Troubleshoot Stealthwatch Security Analytics

The Stealthwatch Security Analytics service displays error messages within the GUI to ensure that your usage of the application is as problem-free as possible. Apart from the error messages, you can use the information in this chapter to troubleshoot any issues you might be facing.

View Audit Logs

Audit logs capture information about the various applications running on Cisco DNA Center.

Procedure

Step 1

From the Cisco DNA Center home page, click the gear icon () and choose Audit Logs.

The Audit Logs window appears, where you can view logs about what has happened across the system.

The following information is displayed for each audit log:

  • Description: Audit log description

  • Site: Name of the site for the specific audit log

  • Device: Devices for the audit log

  • Requestor: User requesting the action that is being logged

  • Source: Source of an audit log

  • Created On: Date on which the audit log was created

Step 2

Click the plus icon (+) next to an audit log to view the corresponding child audit logs.

Each audit log can be a parent to several child audit logs. By clicking this plus icon, you can view a series of additional child audit logs.

Note 

An audit log captures data about a task performed by Cisco DNA Center. Child audit logs are subtasks to a task performed by Cisco DNA Center.

Step 3

Filter the audit logs by clicking the Filter icon, entering a specific parameter, and then clicking Apply.

You can filter audit logs by the following parameters:

  • Description

  • Site

  • Device

  • Requestor

  • Source

  • Start Date

  • End Date
Step 4

(Optional) Click the dual arrow icon to refresh the data displayed in the window.
Step 5

(Optional) Click the download icon to download a local copy of the audit log in .csv file format.

A .csv file containing audit log data is downloaded locally to your system. You can use the .csv file for additional review of the audit log or archive it as a record of activity on Cisco DNA Center.

Troubleshoot Using Task Manager

Procedure

Step 1

On the Cisco DNA Center home page, click the Notifications icon () in the upper-right portion of the application screen.

Step 2

Ensure that the Scheduled Tasks tab is selected.

Step 3

Identify the Failed task in the list, and click the corresponding arrow.

The entry expands to show you the details of the task.

Note 

A single task may include multiple devices. The overall status of a task will show as Failed if the task on even one device fails, although the task on the other devices is successful.

Troubleshoot on Supported Devices

Following are some common troubleshooting issues experienced on supported devices.

Device is not listed

If Cisco DNA Center does not list a device to enable or disable Stealthwatch Security Analytics, then ensure that:

  • If you are using ASR and ISR Series Routers, the Device Role is set to Border Router.

  • If you are using 9300 and 9400 Series Switches, the Device Role is set to Access.