lately, I test the Stealthwatch API. when i tested the request of top host, i can not receive the any data if i set the time under 9 hour i received the data only when i set the time over 9 hour. body of query is very simple {"startTime":"2019...
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
I am planning to deploy SMC and FC demo version on free VMware ESXi on a customer site but according to cisco official doc for Stealtwatch you should use ISO for ESXi and I have the ovf files downloaded from Cisco. Anyone with similar experience tha...
Hello team,We are experiencing performance issues (specifically on a critical application) on a client's network and we are unable to identify the source of the problem. It is a 3-tier application (Web server, application server, Database server) pro...
Our company has recently renewed our license for StealthWatch, and we're wondering whether it's possible to integrate APIs from SolarWinds into StealthWatch to support our machine learning and baselining.
Form DNA licensing guides we have 25 Stealth licenses C1-SWATCH-T are the same as thise flow rate licenses L-ST-FR?
Resolved! How to Stealth watch license?
There is 25 ISE baselicenses/ISE plus licenses/ stealthwatch flow. in DNA... if i what to license a C9300-24UX-A with C9300--NM-8X (8x10G ports) Do i need to lincense 7 more ports for the uplink? if so how do i Select in work commerce 7 Stealthfl...
Resolved! Stealthwatch License Activation
Oi Temos um problema para instalar a licença no SMC VM Secundary. Você pode nos ajudar? erro de anexo.
Resolved! New Stealthwatch 90-day Trail Feature
Hi All. wanted to ask i want to deploy ovf stealthwatch. Is it true i shall get a free 90 day trail with ovf too? I do not have a cisco partner to get sorted this lic stuff. but have access to stealthwatch software on cisco. I just wanted to test t...
I have a few stealthwatch questions that I hope the community can help answer.For the Cat 9300s with ETA enabled, my current netflow config looks like thisflow record SW-RECORDmatch datalink mac source address inputmatch datalink mac destination addr...
Resolved! Stealthwatch Architecture Question
I am looking at architecture options for Stealthwatch 7.0 We are looking a deploying virtual SMC and flow collectors. If we have multiple data centers - is it supported to have a "primary" SMC and Flow Collector one data center - and a "secondary...
Hi Cisco, I have installed Stealwatch Component, but i cant delete old reports on SMC (Stealwatch Management Console) follow the link (https://<smc-address>/sw-reporting/v1/tenants/<tenants-id>/externalHosts/tag/<tag-id>) and SMC holding the record...
hi all, recently, i am monitoring traffic on stealthwatch and i found an ip link-local within. stealthwatch detected that is coming from inside network and it showed behavior like scanning tcp and SMB for file sharing to outside host and inside hos...
Hey All, in the SMC gui, when it shows alarming hosts, it show ip address, Is there anyway to show the DNS hostname on that page rather than clicking on the ip addres and next page it will show the hostname ? Is it in the road map ?
Resolved! Stealthwatch Python Script using cron
Alan Nix has created a great python script to import the Talos Blacklist into Stealthwatch. I have successfully run the script manually. I would like to run the script daily using cron. I used crontab, but I am not sure it actually runs. Here is th...
So I have a question regarding the netflow direction. All the guides that I have seen only show the input direction. Are you suppose to create 2 flow monitors, one in the input and one in the output? Could someone please enlighten me on this?
