Troubleshoot Stealthwatch Security Analytics

The Stealthwatch Security Analytics service displays error messages within the GUI to ensure that your usage of the application is as problem-free as possible. Apart from the error messages, you can use the information in this chapter to troubleshoot any issues you might be facing.

View audit logs

Audit logs capture information about the various applications running on Catalyst Center.

Procedure

Step 1

From the main menu, choose Activities > Audit Logs.

The Audit Logs window is displayed, where you can view logs about what has happened across the system.

This information is displayed for each audit log:

  • Description: audit log description

  • Site: name of the site for the specific audit log

  • Device: devices for the audit log

  • Requestor: user requesting the action that is being logged

  • Source: source of an audit log

  • Created On: date on which the audit log was created

Step 2

Expand the drop-down corresponding to an audit log to view the corresponding child audit logs.

Note

 

An audit log captures data about a task performed by Catalyst Center. Child audit logs are subtasks to a task performed by Catalyst Center.

Step 3

Filter the audit logs

  1. Click the Filter icon.

  2. Enter a specific parameter for filtering the audit logs.

  3. Click Apply.

Step 4

(Optional) Click the dual arrow icon in the upper-right corner of the application screen to refresh the data displayed in the window.

Step 5

(Optional) Click Log Id to view the ID of the log and to copy the log ID to your clipboard.

Troubleshoot using task manager

Procedure

Step 1

From the main menu, choose Activities > Tasks.

Step 2

Identify the Failed task in the list, and click to view more details.

Note

 

A single task may include multiple devices. The overall status of a task shows as Failed if even one device fails, although the other devices included in the task succeed.

Troubleshoot on supported devices

These issues are some common issues that you can troubleshoot on supported devices.

Device is not listed

If Catalyst Center doesn't list a device to enable or disable Stealthwatch Security Analytics, verify the device role.

If you're using...

Ensure that the device role is set to...

Cisco ASR and ISR Series Routers

Border Router

Cisco Catalyst 9300 and 9400 Series Switches

Access

a device that isn’t a part of the fabric

Distribution