Cisco Secure Network Analytics User Guide

Dinani chizindikiro cha (Ellipsis) cha chipangizocho ndikusankha Sinthani
Kukonzekera kwa Chipangizo.
Pa General tabu, yendani ku Ntchito Zakunja ndikuchotsa
Yambitsani Customer Success Metrics.

Dinani Ikani Zikhazikiko ndikusunga zosintha momwe mukufunira.
Tsimikizirani Mawonekedwe a Zida Zamagetsi abwerera ku Connected pa Central
Tabu ya Management Inventory.

FAQ (Mafunso Ofunsidwa Kawirikawiri)

Kodi ndimadziwa bwanji ngati Customer Success Metrics ndiwoyatsidwa?

Customer Success Metrics imayatsidwa pa Secure yanu
Zida za Network Analytics.

Ndi data iti yomwe imapangidwa ndi Secure Network Analytics?

Secure Network Analytics imapanga JSON file ndi metric data
amene amatumizidwa kumtambo.

"``

View Fullscreen

Cisco Secure Network Analytics
Maupangiri Osintha Makasitomala Opambana 7.5.3

M'ndandanda wazopezekamo

Zathaview

Kukhazikitsa Network Firewall

Kupanga Manager

Kuyimitsa Ma Metrics Kupambana kwa Makasitomala

Customer Success Metrics Data

Mitundu Yosonkhanitsira

Tsatanetsatane wa Metrics

Flow Collector

Flow Collector StatsD

Mtsogoleri

Woyang'anira StatsD

Mtsogoleri wa UDP

Zida Zonse

Kulumikizana ndi Thandizo

Sinthani Mbiri

-2-

Zathaview
Zathaview
Customer Success Metrics imathandizira data ya Cisco Secure Network Analytics (yomwe kale inali Stealthwatch) kuti itumizidwe pamtambo kuti titha kupeza chidziwitso chofunikira chokhudza kutumizidwa, thanzi, magwiridwe antchito, ndi kagwiritsidwe ntchito ka makina anu.
l Yathandizidwa: Customer Success Metrics imayatsidwa pazida zanu za Secure Network Analytics.
l Kufikira pa intaneti: Kufikira pa intaneti ndikofunikira kuti Makasitomala Opambana Metrics. l Cisco Security Service Exchange: Cisco Security Service Exchange imayatsidwa
zodziwikiratu mu v7.5.x ndipo zimafunika pa Customer Success Metrics. l Zambiri Files: Security Network Analytics imapanga JSON file ndi ma metric data.
Deta imachotsedwa ku chipangizocho nthawi yomweyo ikatumizidwa kumtambo.
Bukuli lili ndi izi:
l Kukonza Firewall: Konzani ma firewall anu kuti mulole kulumikizana kuchokera pazida zanu kupita kumtambo. Onani Kukonza Network Firewall.
l Kuyimitsa Zoyezera Kupambana kwa Makasitomala: Kuti mutuluke mu Ma metrics Opambana ndi Makasitomala, tchulani Kuletsa Kupambana kwa Makasitomala.
l Zoyezera Kupambana kwa Makasitomala: Kuti mumve zambiri za ma metric, onani za Customer Success Metrics Data.
Kuti mumve zambiri za kasungidwe ka data komanso momwe mungapemphe kuchotsedwa kwa ma metric omwe atengedwa ndi Cisco, onani Cisco Secure Network Analytics Privacy Data Sheet. Kuti mupeze chithandizo, chonde lemberani Cisco Support.

-3-

Kukhazikitsa Network Firewall
Kukhazikitsa Network Firewall
Kuti mulole kulumikizana kuchokera pazida zanu kupita pamtambo, sinthani zozimitsa moto pa netiweki yanu pa Cisco Secure Network Analytics Manager (omwe kale anali Stealthwatch Management Console).
Onetsetsani kuti zida zanu zili ndi intaneti.
Kupanga Manager
Konzani ma firewall anu a netiweki kuti mulole kulumikizana kuchokera kwa Oyang'anira anu kupita ku ma adilesi awa a IP ndi doko 443:
l api-sse.cisco.com l est.sco.cisco.com l mx*.sse.itd.cisco.com l dex.sse.itd.cisco.com l zochitika-ingest.sse.itd.cisco.com
Ngati DNS yapagulu siyololedwa, onetsetsani kuti mwakonza kusamvana kwanuko pa Oyang'anira anu.

-4-

Kuyimitsa Ma Metrics Kupambana kwa Makasitomala
Kuyimitsa Ma Metrics Kupambana kwa Makasitomala
Gwiritsani ntchito malangizo otsatirawa kuti muyimitse Customer Success Metrics pa chipangizo chamagetsi.
1. Lowani kwa Woyang'anira wanu. 2. Sankhani Konzani> Global> Central Management. 3. Dinani chizindikiro cha (Ellipsis) cha chipangizocho. Sankhani Sinthani Chipangizo
Kusintha. 4. Dinani General tabu. 5. Pitani ku gawo la Ntchito Zakunja. 6. Osayang'ana bokosi Lothandizira Kupambana kwa Makasitomala. 7. Dinani Ikani Zikhazikiko. 8. Tsatirani zomwe zili pazenera kuti musunge zosintha zanu. 9. Pa tabu ya Central Management Inventory, tsimikizirani kuti Zida Zamagetsi zimabwereranso
Zolumikizidwa. 10. Kuti muyimitse Customer Success Metrics pa chipangizo china, bwerezani masitepe 3 mpaka
9.

-5-

Customer Success Metrics Data
Customer Success Metrics Data
Pamene Customer Success Metrics yayatsidwa, ma metrics amasonkhanitsidwa mudongosolo ndikukwezedwa maola 24 aliwonse pamtambo. Deta imachotsedwa ku chipangizocho nthawi yomweyo ikatumizidwa kumtambo. Sitisonkhanitsa zidziwitso monga magulu olandila, ma adilesi a IP, mayina a ogwiritsa ntchito, kapena mawu achinsinsi.
Kuti mumve zambiri za kasungidwe ka data komanso momwe mungapemphe kuchotsedwa kwa ma metric omwe atengedwa ndi Cisco, onani Cisco Secure Network Analytics Privacy Data Sheet.
Mitundu Yosonkhanitsira
Metric iliyonse imasonkhanitsidwa ngati imodzi mwamitundu iyi:
l Kuyamba kwa App: Kulowetsa kamodzi mphindi imodzi iliyonse (kusonkhanitsa deta yonse kuyambira pomwe pulogalamuyo idayamba).
l Zowonjezera: Kulowa kumodzi kwa nthawi ya maola 24
Mitundu ina ya zosonkhanitsira imasonkhanitsidwa pafupipafupi mosiyanasiyana kuposa zomwe tafotokoza pano, kapena zitha kukonzedwa (kutengera kugwiritsa ntchito). Onani zambiri za Metrics kuti mumve zambiri.
Tsatanetsatane wa Metrics
Talemba zomwe zasonkhanitsidwa motengera mtundu wa chipangizocho. Gwiritsani ntchito Ctrl + F kuti mufufuze matebulo ndi mawu osakira.

-6-

Customer Success Metrics Data

Flow Collector

Kufotokozera kwa Metric Identification

devices_cache.active

Nambala ya ma adilesi a MAC omwe akugwira ntchito kuchokera ku ISE mu kache ya zida.

Mtundu Wosonkhanitsa
Chithunzithunzi

devices_ cache.deted
devices_ cache.dropped
devices_cache.new
flow_stats.fps flow_stats.flows
flow_cache.active
flow_cache.wagwa
flow_cache.itha
flow_cache.max flow_ cache.percentage
flow_cache.kuyamba
hosts_cache.cached

Nambala ya ma adilesi a MAC omwe achotsedwa ku ISE mu kache ya zida chifukwa nthawi yake yatha.

Zowonjezera

Nambala ya ma adilesi a MAC otsika kuchokera ku ISE chifukwa posungira zida zadzaza.

Zowonjezera

Nambala ya ma adilesi atsopano a MAC ochokera ku ISE omwe adawonjezedwa pazosungira zida.

Zowonjezera

Kutuluka kwa sekondi imodzi mphindi yomaliza. Nthawi

Mayendedwe olowera akukonzedwa.

Nthawi

Nambala yamayendedwe omwe akuyenda mu Flow Collector flow cache.

Chithunzithunzi

Chiwerengero cha mayendetsedwe chatsika chifukwa chosungira cha Flow Collector chadzaza.

Zowonjezera

Nambala yamayendedwe adathera mu Flow Collector flow cache.

Nthawi

Kukula kwakukulu kwa kachesi ka Flow Collector. Nthawi

Peresenti ya mphamvu ya Flow Collector flow cache

Nthawi

Nambala yamayendedwe awonjezedwa ku Flow Collector flow cache.

Zowonjezera

Chiwerengero cha olandira omwe ali mu kachesi.

Nthawi

-7-

Customer Success Metrics Data

Kufotokozera kwa Metric Identification

Mtundu Wosonkhanitsa

hosts_cache.deted Nambala ya makamu omwe achotsedwa mu cache ya host.

Zowonjezera

hosts_cache.dropped

Chiwerengero cha olandira chatsika chifukwa kache yosungirayo yadzaza.

Zowonjezera

hosts_cache.max

Kukula kwakukulu kwa cache yolandira.

Nthawi

hosts_cache.new

Nambala ya olandila atsopano omwe adawonjezedwa mu kachesi.

Zowonjezera

hosts_ cache.percentage

Maperesenti a kuchuluka kwa cache yolandila.

Nthawi

hosts_ cache.probationary_ zachotsedwa

Nambala ya oyeserera* omwe achotsedwa mu cache ya makamu.
* Othandizira oyeserera ndi ochereza omwe sanakhalepo gwero la mapaketi ndi ma byte. Othandizirawa amachotsedwa poyamba pakuchotsa malo mu cache yosungira.

Zowonjezera

mawonekedwe.fps

Chiwerengero chotuluka cha mawonekedwe pa sekondi iliyonse yotumizidwa ku Vertica.

Nthawi

security_events_ cache.active

Nambala ya zochitika zachitetezo zomwe zili muzosungira zachitetezo.

Chithunzithunzi

security_events_ cache.dropped

Chiwerengero cha zochitika zachitetezo chatsika chifukwa posungira zochitika zachitetezo chadzaza.

Zowonjezera

security_events_ cache.end

Chiwerengero cha zochitika zachitetezo zomwe zatha muzosunga zotetezedwa.

Zowonjezera

security_events_ cache.inserted

Nambala ya zochitika zachitetezo zomwe zayikidwa mu tebulo la database.

Nthawi

security_events_ cache.max

Kukula kwakukulu kwa cache ya zochitika zachitetezo.

Nthawi

-8-

Customer Success Metrics Data

Kufotokozera kwa Metric Identification

Mtundu Wosonkhanitsa

security_events_ cache.percentage

Peresenti ya mphamvu ya cache ya zochitika zachitetezo.

Nthawi

security_events_ cache.started

Nambala ya zochitika zachitetezo zomwe zidayambika muzosungitsa zochitika zachitetezo.

Zowonjezera

session_cache.active

Chiwerengero cha magawo omwe akuchitika kuchokera ku ISE mu kache ya gawoli.

Chithunzithunzi

session_ cache.deted

Chiwerengero cha magawo omwe achotsedwa ku ISE mu kachesi yagawolo.

Zowonjezera

session_ cache.dropped

Chiwerengero cha magawo kuchokera ku ISE chatsika chifukwa kache ya magawo yadzaza.

Zowonjezera

session_cache.new

Chiwerengero cha magawo atsopano kuchokera ku ISE awonjezedwa mu kachesi.

Zowonjezera

users_cache.active

Chiwerengero cha ogwiritsa ntchito omwe ali mu kachesi.

Chithunzithunzi

users_cache.deted

Chiwerengero cha ogwiritsa ntchito omwe achotsedwa mu cache ya ogwiritsa ntchito chifukwa nthawi yatha.

Zowonjezera

users_cache.dropped

Chiwerengero cha ogwiritsa ntchito chatsika chifukwa kache ya ogwiritsa ntchito yadzaza.

Zowonjezera

users_cache.new

Chiwerengero cha ogwiritsa ntchito atsopano mu cache ya ogwiritsa.

Zowonjezera

reset_hour

Flow Collector yokonzanso ola.

N / A

vertica_stats.query_ duration_sec_max

Nthawi yochuluka yoyankha mafunso.

Zowonjezera

vertica_stats.query_ duration_sec_min

Nthawi yochepa yoyankha mafunso.

Zowonjezera

vertica_stats.query_ duration_sec_avg

Avereji yanthawi yoyankhira funso.

Zowonjezera

-9-

Customer Success Metrics Data

Kufotokozera kwa Metric Identification

exporters.fc_count

Chiwerengero cha ogulitsa kunja kwa Flow Collector.

Mtundu Wosonkhanitsa
Nthawi

Flow Collector StatsD

Kufotokozera kwa Metric Identification

ndragent.unprocessable_ kupeza

Chiwerengero cha zomwe NDR zapeza zomwe zimawoneka ngati zosatheka.

ndr-agent.ownership_ kulembetsa_kwalephera

Tsatanetsatane waukadaulo: Chiwerengero cha zolakwika zamtundu wina zomwe zidachitika pakukonza kwa NDR.

ndr-agent.upload_ kupambana

Chiwerengero cha zomwe NDR zapeza zomwe zakonzedwa bwino ndi wothandizira.

ndr-agent.upload_ kulephera

Chiwerengero cha zomwe NDR zapeza zomwe zidakwezedwa ndi wothandizirayo sizinaphule kanthu.

ndr-agent.processing_ Chiwerengero cha zolephera zomwe zawonedwa pa NDR

kulephera

kukonza.

ndr-agent.processing_ Nambala ya NDR yokonzedwa bwino

kupambana

zopeza.

ndr-agent.old_file_ kufufuta

Nambala ya files zichotsedwa chifukwa chokalamba kwambiri.

ndr-agent.old_ registration_delete

Chiwerengero cha olembetsa umwini achotsedwa chifukwa chokalamba kwambiri.

Mtundu Wosonkhanitsa
Zowonjezera zimachotsedwa tsiku lililonse
Zowonjezera zimachotsedwa tsiku lililonse
Zowonjezera zimachotsedwa tsiku lililonse
Zowonjezera zimachotsedwa tsiku lililonse
Zowonjezera zimachotsedwa tsiku lililonse
Zowonjezera zimachotsedwa tsiku lililonse
Zowonjezera zimachotsedwa tsiku lililonse
Zowonjezera zimachotsedwa tsiku lililonse

- 10 -

Customer Success Metrics Data

Metric Identification netflow fs_netflow netflow_bytes fs_netflow_bytes sflow_bytes nvm_endpoint nvm_bytes nvm_netflow
all_sal_event all_sal_bytes

Kufotokozera

Mtundu Wosonkhanitsa

Zolemba zonse za NetFlow kuchokera kwa onse ogulitsa Netflow. Zimaphatikizapo zolemba za NVM.

Zowonjezera zimachotsedwa tsiku lililonse

Zolemba za Netflow zolandiridwa kuchokera ku Flow Sensors zokha.

Zowonjezera zimachotsedwa tsiku lililonse

Ma byte onse a NetFlow omwe adalandilidwa kuchokera kwa wogulitsa kunja kwa NetFlow. Zimaphatikizapo zolemba za NVM.

Zowonjezera zimachotsedwa tsiku lililonse

NetFlow byte idalandiridwa kuchokera ku Flow Sensors kokha.

Zowonjezera zimachotsedwa tsiku lililonse

Zolemba za sFlow zolandiridwa kuchokera kwa wogulitsa kunja kwa sFlow.

Zowonjezera zimachotsedwa tsiku lililonse

sFlow byte zolandilidwa kuchokera kwa wotumiza kunja kwa sFlow.

Zowonjezera zimachotsedwa tsiku lililonse

Mapeto apadera a NVM omwe awonedwa lero (asanakhazikitsidwenso tsiku lililonse).

Zowonjezera zimachotsedwa tsiku lililonse

NVM ma byte adalandiridwa (kuphatikiza flow, endpoint, Cumulative

ndi endpoint_interface records).

kuyeretsedwa tsiku ndi tsiku

NVM ma byte adalandiridwa (kuphatikiza flow, endpoint, Cumulative

ndi endpoint_interface records).

kuyeretsedwa tsiku ndi tsiku

Zochitika zonse za Security Analytics ndi Logging (OnPrem) zolandilidwa (kuphatikiza Adaptive Security Appliance ndi non-Adaptive Security Appliance), zowerengedwa ndi kuchuluka kwa zochitika zomwe zalandiridwa.

Zowonjezera zimachotsedwa tsiku lililonse

Zowerengera Zonse Zachitetezo ndi Kulowetsa (OnPrem) Cumulative

- 11 -

Customer Success Metrics Data

Chizindikiritso cha Metric
ftd_sal_event ftd_sal_bytes ftd_lina_bytes ftd_lina_event asa_asa_event asa_asa_bytes
Mtsogoleri

Kufotokozera

Mtundu Wosonkhanitsa

zochitika zolandilidwa (kuphatikiza Adaptive Security Appliance ndi non-Adaptive Security Appliance, zowerengedwa ndi kuchuluka kwa ma byte omwe alandilidwa.

kuyeretsedwa tsiku ndi tsiku

Zochitika za Security Analytics and Logging (OnPrem) (non-Adaptive Security Appliance) zolandilidwa kuchokera ku zida za Firepower Threat Defense/NGIPS zokha.

Zowonjezera zimachotsedwa tsiku lililonse

Security Analytics and Logging (OnPrem) (non-Adaptive Security Appliance) byte zolandilidwa kuchokera ku zida za Firepower Threat Defense/NGIPS zokha.

Zowonjezera zimachotsedwa tsiku lililonse

Data Plane byte yolandiridwa kuchokera ku zida za Firepower Threat Defense zokha.

Zowonjezera zimachotsedwa tsiku lililonse

Zochitika za Data Plane zolandiridwa kuchokera ku zida za Firepower Threat Defense zokha.

Zowonjezera zimachotsedwa tsiku lililonse

Zochitika za Adaptive Security Appliance zidalandiridwa kuchokera ku zida za Adaptive Security Appliance zokha.

Zowonjezera zimachotsedwa tsiku lililonse

ASA ma byte amalandila kuchokera ku zida za Adaptive Security Appliance zokha.

Zowonjezera zimachotsedwa tsiku lililonse

Kufotokozera kwa Metric Identification

exporter_cleaner_ cleaning_enabled

Imawonetsa ngati Inactive Interfaces ndi Exporters Cleaner yayatsidwa.

Mtundu Wosonkhanitsa
Chithunzithunzi

- 12 -

Customer Success Metrics Data

Kufotokozera kwa Metric Identification

Mtundu Wosonkhanitsa

exporter_cleaner_ inactive_threshold

Nambala ya maola omwe munthu wotumiza kunja angakhale wosagwira ntchito asanachotsedwe.

Chithunzithunzi

exporter_cleaner_

Imawonetsa ngati Wotsuka ayenera kugwiritsa ntchito

kugwiritsa ntchito_legacy_cleaner kuyeretsa cholowa.

Chithunzithunzi

exporter_cleaner_ hours_after_reset

Nambala ya maola mutatha kukonzanso kuti dera liyeretsedwe.

Chithunzithunzi

exporter_cleaner_ interface_without_ status_presumed_ stale

Imawonetsa ngati Wotsukayo amachotsa zolumikizira zomwe sizinali zodziwika kwa Wosonkhanitsa Flow pa ola lomaliza lokonzanso, kuwaona ngati osagwira ntchito.

Chithunzithunzi

ndrcoordinator.files_ zidakwezedwa

Imawonetsa ngati Secure Network Analytics deployment imagwira ntchito ngati Data Store.

Chithunzithunzi

report_malize

Dzina la lipoti ndi nthawi yothamanga mu ma milliseconds (Woyang'anira yekha).

N / A

report_params

Zosefera zomwe zimagwiritsidwa ntchito pomwe Woyang'anira akufunsa nkhokwe za Flow Collector.
Zomwe zatumizidwa pafunso lililonse:
l chiwerengero chochuruka cha mizere l kuphatikizapo-interface-data mbendera l yofulumira-funso mbendera, kusawerengera-mawerengero l kuyenda zosefera mayendedwe l ndondomeko-ndi mzati l kusakhazikika-mizere mbendera l Zenera la nthawi tsiku loyambira ndi nthawi l Nthawi yotsiriza zenera tsiku ndi nthawi l Chiwerengero cha ma ID a chipangizo l Chiwerengero cha mawonekedwe a ID

Chithunzithunzi
pafupipafupi: Pa Pempho

- 13 -

Customer Success Metrics Data

Kufotokozera kwa Metric Identification

Mtundu Wosonkhanitsa

l Chiwerengero cha ma IPs
l Chiwerengero cha magawo a IP
l Chiwerengero cha mayendedwe a hostgroups
l Chiwerengero cha zoyezetsa zokhala ndi magulu awiriawiri
l Kaya zotsatira zimasefedwa ndi ma adilesi a MAC
l Kaya zotsatira zimasefedwa ndi madoko a TCP/UDP
l Nambala yazomwe mungagwiritse ntchito mayina
l Kaya zotsatira zasefedwa ndi kuchuluka kwa ma byte/paketi
l Kaya zotsatira zasefedwa ndi kuchuluka kwa ma byte/mapaketi
l Kaya zotsatira zasefedwa ndi URL
l Kaya zotsatira zimasefedwa ndi ma protocol
l Kaya zotsatira zimasefedwa ndi ma ID a mapulogalamu
l Kaya zotsatira zasefedwa ndi dzina ndondomeko
l Kaya zotsatira zimasefedwa ndi ndondomeko hashi
l Kaya zotsatira zasefedwa ndi mtundu wa TLS
l Chiwerengero cha ma cipher mu mfundo za cipher suite

domain.integration_ ad_count

Chiwerengero cha ma AD.

Zowonjezera

domain.rpe_count

Chiwerengero cha mfundo zomwe zakhazikitsidwa.

Zowonjezera

domain.hg_changes_ count

Kusintha kwa kasinthidwe ka Host Group.

Zowonjezera

- 14 -

Customer Success Metrics Data

Kufotokozera kwa Metric Identification

Mtundu Wosonkhanitsa

integration_snmp

Kugwiritsa ntchito wothandizira wa SNMP.

N / A

integration_cognitive

Zidziwitso zowopsa zapadziko lonse lapansi (omwe kale anali a Cognitive Intelligence) athandizidwa.

N / A

domain.services

Chiwerengero cha mautumiki ofotokozedwa.

Chithunzithunzi

applications_default_ count

Chiwerengero cha mapulogalamu ofotokozedwa.

Chithunzithunzi

smc_users_count

Chiwerengero cha ogwiritsa ntchito mu Web Pulogalamu.

Chithunzithunzi

login_api_count

Nambala ya malowedwe a API.

Zowonjezera

login_ui_count

Nambala ya Web Mapulogalamu olowera.

Zowonjezera

report_concurrency Chiwerengero cha malipoti omwe akugwira ntchito nthawi imodzi.

Zowonjezera

apicall_ui_count

Nambala ya mafoni a Manager API pogwiritsa ntchito Web Pulogalamu.

Zowonjezera

apicall_api_count

Chiwerengero cha mafoni a Manager API pogwiritsa ntchito API.

Zowonjezera

ctr.enabled

Kuyankha kwachiwopsezo kwa Cisco SecureX (komwe kale kunali Cisco Threat Response) kumathandizira.

N / A

ctr.alarm_sender_ yathandizidwa

Sungani ma alarm a Network Analytics ku mayankho owopseza a SecureX athandizidwa.

N / A

ctr.alarm_sender_ minimal_severity

Kuwopsa kwakung'ono kwa ma alarm omwe amatumizidwa ku SecureX kuyankha kuwopseza.

N / A

ctr.enrichment_ yathandizidwa

Pempho lolemetsa kuchokera ku kuyankha kwachiwopsezo kwa SecureX kwathandizidwa.

N / A

ctr.enrichment_limit

Chiwerengero cha Zochitika Zachitetezo zapamwamba zomwe ziyenera kubwezeredwa ku mayankho owopseza a SecureX.

Zowonjezera

- 15 -

Customer Success Metrics Data

Kufotokozera kwa Metric Identification

Mtundu Wosonkhanitsa

ctr.enrichment_period

Nthawi yoti Zochitika Zachitetezo zibwezeretsedwe ku mayankho owopseza a SecureX.

Zowonjezera

ctr.number_of_ enrichment_requests

Chiwerengero cha zopempha zolemetsa zomwe zalandiridwa kuchokera ku mayankho owopseza a SecureX.

Zowonjezera

ctr.number_of_refer_ Nambala ya zopempha za ulalo wa pivot wa Manager

zopempha

adalandira kuyankha kwachitetezo cha SecureX.

Zowonjezera

ctr.xdr_number_of_ ma alarm

Kuwerengera tsiku ndi tsiku kwa ma alarm omwe amatumizidwa ku XDR.

Zowonjezera

ctr.xdr_number_of_ zidziwitso

Zidziwitso zatsiku ndi tsiku zomwe zimatumizidwa ku XDR.

Zowonjezera

ctr.xdr_sender_ yathandizidwa

Zoona/Zabodza ngati kutumiza kwayatsidwa.

Chithunzithunzi

failover_role

Woyang'anira gawo loyamba kapena lachiwiri lolephera mgulu.

N / A

domain.cse_count

Nambala ya zochitika zotetezedwa pa ID ya domeni.

Chithunzithunzi

Woyang'anira StatsD

Chizindikiritso cha Metric

Kufotokozera

Mtundu Wosonkhanitsa

ndrcoordinator.analytics_ yathandizidwa

Imayika ngati Analytics yayatsidwa. 1 ngati inde, 0 ngati ayi.

Chithunzithunzi

ndrcoordinator.agents_ analumikizidwa

Chiwerengero cha othandizira a NDR omwe adalumikizidwa panthawi yomaliza.

Chithunzithunzi

ndrcoordinator.processing_ Chiwerengero cha zolakwika pakupeza NDR

zolakwika

kukonza.

Zowonjezera

- 16 -

Customer Success Metrics Data

Chizindikiritso cha Metric

Kufotokozera

Mtundu Wosonkhanitsa

ndrcoordinator.files_ zidakwezedwa

Chiwerengero cha zomwe NDR zapeza zomwe zidakwezedwa kuti zisinthidwe.

Zowonjezera

ndrevents.processing_errors

Nambala ya files inalephera kukonzedwa chifukwa dongosolo silinapereke zomwe zapeza kapena silinathe kufotokozera pempho.

Zowonjezera

ndrevents.files_yokwezedwa

Nambala ya filezomwe zidatumizidwa ku zochitika za NDR kuti zikakonzedwe.

Zowonjezera

sna_swing_client_alive

Zowerengera zamkati zama foni a API ogwiritsidwa ntchito ndi kasitomala wa SNA Manager Desktop.

Chithunzithunzi

swrm_is_in_use

Kuwongolera Mayankho: Mtengo ndi 1 ngati Response Management ikugwiritsidwa ntchito. Mtengo ndi 0 ngati sichikugwiritsidwa ntchito.

Chithunzithunzi

swrm_malamulo

Kasamalidwe ka Mayankho: Chiwerengero cha malamulo achikhalidwe.

Chithunzithunzi

swrm_action_email

Kuwongolera Mayankho: Chiwerengero cha zochita zamtundu wa Imelo.

Chithunzithunzi

swrm_action_syslog_ uthenga

Kuwongolera Mayankho: Chiwerengero cha machitidwe amtundu wa Syslog Message.

Chithunzithunzi

swrm_action_snmp_trap

Kuwongolera Mayankho: Chiwerengero cha machitidwe amtundu wa SNMP Trap.

Chithunzithunzi

swrm_action_ise_anc

Kuwongolera Mayankho: Chiwerengero cha machitidwe amtundu wa ISE ANC Policy.

Chithunzithunzi

swrm_action_webmbeza

Kasamalidwe ka Mayankho: Chiwerengero cha zochita za Webmtundu wa mbeza.

Chithunzithunzi

swrm_action_ctr

Kasamalidwe ka Mayankho: Chiwerengero cha zochitika zomwe zimachitika pakuwopseza mtundu wa chochitika.

Chithunzithunzi

- 17 -

Customer Success Metrics Data

Metric Identification va_ct va_ce va_hcs va_ss va_ses sal_input_size sal_completed_size
sal_flush_time
sal_batches_apambana

Kufotokozera

Mtundu Wosonkhanitsa

Kuwunika kwa Mawonekedwe: Kuwerengera nthawi yothamanga mu milliseconds.

Chithunzithunzi

Kuwunika kwa Mawonekedwe: Chiwerengero cha zolakwika (pamene mawerengedwe awonongeka).

Chithunzithunzi

Kuwunika Kuwoneka: Kuwerengera kwa API kwa Host count mu byte (zindikirani kukula kwakuyankhidwa kwakukulu).

Chithunzithunzi

Kuwunika Kuwoneka: Kukula kwa mayankho a Scanners API mu ma byte (zindikirani kukula kwakuyankhidwa kwakukulu).

Chithunzithunzi

Kuwunika Kuwoneka: Kukula kwa mayankho a API ya Zochitika Zachitetezo mu ma byte (zindikirani kukula kwakuyankhidwa kwakukulu).

Chithunzithunzi

Chiwerengero cha zomwe zalembedwa pamzere wolowetsa mapaipi.

Chithunzithunzi
pafupipafupi: 1 miniti

Chiwerengero cha zomwe zalembedwa pamzere womalizidwa.

Chithunzithunzi
pafupipafupi: 1 miniti

Kuchuluka kwa nthawi mu ma milliseconds kuyambira pomwe mapaipi omaliza akuwombedwa.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Chithunzithunzi
pafupipafupi: 1 miniti

Chiwerengero cha magulu olembedwa bwino ku file.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Nthawi
pafupipafupi: 1 miniti

- 18 -

Customer Success Metrics Data

Metric Identification sal_batches_processed sal_batches_failed sal_files_moved sal_files_walephera sal_files_kutayidwa sal_rows_written sal_rows_processed sal_rows_foiled

Kufotokozera

Mtundu Wosonkhanitsa

Chiwerengero cha magulu omwe adakonzedwa. Nthawi

Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

pafupipafupi: 1 miniti

Chiwerengero cha magulu omwe alephera kumaliza kulemba ku file.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Nthawi
pafupipafupi: 1 miniti

Nambala ya files yasamukira ku chikwatu chokonzeka.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Nthawi
pafupipafupi: 1 miniti

Nambala ya files omwe alephera kusuntha.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Nthawi
pafupipafupi: 1 miniti

Nambala ya fileatayidwa chifukwa cha zolakwika.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Nthawi
pafupipafupi: 1 miniti

Nambala yamizere yolembedwa kwa omwe akulozera file.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Nthawi
pafupipafupi: 1 miniti

Chiwerengero cha mizere yomwe idakonzedwa.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Nthawi
pafupipafupi: 1 miniti

Chiwerengero cha mizere yomwe sinalembedwe. Nthawi

Imapezeka ndi Security Analytics ndi

pafupipafupi:

- 19 -

Customer Success Metrics Data

Chizindikiritso cha Metric
sal_total_batches_ adapambana sal_total_batches_ kukonzedwa sal_total_batches_failed
sal_total_files_sunthidwa
sal_total_files_zalephera
sal_total_files_tataya sal_total_rows_written

Kufotokozera

Mtundu Wosonkhanitsa

Kudula mitengo (OnPrem) Njira imodzi yokha.

1 miniti

Chiwerengero chonse cha magulu olembedwa bwino ku file.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero chonse cha magulu omwe adakonzedwa.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero chonse cha files amene alephera kumaliza kulemba ku file.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero chonse cha files yasamukira ku chikwatu chokonzeka.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero chonse cha files omwe alephera kusuntha.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero chonse cha fileatayidwa chifukwa cha zolakwika.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero chonse cha mizere yolembedwa ku zolozerazo file.
Imapezeka ndi Security Analytics ndi

Kuyamba kwa App
pafupipafupi: 1 miniti

- 20 -

Customer Success Metrics Data

Chizindikiritso cha Metric
sal_total_rows_processed
sal_total_rows_failed sal_transformer_ sal_bytes_per_event sal_bytes_received sal_events_received sal_total_events_received sal_events_dropped

Kufotokozera

Mtundu Wosonkhanitsa

Kudula mitengo (OnPrem) Njira imodzi yokha.

Chiwerengero chonse cha mizere yomwe idakonzedwa.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero chonse cha mizere yomwe sinalembedwe.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero cha zolakwika zosinthika mu thiransifoma iyi.
Imapezeka ndi Security Analytics ndi Logging (OnPrem) Single-node yokha.

Nthawi
pafupipafupi: 1 miniti

Avereji ya ma byte pa chochitika chilichonse cholandiridwa.

Nthawi
pafupipafupi: 1 miniti

Chiwerengero cha ma byte olandiridwa kuchokera ku seva ya UDP.

Nthawi
pafupipafupi: 1 miniti

Chiwerengero cha zochitika zolandilidwa kuchokera ku seva ya UDP.

Nthawi
pafupipafupi: 1 miniti

Chiwerengero chonse cha zochitika zolandilidwa ndi rauta.

Kuyamba kwa App

Chiwerengero cha zochitika zosawerengeka zatsika.

Nthawi
pafupipafupi: 1 miniti

- 21 -

Customer Success Metrics Data

Metric Identification sal_total_events_dropped sal_events_ignored sal_total_events_ignored sal_receive_queue_size sal_events_per sekondi sal_bytes_per_second sna_trustsec_report_runs
Mtsogoleri wa UDP

Kufotokozera

Mtundu Wosonkhanitsa

Chiwerengero cha zochitika zosawerengeka zatsika.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero cha zochitika zonyalanyazidwa/zosachirikizidwa.

Nthawi
pafupipafupi: 1 miniti

Chiwerengero chonse cha zochitika zonyalanyazidwa/zosachirikizidwa.

Kuyamba kwa App
pafupipafupi: 1 miniti

Chiwerengero cha zochitika pamzere wolandirira.

Chithunzithunzi
pafupipafupi: 1 miniti

Kulowetsedwa (zochitika pa sekondi iliyonse).

Nthawi
pafupipafupi: 1 miniti

Kulowetsedwa (mabyte pa sekondi iliyonse).

Nthawi
pafupipafupi: 1 miniti

Chiwerengero cha zopempha za tsiku ndi tsiku za TrustSec.

Zowonjezera

Kufotokozera kwa Metric Identification

sources_count

Chiwerengero cha magwero.

Mtundu Wosonkhanitsa
Chithunzithunzi

- 22 -

Customer Success Metrics Data

Kufotokozera kwa Metric Identification

Malamulo_mapaketi_mapaketi osagwirizana_atsika

Chiwerengero cha malamulo. Mapaketi apamwamba osafananizidwa. Mapaketi otsika eth0.

Mtundu Wosonkhanitsira Chithunzi Chojambula

Zida Zonse

Kufotokozera kwa Metric Identification

Mtundu Wosonkhanitsa

nsanja

nsanja ya Hardware (monga: Dell 13G, KVM Virtual Platform).

N / A

mndandanda

Nambala ya seri ya chipangizocho.

N / A

Baibulo

Nambala yotetezedwa ya Network Analytics (mwachitsanzo: 7.1.0).

N / A

mtundu_build

Mangani nambala (mwachitsanzo: 2018.07.16.2249-0).

N / A

mtundu_chigamba

Nambala yachigamba.

N / A

csm_version

Mtundu wa khodi ya Customer Success Metrics (monga: 1.0.24-SNAPSHOT).

N / A

power_supply.status

Ziwerengero zamagetsi a Manager ndi Flow Collector.

Chithunzithunzi

productInstanceName Smart Licensing product identifier.

N / A

- 23 -

Kulumikizana ndi Thandizo
Kulumikizana ndi Thandizo
Ngati mukufuna thandizo laukadaulo, chonde chitani chimodzi mwa izi: l Lumikizanani ndi Cisco Partner yanu l Lumikizanani ndi Cisco Support l Kuti mutsegule mlandu ndi web: http://www.cisco.com/c/en/us/support/index.html l Pothandizira foni: 1-800-553-2447 (US) l Kwa manambala othandizira padziko lonse lapansi: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

- 24 -

Sinthani Mbiri

Document Version 1_0

Lofalitsidwa pa Ogasiti 18, 2025

Sinthani Mbiri
Kufotokozera Baibulo Loyambirira.

- 25 -

Zambiri Zaumwini
Cisco ndi logo ya Cisco ndi zizindikilo zamalonda kapena zizindikilo zolembetsedwa za Cisco ndi/kapena mabungwe omwe ali nawo ku US ndi mayiko ena. Ku view mndandanda wazizindikiro za Cisco, pitani ku izi URL: https://www.cisco.com/go/trademarks. Zizindikiro za chipani chachitatu zomwe zatchulidwa ndi za eni ake. Kugwiritsiridwa ntchito kwa mawu oti wokondedwa sikutanthawuza mgwirizano wa mgwirizano pakati pa Cisco ndi kampani ina iliyonse. (1721R)
© 2025 Cisco Systems, Inc. ndi/kapena othandizana nawo. Maumwini onse ndi otetezedwa.

Zolemba / Zothandizira

Cisco Secure Network Analytics [pdf] Buku Logwiritsa Ntchito
v7.5.3, Secure Network Analytics, Secure Network Analytics, Network Analytics, Analytics

Maumboni

Buku Logwiritsa Ntchito

Cisco Secure Network Analytics User Guide

Secure Network Analytics

Zambiri Zamalonda

Zofotokozera:

Malangizo Ogwiritsira Ntchito Zogulitsa

Kupanga Network Firewall:

Kupanga Manager:

Kuyimitsa Kupambana kwa Makasitomala:

FAQ (Mafunso Ofunsidwa Kawirikawiri)

Kodi ndimadziwa bwanji ngati Customer Success Metrics ndiwoyatsidwa?

Ndi data iti yomwe imapangidwa ndi Secure Network Analytics?

Zolemba / Zothandizira

Maumboni

Siyani ndemanga

Letsani yankho