Cisco Cisco Firepower Management Center 4000
55-48
FireSIGHT System User Guide
Chapter 55 Using Health Monitoring
Working with Health Events
When you access health events from the Health Monitor page on your Defense Center, you retrieve all
health events for all managed appliances.
health events for all managed appliances.
To view all health events on all managed appliances:
Access:
Admin/Maint/Any Security Analyst
Step 1
Select
Health > Health Events
.
The Events page appears, containing all health events.
Note
If no events appear, you may need to adjust the time range. See
for more information.
Tip
You can bookmark this view to allow you to return to the page in the health events workflow containing
the Health Events table of events. The bookmarked view retrieves events within the time range you are
currently viewing, but you can then modify the time range to update the table with more recent
information if needed. For more information, see
the Health Events table of events. The bookmarked view retrieves events within the time range you are
currently viewing, but you can then modify the time range to update the table with more recent
information if needed. For more information, see
Viewing Health Events by Module and Appliance
License:
Any
You can query for events generated by a specific health module on a specific appliance.
To view the health events for a specific module:
Access:
Admin/Maint/Any Security Analyst
Step 1
Select
Health > Health Monitor
.
The Health Monitor page appears.
Step 2
To expand the appliance list to show appliances with a particular status, click the arrow in that status row.
Tip
If the arrow in the row for a status level points down, the appliance list for that status shows in the lower
table. If the arrow points right, the appliance list is hidden.
table. If the arrow points right, the appliance list is hidden.
Step 3
In the
Appliance
column of the appliance list, click the name of the appliance for which you want to view
details.
The Health Monitor Appliance page appears.
Step 4
In the
Module Status Summary
graph of the Health Monitor Appliance page, click the color for the health
alert status category you want to view.
The Alert Detail list expands to list the health alerts for the selected appliance for that status category.
Step 5
In the
Alert Detail
row for the alert for which you want to view a list of events, click
Events
.
The Health Events page appears, containing query results for a query with the name of the appliance and
the name of the selected health alert module as constraints.
the name of the selected health alert module as constraints.