How can we help?

How do I use the TrafficInsights dashboard?

Follow

Date range

By default, TrafficInsights presents data for the last 24 hours, from midnight yesterday to midnight tomorrow (e.g., 2018-11-25 00:00 to 2018-11-27 00:00).

You can change the date range. Any date range update you make is applied to all views, not just the one you’re currently on.

  1. Click the date range picker from the top navigation.

TI_14.png

  1. Pick a new start and end date for viewing data.

TI_15.png

  1. Click Apply.

Graph range selector

At the bottom of all graphs, a range selector allows you to choose a more granular time range for your data.

TI_16.png

Select a specific range

Click on a specific location in the range selector and drag your mouse to the end point of the range. Release your mouse. The selected range appears in a purple box and updates the graphs.

TI_17.png

Move the range around

You can move the selected range by grabbing the range and sliding it to the left or right. The detail in the graph updates to reflect the new range selection.

Increase or decrease the range

You can grab an edge of the range and drag it to make the range smaller or larger.

Remove the range

To remove the range and revert to the default view, click on any empty location in the selector.

Apply a filter

From the top navigation bar in the TrafficInsights dashboard, click Add Filter. Enter the desired filter and click Apply.

Be sure to enter the correct keyword ahead of the detail you’re trying to filter for. Simply entering 80, for example, won’t apply a filter. Keywords that can be used are:

ip address: ip, src, dst
port: port, sport, dport
packets: pkts
bytes: bytes
country: country, country_src, country_dst
exporter: exporter
interface: iface_in, biface_out
asn: asn, asn_src, asn_dst
protocol: protocol, proto
domain: domain, domain_src, domain_dst
post nat: pnat, pnat_src, pnat_dst
post nat port: pnat_port, pnat_sport, pnat_dport
expression grouping: (, ), and, or
comparison operators: =, !=, >, <, >=, <=

TI_26.png

You can click the Countries tab to scroll through a list of countries to add to your filter. Once you find the country you want, click the country name to add it to the filter.

TI_36.png

To edit the applied filter, click the edit pencil in the top navigation bar.

TI_18.png

Update the filter and click Apply.

To remove the filter, click the X in the top navigation bar.

TI_19.png

Groups and applications

By default, all applications are shown on the graphs but you can choose to show traffic for specific applications only.

The list of applications in the context menus is a complete list of applications monitored by TrafficInsights. The list isn’t filtered to remove applications not detected on your client devices.

From the top navigation bar, click the compass icon (TI_20.png). From the context menu, hover over the appropriate group to reveal a secondary context menu.

From the secondary context menu, click an application. If there’s traffic data available for the selected application, the graphs will update. Otherwise, you’ll see a No data message.

TI_21.png

To clear the application, click the X next to the set application (TI_22.png) in the top navigation bar, or click the compass icon (TI_20.png) and select All Applications.

Update view units

You can update the view units. Updates to view units apply only to bar graphs.

In the right corner of the top navigation bar, click the three dots. From the context menu, select the unit you’d like to view the detail in.

Available units are bits/s, bytes/s, flows/s, pkts/s, bits, bytes, flows, and packets.

Graph hovers

Hovering over any data point on a graph shows you a tooltip with lower-level details about the data point.

For the applications and protocol graphs, the hover highlights a similar data point on the other graph, in addition to showing you the tooltip.

TI_7.pngFor top N graphs, the hover is shown only for the specific bar graph.

TI_11.png

For geolocation, you can hover over a country or city.

TI_12.png

Table grids

For table grids, you can click on a row to reveal more information, or right-click to add or remove columns.

Show more information

For flows, if you click on a cell in the address columns—scr addr and dst addr, for example—you’ll see a context menu. From the context menu, select one of the following options: DNS, Whois, Traceroute, Ping, or Find domain.

TI_27.png
Each option opens a dialog that shows additional information.

TI_28.png

Once you’ve captured the detail you want from the dialog, click Close or the X to close the dialog window.

Add or remove table columns

For flows, if you right-click anywhere in the table, you’ll see a context menu that shows all available columns. Click on the available columns to add or remove them from the view. To close the context menu, click anywhere in the grid.

TI_29.png

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk