تجزیه و تحلیل شبکه ایمن
“
اطلاعات محصول
مشخصات:
- Product Name: Cisco Secure Network Analytics
- نسخه: 7.5.3
- Features: Customer Success Metrics
- Requirements: Internet access, Cisco Security Service
مبادله
دستورالعمل استفاده از محصول
Configuring the Network Firewall:
To allow communication from your Cisco Secure Network Analytics
appliances to the cloud:
- Ensure appliances have Internet access.
- Configure your network firewall on the Manager to allow
ارتباط
Configuring the Manager:
To configure your network firewall for Managers:
- Allow communication to the following IP addresses and port
443: - api-sse.cisco.com
- est.sco.cisco.com
- mx*.sse.itd.cisco.com
- dex.sse.itd.cisco.com
- eventing-ingest.sse.itd.cisco.com
- If public DNS is restricted, locally resolve the IPs on your
Managers.
Disabling Customer Success Metrics:
To disable Customer Success Metrics on an appliance:
- Log in to your Manager.
- Select Configure > Global > Central Management.
- Click the (Ellipsis) icon for the appliance and choose Edit
Appliance Configuration. - In the General tab, scroll to External Services and uncheck
Enable Customer Success Metrics. - Click Apply Settings and save changes as prompted.
- Confirm Appliance Status returns to Connected on the Central
Management Inventory tab.
سوالات متداول (سوالات متداول)
How do I know if Customer Success Metrics is enabled?
Customer Success Metrics is automatically enabled on your Secure
Network Analytics appliances.
What data is generated by Secure Network Analytics?
Secure Network Analytics generates a JSON file with metrics data
which is sent to the cloud.
"`
تجزیه و تحلیل شبکه امن سیسکو
Customer Success Metrics Configuration Guide 7.5.3
فهرست مطالب
تمام شدview
3
Configuring the Network Firewall
4
پیکربندی مدیر
4
Disabling Customer Success Metrics
5
Customer Success Metrics Data
6
Collection Types
6
Metrics Details
6
جمع کننده جریان
7
Flow Collector StatsD
10
مدیر
12
Manager StatsD
16
مدیر UDP
22
All Appliances
23
تماس با پشتیبانی
24
تاریخچه را تغییر دهید
25
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
-2-
تمام شدview
تمام شدview
Customer Success Metrics enables Cisco Secure Network Analytics (formerly Stealthwatch) data to be sent to the cloud so that we can access vital information regarding the deployment, health, performance, and usage of your system.
l Enabled: Customer Success Metrics is automatically enabled on your Secure Network Analytics appliances.
l Internet Access: Internet access is required for Customer Success Metrics. l Cisco Security Service Exchange: Cisco Security Service Exchange is enabled
automatically in v7.5.x and is required for Customer Success Metrics. l Data Files: Secure Network Analytics generates a JSON file with the metrics data.
The data is deleted from the appliance immediately after it is sent to the cloud.
این راهنما شامل اطلاعات زیر است:
l Configuring the Firewall: Configure your network firewall to allow communication from your appliances to the cloud. Refer to Configuring the Network Firewall.
l Disabling Customer Success Metrics: To opt out of Customer Success Metrics, refer to Disabling Customer Success Metrics.
l Customer Success Metrics: For details about the metrics, refer to Customer Success Metrics Data.
For information on data retention and how to request deletion of usage metrics collected by Cisco, refer to Cisco Secure Network Analytics Privacy Data Sheet. For assistance, please contact Cisco Support.
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
-3-
Configuring the Network Firewall
Configuring the Network Firewall
To allow communication from your appliances to the cloud, configure your network firewall on your Cisco Secure Network Analytics Manager (formerly Stealthwatch Management Console).
Make sure your appliances have Internet access.
پیکربندی مدیر
Configure your network firewall to allow communication from your Managers to the following IP addresses and port 443:
l api-sse.cisco.com l est.sco.cisco.com l mx*.sse.itd.cisco.com l dex.sse.itd.cisco.com l eventing-ingest.sse.itd.cisco.com
If public DNS is not allowed, make sure you configure the resolution locally on your Managers.
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
-4-
Disabling Customer Success Metrics
Disabling Customer Success Metrics
Use the following instructions to disable Customer Success Metrics on an appliance.
1. Log in to your Manager. 2. Select Configure > Global> Central Management. 3. Click the (Ellipsis) icon for the appliance. Choose Edit Appliance
Configuration. 4. Click the General tab. 5. Scroll to the External Services section. 6. Uncheck the Enable Customer Success Metrics check box. 7. Click Apply Settings. 8. Follow the on-screen prompts to save your changes. 9. On the Central Management Inventory tab, confirm the Appliance Status returns to
Connected. 10. To disable Customer Success Metrics on another appliance, repeat steps 3 through
9.
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
-5-
Customer Success Metrics Data
Customer Success Metrics Data
When Customer Success Metrics is enabled, the metrics are collected in the system and uploaded every 24 hours to the cloud. The data is deleted from the appliance immediately after it is sent to the cloud. We do not collect identification data such as host groups, IP addresses, user names, or passwords.
For information on data retention and how to request deletion of usage metrics collected by Cisco, refer to Cisco Secure Network Analytics Privacy Data Sheet.
Collection Types
Each metric is collected as one of the following collection types:
l App Start: One entry every 1 minute (collects all the data since the application started).
l Cumulative: One entry for a 24-hour period l Interval: One entry every 5 minutes (total of 288 entries per 24-hour period) l Snapshot: One entry for the point in time the report is generated
Some of the collection types are collected at different frequencies than the defaults we’ve described here, or they may be configured (depending on the application). Refer to Metrics Details for more information.
Metrics Details
We’ve listed the collected data by appliance type. Use Ctrl + F to search the tables by keyword.
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
-6-
Customer Success Metrics Data
جمع کننده جریان
Metric Identification Description
devices_cache.active
Number of active MAC addresses from ISE in the devices cache.
نوع مجموعه
عکس فوری
devices_ cache.deleted
devices_ cache.dropped
devices_cache.new
flow_stats.fps flow_stats.flows
flow_cache.active
flow_cache.dropped
flow_cache.ended
flow_cache.max flow_ cache.percentage
flow_cache.started
hosts_cache.cached
Number of deleted MAC addresses from ISE in the devices cache because they have timed out.
تجمعی
Number of dropped MAC addresses from ISE because the devices cache is full.
تجمعی
Number of new MAC addresses from ISE added into the devices cache.
تجمعی
Outbound flows per second in the last minute. Interval
Inbound flows processed.
فاصله
Number of active flows in the Flow Collector flow cache.
عکس فوری
Number of flows dropped because the Flow Collector flow cache is full.
تجمعی
Number of flows ended in the Flow Collector flow cache.
فاصله
Maximum size of the Flow Collector flow cache. Interval
Percent of capacity of the Flow Collector flow cache
فاصله
Number of flows added to the Flow Collector flow cache.
تجمعی
Number of hosts in the host cache.
فاصله
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
-7-
Customer Success Metrics Data
Metric Identification Description
نوع مجموعه
hosts_cache.deleted Number of hosts deleted in the host cache.
تجمعی
hosts_cache.dropped
Number of hosts dropped because the host cache is full.
تجمعی
hosts_cache.max
Maximum size of the host cache.
فاصله
hosts_cache.new
Number of new hosts added into the host cache.
تجمعی
hosts_ cache.percentage
Percent of capacity of the host cache.
فاصله
hosts_ cache.probationary_ deleted
Number of probationary hosts* deleted in the hosts cache.
*Probationary hosts are hosts that have never been the source of packets and bytes. These hosts are deleted first when clearing up space in the host cache.
تجمعی
interfaces.fps
Outbound number of interface statistics per second exported to Vertica.
فاصله
security_events_ cache.active
Number of active security events in the security events cache.
عکس فوری
security_events_ cache.dropped
Number of security events dropped because the security events cache is full.
تجمعی
security_events_ cache.ended
Number of ended security events in the security events cache.
تجمعی
security_events_ cache.inserted
Number of security events inserted into the database table.
فاصله
security_events_ cache.max
Maximum size of the security events cache.
فاصله
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
-8-
Customer Success Metrics Data
Metric Identification Description
نوع مجموعه
security_events_ cache.percentage
Percent of capacity of the security events cache.
فاصله
security_events_ cache.started
Number of started security events in the security events cache.
تجمعی
session_cache.active
Number of active sessions from ISE in the session cache.
عکس فوری
session_ cache.deleted
Number of deleted sessions from ISE in the session cache.
تجمعی
session_ cache.dropped
Number of sessions from ISE dropped because the sessions cache is full.
تجمعی
session_cache.new
Number of new sessions from ISE added into the session cache.
تجمعی
users_cache.active
Number of active users in the users cache.
عکس فوری
users_cache.deleted
Number of deleted users in the users cache because they have timed out.
تجمعی
users_cache.dropped
Number of users dropped because the users cache is full.
تجمعی
users_cache.new
Number of new users in the users cache.
تجمعی
reset_hour
Flow Collector reset hour.
N/A
vertica_stats.query_ duration_sec_max
Maximum query response time.
تجمعی
vertica_stats.query_ duration_sec_min
Minimum query response time.
تجمعی
vertica_stats.query_ duration_sec_avg
Average query response time.
تجمعی
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
-9-
Customer Success Metrics Data
Metric Identification Description
exporters.fc_count
Number of exporters per Flow Collector.
نوع مجموعه
فاصله
Flow Collector StatsD
Metric Identification Description
ndragent.unprocessable_ finding
Number of NDR findings deemed unprocessable.
ndr-agent.ownership_ registration_failed
Technical detail: Number of certain kind of errors that happened during NDR finding processing.
ndr-agent.upload_ success
Number of NDR findings successfully processed by the agent.
ndr-agent.upload_ failure
Number of NDR findings unsuccessfully uploaded by the agent.
ndr-agent.processing_ Number of failures observed during NDR
شکست
پردازش
ndr-agent.processing_ Number of successfully processed NDR
موفقیت
یافتهها
ndr-agent.old_file_ delete
تعداد files deleted due to being too old.
ndr-agent.old_ registration_delete
Number of ownership registrations revoked due to being too old.
نوع مجموعه
Cumulative cleared daily
Cumulative cleared daily
Cumulative cleared daily
Cumulative cleared daily
Cumulative cleared daily
Cumulative cleared daily
Cumulative cleared daily
Cumulative cleared daily
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 10 –
Customer Success Metrics Data
Metric Identification netflow fs_netflow netflow_bytes fs_netflow_bytes sflow sflow_bytes nvm_endpoint nvm_bytes nvm_netflow
all_sal_event all_sal_bytes
توضیحات
نوع مجموعه
Total NetFlow records from all Netflow exporters. Includes NVM records.
Cumulative cleared daily
Netflow records received from Flow Sensors only.
Cumulative cleared daily
Total NetFlow bytes received from any NetFlow exporter. Includes NVM records.
Cumulative cleared daily
NetFlow bytes received from Flow Sensors only.
Cumulative cleared daily
sFlow records received from any sFlow exporter.
Cumulative cleared daily
sFlow bytes received from any sFlow exporter.
Cumulative cleared daily
Unique NVM endpoints seen today (before daily reset).
Cumulative cleared daily
NVM bytes received (including flow, endpoint, Cumulative
and endpoint_interface records).
cleared daily
NVM bytes received (including flow, endpoint, Cumulative
and endpoint_interface records).
cleared daily
All Security Analytics and Logging (OnPrem) events received (including Adaptive Security Appliance and non-Adaptive Security Appliance), counted by number of events received.
Cumulative cleared daily
All Security Analytics and Logging (OnPrem) Cumulative
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 11 –
Customer Success Metrics Data
Metric Identification
ftd_sal_event ftd_sal_bytes ftd_lina_bytes ftd_lina_event asa_asa_event asa_asa_bytes
مدیر
توضیحات
نوع مجموعه
events received (including Adaptive Security Appliance and non-Adaptive Security Appliance, counted by number of bytes received.
cleared daily
Security Analytics and Logging (OnPrem) (non-Adaptive Security Appliance) events received from Firepower Threat Defense/NGIPS devices only.
Cumulative cleared daily
Security Analytics and Logging (OnPrem) (non-Adaptive Security Appliance) bytes received from Firepower Threat Defense/NGIPS devices only.
Cumulative cleared daily
Data Plane bytes received from Firepower Threat Defense devices only.
Cumulative cleared daily
Data Plane events received from Firepower Threat Defense devices only.
Cumulative cleared daily
Adaptive Security Appliance events received from Adaptive Security Appliance devices only.
Cumulative cleared daily
ASA bytes received from Adaptive Security Appliance devices only.
Cumulative cleared daily
Metric Identification Description
exporter_cleaner_ cleaning_enabled
Indicates whether the Inactive Interfaces and Exporters Cleaner is enabled.
نوع مجموعه
عکس فوری
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 12 –
Customer Success Metrics Data
Metric Identification Description
نوع مجموعه
exporter_cleaner_ inactive_threshold
Number of hours an exporter can be inactive before it is removed.
عکس فوری
exporter_cleaner_
Indicates whether the Cleaner should use the
using_legacy_cleaner legacy cleaning functionality.
عکس فوری
exporter_cleaner_ hours_after_reset
Number of hours after reset that a domain should be cleaned.
عکس فوری
exporter_cleaner_ interface_without_ status_presumed_ stale
Indicates whether the Cleaner removes interfaces that were unknown to a Flow Collector at the last reset hour, treating them as inactive.
عکس فوری
ndrcoordinator.files_ uploaded
Indicates whether Secure Network Analytics deployment works as Data Store.
عکس فوری
report_complete
Name of the report and the run-time in milliseconds (Manager only).
N/A
report_params
Filters used when the Manager queries the Flow Collector databases.
Data exported per query:
l maximum number of rows l include-interface-data flag l fast-query flag l exclude-counts flag l flows direction filters l order-by column l default-columns flag l Time window start date and time l Time window end date and time l Number of device ids criteria l Number of interface ids criteria
عکس فوری
Frequency: Per Request
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 13 –
Customer Success Metrics Data
Metric Identification Description
نوع مجموعه
l Number of IPs criteria
l Number of IP ranges criteria
l Number of hostgroups criteria
l Number of hosts pairs criteria
l Whether results are filtered by MAC addresses
l Whether results are filtered by TCP/UDP ports
l Number of user names criteria
l Whether results are filtered by number of bytes/packets
l Whether results are filtered by total number of bytes/packets
l Whether results are filtered by URL
l Whether results are filtered by protocols
l Whether results are filtered by applications ids
l Whether results are filtered by process name
l Whether results are filtered by process hash
l Whether results are filtered by TLS version
l Number of ciphers in cipher suite criteria
domain.integration_ ad_count
Number of AD connections.
تجمعی
domain.rpe_count
Number of role policies configured.
تجمعی
domain.hg_changes_ count
Changes to the Host Group configuration.
تجمعی
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 14 –
Customer Success Metrics Data
Metric Identification Description
نوع مجموعه
integration_snmp
SNMP agent usage.
N/A
integration_cognitive
Global threat alerts (formerly Cognitive Intelligence) integration enabled.
N/A
domain.services
Number of services defined.
عکس فوری
applications_default_ count
Number of applications defined.
عکس فوری
smc_users_count
Number of users in the Web برنامه
عکس فوری
login_api_count
Number of API log ins.
تجمعی
login_ui_count
تعداد Web App log ins.
تجمعی
report_concurrency Number of reports running concurrently.
تجمعی
apicall_ui_count
Number of Manager API calls using the Web برنامه
تجمعی
apicall_api_count
Number of Manager API calls using the API.
تجمعی
ctr.enabled
Cisco SecureX threat response(formerly Cisco Threat Response) integration enabled.
N/A
ctr.alarm_sender_ enabled
Secure Network Analytics alarms to SecureX threat response enabled.
N/A
ctr.alarm_sender_ minimal_severity
Minimal severity of alarms sent to SecureX threat response.
N/A
ctr.enrichment_ enabled
Enrichment request from SecureX threat response enabled.
N/A
ctr.enrichment_limit
Number of top Security Events to be returned to SecureX threat response.
تجمعی
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 15 –
Customer Success Metrics Data
Metric Identification Description
نوع مجموعه
ctr.enrichment_period
Time period for Security Events to be returned to SecureX threat response.
تجمعی
ctr.number_of_ enrichment_requests
Number of enrichment requests received from SecureX threat response.
تجمعی
ctr.number_of_refer_ Number of requests for Manager pivot link
درخواست ها
received from SecureX threat response.
تجمعی
ctr.xdr_number_of_ alarms
Daily count of alarms sent to XDR.
تجمعی
ctr.xdr_number_of_ alerts
Daily count of alerts sent to XDR.
تجمعی
ctr.xdr_sender_ enabled
True/False if sending is enabled.
عکس فوری
failover_role
Manager primary or secondary failover role in the cluster.
N/A
domain.cse_count
Number of custom security events for a domain ID.
عکس فوری
Manager StatsD
Metric Identification
توضیحات
نوع مجموعه
ndrcoordinator.analytics_ enabled
Marks whether Analytics is enabled. 1 if yes, 0 if no.
عکس فوری
ndrcoordinator.agents_ contacted
Number of NDR agents contacted during the last contact.
عکس فوری
ndrcoordinator.processing_ Number of errors during NDR finding
خطاها
پردازش
تجمعی
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 16 –
Customer Success Metrics Data
Metric Identification
توضیحات
نوع مجموعه
ndrcoordinator.files_ uploaded
Number of NDR findings uploaded for processing.
تجمعی
ndrevents.processing_errors
تعداد files failed to process because the system did not deliver the finding or could not parse the request.
تجمعی
ndrevents.files_uploaded
تعداد files that were sent to NDR events for processing.
تجمعی
sna_swing_client_alive
Internal counter of API calls used by SNA Manager Desktop client.
عکس فوری
swrm_is_in_use
Response Management: Value is 1 if Response Management is used. Value is 0 if it is not used.
عکس فوری
swrm_rules
Response Management: Number of custom rules.
عکس فوری
swrm_action_email
Response Management: Number of custom actions of Email type.
عکس فوری
swrm_action_syslog_ message
Response Management: Number of custom actions of Syslog Message type.
عکس فوری
swrm_action_snmp_trap
Response Management: Number of custom actions of SNMP Trap type.
عکس فوری
swrm_action_ise_anc
Response Management: Number of custom actions of ISE ANC Policy type.
عکس فوری
swrm_action_webقلاب
Response Management: Number of custom actions of Webhook type.
عکس فوری
swrm_action_ctr
Response Management: Number of custom actions of threat response Incident type.
عکس فوری
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 17 –
Customer Success Metrics Data
Metric Identification va_ct va_ce va_hcs va_ss va_ses sal_input_size sal_completed_size
sal_flush_time
sal_batches_succeeded
توضیحات
نوع مجموعه
Visibility Assessment: Calculated runtime in milliseconds.
عکس فوری
Visibility Assessment: Number of errors (when calculation crashes).
عکس فوری
Visibility Assessment: Host count API response size in bytes (detect excessive response size).
عکس فوری
Visibility Assessment: Scanners API response size in bytes (detect excessive response size).
عکس فوری
Visibility Assessment: Security Events API response size in bytes (detect excessive response size).
عکس فوری
Number of entries in the pipeline input queue.
عکس فوری
Frequency: 1 minute
Number of entries in the completed batch queue.
عکس فوری
Frequency: 1 minute
Amount of time in milliseconds since the last pipeline flush.
Available with Security Analytics and Logging (OnPrem) Single-node only.
عکس فوری
Frequency: 1 minute
Number of batches successfully written to the file.
Available with Security Analytics and Logging (OnPrem) Single-node only.
فاصله
Frequency: 1 minute
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 18 –
Customer Success Metrics Data
Metric Identification sal_batches_processed sal_batches_failed sal_files_moved sal_files_failed sal_files_discarded sal_rows_written sal_rows_processed sal_rows_failed
توضیحات
نوع مجموعه
Number of batches that were processed. Interval
Available with Security Analytics and Logging (OnPrem) Single-node only.
Frequency: 1 minute
Number of batches that have failed to complete writing to the file.
Available with Security Analytics and Logging (OnPrem) Single-node only.
فاصله
Frequency: 1 minute
تعداد files moved to the ready directory.
Available with Security Analytics and Logging (OnPrem) Single-node only.
فاصله
Frequency: 1 minute
تعداد files that have failed to be moved.
Available with Security Analytics and Logging (OnPrem) Single-node only.
فاصله
Frequency: 1 minute
تعداد files discarded due to error.
Available with Security Analytics and Logging (OnPrem) Single-node only.
فاصله
Frequency: 1 minute
Number of rows written to the referenced file.
Available with Security Analytics and Logging (OnPrem) Single-node only.
فاصله
Frequency: 1 minute
Number of rows that were processed.
Available with Security Analytics and Logging (OnPrem) Single-node only.
فاصله
Frequency: 1 minute
Number of rows that failed to be written. Interval
Available with Security Analytics and
فرکانس:
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 19 –
Customer Success Metrics Data
Metric Identification
sal_total_batches_ succeeded sal_total_batches_ processed sal_total_batches_failed
sal_total_files_moved
sal_total_files_failed
sal_total_files_discarded sal_total_rows_written
توضیحات
نوع مجموعه
Logging (OnPrem) Single-node only.
1 دقیقه
Total number of batches successfully written to the file.
Available with Security Analytics and Logging (OnPrem) Single-node only.
App Start
Frequency: 1 minute
Total number of batches that were processed.
Available with Security Analytics and Logging (OnPrem) Single-node only.
App Start
Frequency: 1 minute
تعداد کل files that have failed to complete writing to the file.
Available with Security Analytics and Logging (OnPrem) Single-node only.
App Start
Frequency: 1 minute
تعداد کل files moved to the ready directory.
Available with Security Analytics and Logging (OnPrem) Single-node only.
App Start
Frequency: 1 minute
تعداد کل files that have failed to be moved.
Available with Security Analytics and Logging (OnPrem) Single-node only.
App Start
Frequency: 1 minute
تعداد کل files discarded due to error.
Available with Security Analytics and Logging (OnPrem) Single-node only.
App Start
Frequency: 1 minute
Total number of rows written to the referenced file.
Available with Security Analytics and
App Start
Frequency: 1 minute
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 20 –
Customer Success Metrics Data
Metric Identification
sal_total_rows_processed
sal_total_rows_failed sal_transformer_ <transformer id> sal_bytes_per_event sal_bytes_received sal_events_received sal_total_events_received sal_events_dropped
توضیحات
نوع مجموعه
Logging (OnPrem) Single-node only.
Total number of rows that were processed.
Available with Security Analytics and Logging (OnPrem) Single-node only.
App Start
Frequency: 1 minute
Total number of rows that failed to be written.
Available with Security Analytics and Logging (OnPrem) Single-node only.
App Start
Frequency: 1 minute
Number of transformation errors in this transformer.
Available with Security Analytics and Logging (OnPrem) Single-node only.
فاصله
Frequency: 1 minute
Average number of bytes per event received.
فاصله
Frequency: 1 minute
Number of bytes received from the UDP server.
فاصله
Frequency: 1 minute
Number of events received from the UDP server.
فاصله
Frequency: 1 minute
Total number of events received by the router.
App Start
Number of unparsable events dropped.
فاصله
Frequency: 1 minute
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 21 –
Customer Success Metrics Data
Metric Identification sal_total_events_dropped sal_events_ignored sal_total_events_ignored sal_receive_queue_size sal_events_per second sal_bytes_per_second sna_trustsec_report_runs
مدیر UDP
توضیحات
نوع مجموعه
Total number of unparsable events dropped.
App Start
Frequency: 1 minute
Number of ignored/unsupported events.
فاصله
Frequency: 1 minute
Total number of ignored/unsupported events.
App Start
Frequency: 1 minute
Number of events in the receive queue.
عکس فوری
Frequency: 1 minute
Ingest rate (events per second).
فاصله
Frequency: 1 minute
Ingest rate (bytes per second).
فاصله
Frequency: 1 minute
Number of daily TrustSec report requests.
تجمعی
Metric Identification Description
sources_count
Number of sources.
نوع مجموعه
عکس فوری
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 22 –
Customer Success Metrics Data
Metric Identification Description
rules_count packets_unmatched packets_dropped
Number of rules. Maximum unmatched packets. Dropped packets eth0.
Collection Type Snapshot Snapshot Snapshot
All Appliances
Metric Identification Description
نوع مجموعه
پلت فرم
Hardware platform (ex: Dell 13G, KVM Virtual Platform).
N/A
سریال
Serial number of the appliance.
N/A
نسخه
Secure Network Analytics version number (ex: 7.1.0).
N/A
version_build
Build number (ex: 2018.07.16.2249-0).
N/A
version_patch
Patch number.
N/A
csm_version
Customer Success Metrics code version (ex: 1.0.24-SNAPSHOT).
N/A
power_supply.status
Manager and Flow Collector power supply statistics.
عکس فوری
productInstanceName Smart Licensing product identifier.
N/A
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 23 –
تماس با پشتیبانی
تماس با پشتیبانی
اگر به پشتیبانی فنی نیاز دارید، لطفاً یکی از موارد زیر را انجام دهید: l با شریک Cisco محلی خود تماس بگیرید l با پشتیبانی سیسکو تماس بگیرید l برای باز کردن پرونده توسط web: http://www.cisco.com/c/en/us/support/index.html l برای پشتیبانی تلفنی: ۱-800-553-2447 (ایالات متحده) l برای شماره های پشتیبانی سراسری: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 24 –
تاریخچه را تغییر دهید
نسخه سند ۱_۰
تاریخ انتشار ۲۱ آگوست ۲۰۲۵
تاریخچه را تغییر دهید
Description Initial Version.
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
– 25 –
اطلاعات حق چاپ
سیسکو و لوگوی سیسکو علائم تجاری یا علائم تجاری ثبت شده سیسکو و/یا شرکت های وابسته آن در ایالات متحده و سایر کشورها هستند. به view لیستی از علائم تجاری Cisco، به اینجا بروید URL: https://www.cisco.com/go/trademarks. علائم تجاری شخص ثالث ذکر شده متعلق به صاحبان مربوطه است. استفاده از کلمه شریک به معنای رابطه شراکتی بین سیسکو و هیچ شرکت دیگری نیست. (1721R)
© 2025 Cisco Systems, Inc. و/یا شرکت های وابسته به آن. تمامی حقوق محفوظ است.
اسناد / منابع
![]() |
تجزیه و تحلیل شبکه امن سیسکو [pdfراهنمای کاربر v7.5.3, Secure Network Analytics, Secure Network Analytics, Network Analytics, Analytics |