menu Path”/tool graphing queueProperties
Section titled “Properties”| Property | Description | Default |
|---|---|---|
| allow-address | IP address range from which graphing information is accessible | 0.0.0.0/0 |
| allow-target | Allow access from queue’s target-address (yes, no) | yes |
| comment | Description of the graphing entry | (none) |
| disabled | Whether the graphing entry is active (yes, no) | no |
| simple-queue | Queue to monitor (all, or specific queue name) | all |
| store-on-disk | Whether to store collected data on system drive (yes, no) | yes |
Queue Graphing Examples
Section titled “Queue Graphing Examples”Monitor all queues:
/tool graphing queueadd simple-queue=allMonitor a specific queue:
/tool graphing queueadd simple-queue=LAN_ClientsRestrict access to internal network only:
/tool graphing queueadd simple-queue=all allow-address=192.168.88.0/24 allow-target=noSecurity Consideration
Section titled “Security Consideration”If a simple queue has target-address set to 0.0.0.0/0 (all addresses), clients can access queue graphs even when allow-address is configured for a specific subnet. This occurs because queue graphs are accessible by default from the queue’s target address. Set allow-target=no to prevent this behavior:
/tool graphing queueadd simple-queue=all allow-target=noResource Graphing
Section titled “Resource Graphing”Resource graphing monitors system resource utilization including CPU, memory, and disk usage. This feature is essential for capacity planning, performance troubleshooting, and identifying resource exhaustion before it causes service disruption.
Sub-menu Path
Section titled “Sub-menu Path”/tool graphing resourceMonitored Resources
Section titled “Monitored Resources”The resource graphing feature tracks the following metrics:
- CPU usage: Percentage of processor utilization over time
- Memory usage: RAM consumption including used, free, and cached memory
- Disk usage: Storage utilization for system partitions and mounted volumes
Properties
Section titled “Properties”| Property | Description | Default |
|---|---|---|
| allow-address | IP address range from which graphing information is accessible | 0.0.0.0/0 |
| comment | Description of the graphing entry | (none) |
| disabled | Whether the graphing entry is active (yes, no) | no |
| store-on-disk | Whether to store collected data on system drive (yes, no) | yes |
Resource Graphing Examples
Section titled “Resource Graphing Examples”Enable resource monitoring:
/tool graphing resourceaddRestrict access to management network:
/tool graphing resourceadd allow-address=10.0.0.0/8Disable disk storage for devices with limited flash memory:
/tool graphing resourceset [find] store-on-disk=noPractical Examples
Section titled “Practical Examples”Complete Graphing Setup
Section titled “Complete Graphing Setup”Enable all graphing features with appropriate access controls:
/tool graphingset store-every=5min page-refresh=300
/tool graphing interfaceadd interface=all allow-address=192.168.88.0/24
/tool graphing queueadd simple-queue=all allow-address=192.168.88.0/24 allow-target=no
/tool graphing resourceadd allow-address=192.168.88.0/24Monitor Specific VLAN Interfaces
Section titled “Monitor Specific VLAN Interfaces”Monitor traffic on specific VLAN interfaces while excluding physical interfaces:
/tool graphing interfaceadd disabled=yes interface=alladd interface=vlan10add interface=vlan20add interface=vlan30Monitor Guest Network Queue
Section titled “Monitor Guest Network Queue”Monitor bandwidth usage for a guest network queue with restricted access:
/tool graphing queueadd simple-queue=Guest-Network allow-address=192.168.100.0/24Memory-Constrained Device Configuration
Section titled “Memory-Constrained Device Configuration”Configure graphing for devices with limited storage:
/tool graphingset store-every=hour
/tool graphing interfaceadd interface=all store-on-disk=no
/tool graphing queueadd simple-queue=all store-on-disk=no
/tool graphing resourceadd store-on-disk=noViewing Graphs
Section titled “Viewing Graphs”Web Browser Access
Section titled “Web Browser Access”- Open a web browser and navigate to
http://[router_ip]/graphs/ - Select the graph category (Interfaces, Queues, or Resources)
- Choose the specific interface, queue, or resource to view
- Use the time range selector to adjust the displayed period
Graph Controls
Section titled “Graph Controls”- Time range: Each graph is shown in four views — daily (last 24 hours), weekly, monthly, and yearly
- Refresh interval: Configured via
page-refreshproperty (default: 300 seconds)
WinBox Graphing Window
Section titled “WinBox Graphing Window”- Open WinBox and connect to the router
- Navigate to Tools → Graphing
- The window displays all enabled graphing entries
- Double-click an entry to view its graphs
- Use the toolbar to adjust time ranges and refresh settings
Limitations Compared to External Monitoring
Section titled “Limitations Compared to External Monitoring”RouterOS graphing is a lightweight, zero-dependency solution for visualizing router-local metrics. For many small deployments it is sufficient, but it has meaningful constraints when compared with dedicated monitoring stacks.
What Built-in Graphing Provides
Section titled “What Built-in Graphing Provides”- Single-router visibility (no multi-device correlation)
- Three metric types: interfaces, simple queues, and system resources
- Four fixed time ranges: daily, weekly, monthly, yearly
- Data stored locally on the router; accessible via HTTP only
- No alerting, thresholds, or notification delivery
Comparison with External Tools
Section titled “Comparison with External Tools”| Capability | RouterOS Graphing | SNMP + Zabbix / PRTG | The Dude |
|---|---|---|---|
| Multi-device | Single router only | Unlimited devices | LAN-discovered devices |
| Metric coverage | CPU, RAM, disk, interfaces, queues | Any OID; custom MIBs; agent items | SNMP + Dude probes |
| Alerting | None | Full: email, SMS, webhooks, escalation | Basic triggers and notifications |
| Retention | Fixed (up to 1 year via RRD) | Configurable; months to years | Configurable |
| Custom dashboards | None | Advanced (Grafana, built-in) | Basic |
| Installation | None (built-in) | Requires dedicated server | Windows app or CHR |
| Suitable for | Quick per-router visibility | Production NOC monitoring | Small/medium MikroTik networks |
When to Use Each Approach
Section titled “When to Use Each Approach”Use built-in graphing when:
- You need a quick snapshot of one router’s health without installing anything
- The deployment is a single router or very small network
- Storage or server resources are unavailable for an external stack
- You want a sanity check on traffic trends without SNMP configuration
Use SNMP-based monitoring (Zabbix, PRTG, Grafana/InfluxDB) when:
- You manage multiple routers or a mixed-vendor network
- You need alerting, on-call escalation, or SLA reporting
- Long-term trending and capacity planning are required
- You need metrics beyond what graphing exposes (BGP prefixes, OSPF adjacency, hardware sensors on supported devices)
Use The Dude when:
- Your network is predominantly MikroTik
- You want auto-discovery and topology maps
- A lightweight Windows-based NMS is acceptable
- You do not need the scalability of a full SNMP stack