Cisco Cisco Firepower Management Center 4000
55-53
FireSIGHT System User Guide
Chapter 55 Using Health Monitoring
Working with Health Events
The fields in the health events table are described in the following table.
To display the table view of health events:
Access:
Admin/Maint/Any Security Analyst
Step 1
Select
Health > Health Events
.
The table view appears. For information on working with health events, see
Tip
If you are using a custom workflow that does not include the table view of health events, click
(switch
workflow)
. On the Select Workflow page, click
Health Events
.
Searching for Health Events
License:
Any
Table 55-11
Health Event Fields
Field
Description
Test Name
The name of the health module that generated the event. For a list of health
modules, see the
modules, see the
table.
Time
The timestamp for the health event.
Description
The description of the health module that generated the event. For example,
health events generated when a process was unable to execute are labeled
health events generated when a process was unable to execute are labeled
Unable to Execute
.
Value
The value (number of units) of the result obtained by the health test that
generated the event.
generated the event.
For example, if the Defense Center generates a health event whenever a device
it is monitoring is using 80 percent or more of its CPU resources, the value
could be a number from 80 to 100.
it is monitoring is using 80 percent or more of its CPU resources, the value
could be a number from 80 to 100.
Units
The units descriptor for the result. You can use the asterisk (*) to create
wildcard searches.
wildcard searches.
For example, if the Defense Center generates a health event when a device it is
monitoring is using 80 percent or more of its CPU resources, the units
descriptor is a percentage sign (%).
monitoring is using 80 percent or more of its CPU resources, the units
descriptor is a percentage sign (%).
Status
The status (Critical, Yellow, Green, or Disabled) reported for the appliance.
Device
The appliance where the health event was reported.