While restoring the backup of stealthwatch (SNA) to a new device, the new appliances 9collector, sensor etc) serial numbers are different. Will the restore work in this case.
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Hello, currently we are facing two data nodes failure from 9 nodes DSN cluster. We already tried to start the failed nodes but SMC returns the following Error:Unable to read database catalogs - cannot start databaseFirst, I would appreciate that if a...
I'm using the SNA APIs with dCloud. When I use the following API "/tenants/{tenantId}/devices" in Postman, I get the error message, "The requested resource could not be found." It should return I'm not able to use any of the APIs within this branch...
how to migrate cisco stealthwatch to new secure network analytics (SNA) hardware?Which is the latest stable version for SNA now?
Recently I found that my Security Network Analytics (with last update-smc-ROLLUP20240709-7.5.0) doesn't add new exporter. For example I have 132 exporters for 3 Netflow collectors, I configured new device (c8200) for export netflow and realized that ...
Hello, Based on the ordering guide of SNA TI license is per collector. However there are a few options L-LC-TI-FC1K= -Use this PID for virtual Flow Collectors that are (or will be) configured as a FC1K for very small deployments L-LC-TI-FC2K= -Use th...
Hi, Just asking to see if there is anything to do with SMC stuck in initializing after power-failure? Seems 100 year backwards to lock troubleshooting out for customers and engineers behind a TAC-challenge. I should never have upgraded to 7.5.x i kne...
I am reading the Cisco Stealthwatch Desktop Client User Guide and the following section about the Variance-based alarms Never trigger alarm when less than: Also known as the minimumthreshold, this is a static value that indicates the lowest value to ...
What does it mean? - flow collector longest export exceeded I have some allarms like that for my devices, maybe I need to increase intervals for monitor or exporter?
Dear, I would like to ask if it is possible to make automatic reports in SNA. Currently we generate reports manually, but our client wants to automate them.There is the mentioned process, can you share information with me, I remain attentive thanks.
Resolved! SNA Host Groups Advanced Options
Can someone help me with understanding what each of these Advanced options means and in which use cases I should check or uncheck these?
I'm in the process of configuring SNA Manager and flow collectors and applying the Best practice guide. I've enabled FIPS mode and Common Criteria Encryption libraries on SNA Flow collectors after uploading the correct certs to both SNA Manager and f...
I am unable to manually assign ANC policies to hosts in the Secure Network Analytics Host Report section. When I inspect a specific host and try to assign one at the Host Summary Pane, I am receiving this error: We encountered an error from one or mo...
What is the best method for getting security events and analytics into an external SIEM (Splunk)? Thank youPhilip
Has anyone tried to use the maxmind script provided here https://developer.cisco.com/codeexchange/github/repo/CiscoSE/MaxmindAsnImporter/ to import maxmind data into 7.4.1? Im using an instance in Dcloud and i get localhost MaxmindAsnImporter-maste...
