Cisco Cisco FirePOWER Appliance 7120
54-2
FireSIGHT System User Guide
Chapter 54 Monitoring the System
Viewing Host Statistics
•
general host statistics; see the
table for details
•
Data Correlator statistics (Defense Center only — requires FireSIGHT); see the
table for details
•
intrusion event information (requires Protection); see the
table for
details
The following table describes the host statistics listed on the Statistics page.
If your FireSIGHT System deployment includes a Defense Center with a FireSIGHT license, you can
also view statistics about the Data Correlator and network discovery processes for the current day. As
the managed devices perform data acquisition, decoding, and analysis, the network discovery process
correlates the data with the fingerprint and vulnerability databases, then produces binary files that are
processed by the Data Correlator running on the Defense Center. The Data Correlator analyzes the
information from the binary files, generates events, and creates the discovery network map.
also view statistics about the Data Correlator and network discovery processes for the current day. As
the managed devices perform data acquisition, decoding, and analysis, the network discovery process
correlates the data with the fingerprint and vulnerability databases, then produces binary files that are
processed by the Data Correlator running on the Defense Center. The Data Correlator analyzes the
information from the binary files, generates events, and creates the discovery network map.
The statistics that appear for network discovery and the Data Correlator are averages for the current day,
using statistics gathered between 12:00 AM and 11:59 PM for each device.
using statistics gathered between 12:00 AM and 11:59 PM for each device.
The following table describes the statistics displayed for the Data Correlator process.
Table 54-1
Host Statistics
Category
Description
Time
The current time on the system.
Uptime
The number of days (if applicable), hours, and minutes since the system was last
started.
started.
Memory Usage
The percentage of system memory that is being used.
Load Average
The average number of processes in the CPU queue for the past 1 minute, 5 minutes,
and 15 minutes.
and 15 minutes.
Disk Usage
The percentage of the disk that is being used. Click the arrow to view more detailed
host statistics. See
host statistics. See
for
more information.
Processes
A summary of the processes running on the system. See
for more information.
Table 54-2
Data Correlator Process Statistics
Category
Description
Events/Sec
Number of discovery events that the Data Correlator receives and
processes per second
processes per second
Connections/Sec
Number of connections that the Data Correlator receives and processes
per second
per second
CPU Usage — User (%)
Average percentage of CPU time spent on user processes for the current
day
day
CPU Usage — System (%)
Average percentage of CPU time spent on system processes for the
current day
current day