Cisco Cisco Firepower Management Center 4000

Page of 1844
 
55-53
FireSIGHT System User Guide
 
Chapter 55      Using Health Monitoring
  Working with Health Events
The fields in the health events table are described in the following table.
To display the table view of health events:
Access: 
Admin/Maint/Any Security Analyst
Step 1
Select 
Health > Health Events
.
The table view appears. For information on working with health events, see 
Tip
If you are using a custom workflow that does not include the table view of health events, click 
(switch 
workflow)
. On the Select Workflow page, click 
Health Events
.
Searching for Health Events
License: 
Any
Table 55-11
Health Event Fields 
Field
Description
Test Name
The name of the health module that generated the event. For a list of health 
modules, see the 
 table.
Time
The timestamp for the health event.
Description
The description of the health module that generated the event. For example, 
health events generated when a process was unable to execute are labeled 
Unable to Execute
.
Value
The value (number of units) of the result obtained by the health test that 
generated the event.
For example, if the Defense Center generates a health event whenever a device 
it is monitoring is using 80 percent or more of its CPU resources, the value 
could be a number from 80 to 100.
Units
The units descriptor for the result. You can use the asterisk (*) to create 
wildcard searches. 
For example, if the Defense Center generates a health event when a device it is 
monitoring is using 80 percent or more of its CPU resources, the units 
descriptor is a percentage sign (%).
Status
The status (Critical, Yellow, Green, or Disabled) reported for the appliance. 
Device
The appliance where the health event was reported.