Cisco Cisco Firepower Management Center 4000

Page of 1844
 
18-3
FireSIGHT System User Guide
 
Chapter 18      Working with Intrusion Events
  Viewing Intrusion Event Statistics
To view intrusion event statistics:
Access: 
Admin/Intrusion Admin
Step 1
Select 
Overview > Summary > Intrusion Event Statistics
.
The Intrusion Event Statistics page appears.
Step 2
From the two selection boxes at the top of the page, select the zones and devices whose statistics you 
want to view, or select 
All Security Zones
 and 
All Devices
 to view statistics for all the devices that are 
collecting intrusion events.
Step 3
Click 
Get Statistics
.
The Intrusion Event Statistics page refreshes with data from the devices you selected.
Tip
To view data from a custom time range, click the link in the upper right page area and follow the 
directions in 
.
Step 4
See the following sections for more information about the statistics that appear on the Intrusion Event 
Statistics page:
  •
  •
  •
Host Statistics
License: 
Protection
The Host Statistics section of the Intrusion Event Statistics page provides information about the 
appliance itself. On the Defense Center, this section also provides information about any managed 
devices.
This information includes the following:
 
Time
 shows the current time on the appliance.
 
Uptime
 shows the number of days, hours, and minutes since the appliance itself was restarted. On the 
Defense Center, the uptime also shows the last time each managed device was rebooted, the number 
of users logged in, and the load average.
 
Disk  Usage
 shows the percentage of the disk that is being used.
 •
Memory Usage
 shows the percentage of system memory that is being used.
 •
Load Average
 shows the average number of processes in the CPU queue for the past 1 minute, 5 
minutes, and 15 minutes.
Event Overview
License: 
Protection
The Event Overview section of the Intrusion Event Statistics page provides an overview of the 
information in the intrusion event database.