Services Stats View

The Services Stats view provides a way to monitor the status and operations of a service. This view displays key statistics, service system information, and host system information for a service. In addition, more than 80 statistics are available for viewing as gauges and in timeline charts. In historical timeline charts, only statistics for session size, sessions, and packets are viewable.

Workflow

netwitness_hstsrvconfigwf-basic2.png

What do you want to do?

User Role I want to... Documentation
Administrator set up a host.

Setting Up a Host

Administrator maintain a host. Maintaining Hosts

Administrator

maintain a service.

Maintaining Services

Administrator monitor the status and operations of a service.* See the System Maintenance Guide.
Administrator chart statistical information for a service over a user-specified period of time.* See the System Maintenance Guide.

* You can perform these tasks in the current view.

Related Topics

Quick Look

The following figure shows an example of the Services Stats view for a Network Decoder.

122_StatsVwDec1_1222.png

Although different statistics are available for different types of services, certain sections are common to the Services Stats view for any Core service:

  • Summary Stats
  • Gauges
  • Timeline Charts
  • Historical Timeline Charts
  • Chart Stats Tray

Summary Stats Section

The Summary Stats section is at the top of the default view and has no editable fields. There are five panels in the Summary Stats section: Key Stats, Service System Info, Host System Info, Logical Drives, and Physical Drives. The Key Stats panel displays different statistics for different types of services. The remaining four panels in the Summary Stats section are the same for all types of services.

Key Stats

The Key Stats panel displays different statistics for different types of services.

  • For a Network Decoder or Log Decoder, key statistics include capture statistics, such as capture rate, total packets or logs captured, total packets or logs dropped, the data capture begin time and end time.
    netwitness_srvstatsviewkeystatsd.png
  • A Broker or Concentrator aggregates data from multiple services. Therefore, the key statistics for all aggregate services are presented in a list. The columns in the list provide the service name, the capture rate, the maximum capture rate, the number of sessions behind (that need to be aggregated), and the service status.
    netwitness_srvstatsviewkeystatsc.png

Service System Info

The Service System Info panel includes the percentage of CPU used by the service, the memory usage statistics (system, total, process, and maximum process), service uptime, status, running since time, and the current time.

netwitness_srvstatsviewsrvsysinfod.png

Host System Info

The Host System Info panel includes the percentage of CPU used by the host, the memory usage statistics (system, total, process, and maximum process), host uptime, status, running since time, and the current time.

netwitness_hostsysinfo.png

Logical Drives and Physical Drives

The Logical Drives panel and Physical Drives panel are shown with an icon for the drive name and state. Drive types are used in the names and the drive status options are listed below.

netwitness_srvstatdecoder8.png

Drive Types and Status

Drive Type Description Comments Status Options
sd SCSI block device Directly connected SAS, SATA MegaRAID volumes.

Green: OK

Red: FAIL

ld MegaRAID Logical Volume Defined in BIOS or with MegaCLI tool. Green: OK
Yellow: DEGRADED/BUILDING
Red: FAIL
pd MegaRAID Physical Disks Not directly exposed to Linux.

Green: OK

Red: FAIL

md Linux software RAID Volume   Green: OK
Yellow: DEGRADED/BUILDING
Red: FAIL

Gauges

The Gauges section in the Services Stats view presents statistics in the form of analog gauges. See Services Stats View - Gauges for details on configuring gauges.

Timeline Charts

Timeline charts display the selected statistics in a running timeline with focus on the current time. This is the same for all types of services, and only the display name of the timeline is editable. See Services Stats View - Timeline Charts for details on configuring timelines.

Historical Timeline Charts

Historical timeline charts display statistics for session size, sessions, and packets in a historical timeline. This is the same for all types of services. Only the display name, begin date, and end date. See Services Stats View - Timeline Charts for details on configuring timelines.

Note: Historical timeline charts is being deprecated for Log Collector, Virtual Log Collector (VLC) and Windows Legacy Collector services.

Chart Stats Tray

The Chart Stats Tray lists all available statistics for the selected service type. Different services have different statistics to monitor. See Services Stats View - Chart Stats Tray for a detailed description.

Topics