cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
606
Views
0
Helpful
1
Replies

Stealthwatch Cloud - Session details missing

JuliaMora15110
Level 1
Level 1

Has Stealthwatch Cloud alerting changed? For example, I’m trying to review an alert that triggered. Normally, to see the network events associated, there used to be a blue clickable link at the TimeDate and that would bring up the specific network details for that alert.

 

This appears to be now missing or defunct. Please advise how we are supposed to review the specific session details.

1 Reply 1

Philipp Tannich
Cisco Employee
Cisco Employee

Hi @JuliaMora15110, I hope I got your question correct:

Can you please go to your Alerts section and click on the alert you want to have more details on, on "Observation"

alerts.jpg

And then you see the alert again with the time stamp where you can click on "Session Traffic"
observations.jpg

Is the next page what you're looking for?

You can also go to this with Monitor > Event Viewer, but then you have to manually drill down to your alert.

Hope this helps,
cheers

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: