Manage Stealthwatch Security Analytics

Review Status of Sites and Fabrics

With Stealthwatch Security Analytics, you can view the status of the devices for each site or fabric.

Procedure

Step 1

From the Cisco DNA Center home page, navigate to the Provision page.

Step 2

Select the Services tab.

Step 3

Click Stealthwatch Security Analytics.

Step 4

In the left pane, drill down to the site or fabric for which you want to view the status.

The card for the site or fabric indicates whether it is Deployed (full green circle) or Ready to deploy (open green circle).
Step 5

To view device specific status, click a site or fabric card to view the devices that are Ready, Not Ready, or Enabled, click the corresponding tab.

The following are the different statuses for the devices in a particular site or fabric:

  • Enabled Devices - These devices have Stealthwatch Security Analytics enabled.

  • Not ready Devices - These devices have failed either one or more of the readiness checks. The green check marks indicate the readiness checks that the device has passed, while the red icons indicate the readiness check that the device has failed. Hover over the red icon to view more information about the failed checks. See Stealthwatch Security Analytics Readiness Checks.

  • Ready Devices - These devices pass all the readiness checks, and can be enabled for Stealthwatch Security Analytics. See Enable Stealthwatch Security Analytics.

View Scheduled Tasks

To view scheduled tasks, complete the following steps:

Procedure

Step 1

From Cisco DNA Center, click the Notifications icon in the upper-right corner of the application window. By default, the Scheduled Tasks tab is selected.

A list of completed and scheduled tasks is displayed.
Step 2

Filter the list of tasks to view only Stealthwatch Seecurity Analytics tasks.

  1. Click Filter.

  2. From the Type drop-down list, select SSA.

  3. Click Apply.

From here, you can view the list of scheduled and completed tasks. Click a task to view further information about it or to reschedule the task.

Disable Stealthwatch Security Analytics

Procedure

Step 1

From the Cisco DNA Center home, navigate to the Provision page.

Step 2

Select the Services tab.

Step 3

Click Stealthwatch Security Analytics.

Step 4

In the left pane, drill down to the site or fabric for which you want to disable Stealthwatch Security Analytics. Alternatively, you can search for the site or fabric using the search bar.

Step 5

Select the site or fabric for which you want to disable Stealthwatch Security Analytics by clicking the site card.

The site card displays the number of devices that are Enabled, Ready, and Not Ready.

Note 

At least one device must be enabled for you to disable Stealthwatch Security Analytics.

Step 6

Ensure that the Enabled tab is selected in the device table.

Step 7

Select the corresponding radio button to disable Stealthwatch Security Analytics immediately (Now), or at a later time (Later).

Note 

If you have chosen to disable Stealthwatch Security Analytics at a later time, then you can edit the scheduled time from the Notifications list () in the upper-right corner of the screen, by clicking Edit.

Step 8

Click Disable.

Step 9

You can view the status of your deployment from the Scheduled Tasks tab under the Notifications list.

After your task is complete, the status of the deployment changes from In Progress to Success.

Note 

To ensure that you're viewing the updated status, click the Refresh button in the upper-right corner of the Notifications list.