Please Find the article at the link below.https://medium.com/@enricosorge/cisco-live-2018-how-to-handle-threats-in-a-very-large-event-b82133191b1e
Welcome to the Security Analytics Board!
Please take a look at our Stealthwatch Information Hub and our Stealthwatch Use Cases.Forum Posts
Hello all,I have a query from our customer, which have implemented Cisco Stealthwatch v.6.9.0, which consists of Flow Collector 4200 as a hardware appliance and SMC as a virtual machine. So far, Flow Collector collects flows from 4 Cisco Nexus 7700 s...
Hi allwe have nexus 7k switches with f3 line card configured exporter sampler netflow data to Stealthwatch 6.9.2.The problem explain, Stealthwatch showing less data on interface inbound traffic comparing to SNMP interface statics for example WAN int...
Resolved! Cisco Stealthwatch
Dear Friends, Can anyone explain me different between Flow Sensor and UDP Director ? Both appliances capture NetFlow traffic and send it to Flow Collector, but I don't understand why we must use both of it, In my opinion both of this appliances doing...
When is 6.10 available for download?
as Cisco Stealthwatch Learning Network License Configuration Guide, Version 1.1 - Introduction [Cisco Stealthwatch Learning… says:"Active LearningAs a user, you can review the reported anomalies from the controller web UI. You have the option of assi...
Resolved! Stealthwatch Capacity planning
What are the parameters other than CPU, Memory and Storage that should be monitored on Stealthwatch in order to do capacity planning effectively. Following are been deployed int the production environment FlowCollector for NetFlow 4000FlowReplicator ...
I do a trial Stealthwatch 6.9When I want to add exporter WLC into FlowExporter, there is like this : And show in SMC is :For WLC already upgrade into v8.2.166.0 which is support
what type of database is used in stealthwatch?can we have explain about how stealthwatch can learn or analyze? I mean the way of learning
Does the Cat 9k advantage license include the The SMC server VM sku and the SFC server VM sku or do these still need to be purchased separately?
Dear Team, We are facing the issue with Stealthwatch Appliance License Activation. Please help us to resolve the same. We need to start testing. Attached file is for your reference. Thanks.
Join the Stealthwatch team for a special session to learn about new features in Stealthwatch 6.9 that help drive incident investigation and see demonstrations on how to use these new features to investigate security events and anomalous traffic quick...
Hi ThereI have a few ASR55XX/ASR5000 boxes (StarOS) that do not support Netflow or Telemetry flows. They do however generate Syslog entries that provide insight into "who" logged in, "what time" the person logging in, "source ip" of the device used t...
I'm trying to find a way to import data I have in an excel file for new hostgroups into Stealthwatch. I believe the way of doing it is to generate an XML file from that Excel spreadsheet, however the challenge I'm finding is when I export my Excel sp...
New to Stealthwatch Enterprise or need a refresher? Check out our guide for an overview, best practices, and helpful insights.
