Cisco Cisco FirePOWER Appliance 8130
18-3
FireSIGHT System User Guide
Chapter 18 Working with Intrusion Events
Viewing Intrusion Event Statistics
To view intrusion event statistics:
Access:
Admin/Intrusion Admin
Step 1
Select
Overview > Summary > Intrusion Event Statistics
.
The Intrusion Event Statistics page appears.
Step 2
From the two selection boxes at the top of the page, select the zones and devices whose statistics you
want to view, or select
want to view, or select
All Security Zones
and
All Devices
to view statistics for all the devices that are
collecting intrusion events.
Step 3
Click
Get Statistics
.
The Intrusion Event Statistics page refreshes with data from the devices you selected.
Tip
To view data from a custom time range, click the link in the upper right page area and follow the
directions in
directions in
.
Step 4
See the following sections for more information about the statistics that appear on the Intrusion Event
Statistics page:
Statistics page:
•
•
•
Host Statistics
License:
Protection
The Host Statistics section of the Intrusion Event Statistics page provides information about the
appliance itself. On the Defense Center, this section also provides information about any managed
devices.
appliance itself. On the Defense Center, this section also provides information about any managed
devices.
This information includes the following:
•
Time
shows the current time on the appliance.
•
Uptime
shows the number of days, hours, and minutes since the appliance itself was restarted. On the
Defense Center, the uptime also shows the last time each managed device was rebooted, the number
of users logged in, and the load average.
of users logged in, and the load average.
•
Disk Usage
shows the percentage of the disk that is being used.
•
Memory Usage
shows the percentage of system memory that is being used.
•
Load Average
shows the average number of processes in the CPU queue for the past 1 minute, 5
minutes, and 15 minutes.
Event Overview
License:
Protection
The Event Overview section of the Intrusion Event Statistics page provides an overview of the
information in the intrusion event database.
information in the intrusion event database.