What does it mean? - flow collector longest export exceeded
I have some allarms like that for my devices, maybe I need to increase intervals for monitor or exporter?
The scenario is that all traffic ingesting to flow sensor is north-south, and all hosts are NATed by public IPs. Currently, there is no east-west traffic. However, if east-west traffic were to ingest, would the hosts be visible as endpoints or networ...
Anybody know if the c9606R and c9300X-24Y can work with Stealthwatch?
I try to configure on the c9606R and c9300x-24y
flow record REC-IN
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destina...
I try to replace appliance identity certificate
Generated CSR for ManagerGenerated CSR for CollectorSent them to OUR CA (DC) (admins did template follow this guide https://dependencyhell.net/2021/securing-stealthwatch-with-ca-signed-certificates) Ge...
Hi, I need an advice. I want to be allarmed when one host eirher consume bandwith above 30 Mbps, I made new policy in the "Core events" - single host policy but it seems doesn't work What am I doing wrong?
Has anyone been able to get the response times values in Stealthwatch / SNA to populate? We're various Cisco switches and routers exporting netflow (most relevant here are Ciscp 3850 (16.9.5) and 9300 (16.9.7) and have followed the netflow config gu...
Has anyone tried to use the maxmind script provided here https://developer.cisco.com/codeexchange/github/repo/CiscoSE/MaxmindAsnImporter/ to import maxmind data into 7.4.1? Im using an instance in Dcloud and i get localhost MaxmindAsnImporter-maste...
Hi team,
Differences have been observed between talos and SNA when they detect the country of origin of the traffic. For example, this IP 185[.]233[.]19[.]223 is from Pakistan and source host group from United States (according to SNA) but in talos i...
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: