System statistics

To access system statistics, click the System statistics icon in the top right corner of Cisco Cyber Vision interface.

Center

The Center statistics view provides data about the state of the Center CPU, RAM, disk, network interfaces bandwidth and database.


Note


Use the drop-down arrow to change the time period.

The Center interface shows general information about the Center (the software version, the length of time that it has been operating (i.e., uptime), the Center system date and whether DHCP is enabled or not.

Click Generate diagnostic to create a file to help troubleshoot issues and for produt support Cisco.

System Health

System health shows the status of the Center CPU, RAM and disk usage.

Usages (i.e., minimum, maximum and average) show for each of these system resources. For an absolute value, roll over the line chart.

The chart also shows the percentage of the system's Current usage and Hardware score, useful to Cisco product support.

The Compute Scores button initiates a new performance measure to compute a new score.

Network Interfaces Bandwidth

The line charts represent the Administration and Collection network interfaces bandwidth with the number of bytes received and sent by the Center per second.

For example, the Collection Network interface activity lets you see the amount of data exchanged between the Center and the sensors.

Disk I/O

The line chart represents the Center hard disk usage in bytes/second.

Database

This section describes the database state by showing cards with the number of flows, components and variables that have been detected by Cisco Cyber Vision. Flows distribution is shown in a pie chart.

Data is updated each time you access the Center statistics view (the latest count is indicated on top of the database section). However, the Get Count button actualizes the database performance to the current time.

The flows card indicates the total number of flows (i.e. broadcast, multicast and unicast which are stored in the database) detected by Cisco Cyber Vision. If you mouse over the card, you will get the number of activities and the flows evolution tendency. This information enables you to anticipate how the system load might be affected by flows in the future.

The variables card indicates the total number of variables detected by Cisco Cyber Vision. This indicator is important because an overload of variables could impact the Cisco Cyber Vision performances. If you mouse over the card you will get the number of process variables and the number of system variables.

  • Process variables are the number of variables used by PLCs' software. Process variables are visible in the Monitor mode of the Cisco Cyber Vision GUI.

  • System variables are the number of variables necessary to PLCs' proper operation. System variables are stored in the Cisco Cyber Vision database.

The flows distribution pie chart indicates the distribution of broadcast, multicast and unicast flows stored in the database. Mouse over the chart to see the absolute number of flows per flow type.

Services statistics

The service status page indicates whether all Cisco Cyber Vision background processes like services and extensions are up and running correctly. Checks are performed regularly.

A warning banner appears at the top of the application whenever a service or extension is down with a link to this page. The failing service or extension will appear in red.

Sensors

The Sensors statistics view provides data about the CPU, RAM, disk, network interfaces bandwidth and packets captured for each sensor enrolled in Cisco Cyber Vision.


Note


Use the drop-down arrow to change the time period.

A list of the sensors appears on the left. Click a sensor name to access its statistics.

The Sensors statistics view shows general information about the sensor: the status (i.e., Connected), serial number, IP and MAC addresses, firmware version, the capture mode set, and the time it has been operating (i.e., uptime).

Click Generate diagnostic to create a file to help troubleshoot issues and for produt support Cisco.

System Health

System health shows the status of the sensor CPU, RAM and disk usage.

Usages (i.e., minimum, maximum and average) show for each of these system resources. For an absolute value, roll over the line chart.

The chart also shows the percentage of the system's Current usage and Hardware score, useful to Cisco product support.

Captured Packets

This line chart represents the number of packets that the sensor captures on the Industrial network interface (in bytes per second). It also shows dropped packets, but the value should be zero. If the dropped line shows activity, the sensor is overloaded and is not capturing traffic.

Network Interfaces Bandwidth

The line charts represent the Collection and Industrial network interfaces bandwidth with the number of bytes received and sent by the Center per second.

  • The Collection Network interface activity chart shows the amount of data exchanged between the Center and the sensors.

  • The Industrial cahrt shows the amount of data captured by the sensor on the industrial network through each port's couple.

    Data sent to the Industrial network is also represented, but the value should be zero. If the transmitted line shows activity, the sensor is not passive. If this happens, please contact Cisco support immediately.

Disk I/O

The line chart shows the sensor hard disk usage with the number of Read-Write bytes per second.