Describes the Overview tab in Sampled Flow Insight, which displays application, event, and hotspot issue graphs, along with user and VPN information based on sampled flow data detected during a trace session.
The Overview tab displays application, event, and hotspot issue information from sampled flow data detected during a trace session.
Overview tab information
The Overview tab displays the following information.
The Users field appears if you checked the ISE User Identity check box in the Grouping Fields area when you started the trace. Information for up to 5,000 users that the trace detects is selected by default. You can remove a user by unchecking it in the drop-down list, and add a user by choosing it in the drop-down list.
In the VPN field, information for all the VPNs that the trace detects is selected by default. You can remove a VPN by unchecking it in the drop-down list, and add a VPN by choosing it in the drop-down list.
The information in this Sampled Flow Insight area is based on sampled data, which comes from a subset of the total number of flows that were monitored. The number of flows that are sampled is determined by an internal algorithm. For example, if the trace monitors 1,000 flows, this tab might show information for only 10 of those flows.
-
Applications graph: Displays the number of flows that the trace detects in each application in the monitored traffic. Hover your cursor over the data points in the graph to display the percentage of total flows that the corresponding application flow represents.
-
Events graph: Displays the events that the trace detects in the monitored traffic and the number of application flows that each event affects. Hover your cursor over the data points in the graph to display the percentage of total application flows that the corresponding event affected.
-
Hotspot Issues : For each event, provides information about each application flow that was affected, including the traffic path in which the event occurred and the duration of the event.
This information is displayed for each event that appears in the Events field. By default, all the events that the trace detects appear in this field. You can remove an event by clicking X next to its name and add an event by choosing the event from the Events drop-down list.
From Cisco Catalyst SD-WAN Manager Release 20.12.1 , click Sampled Flow Insight to see the Applications graph, Events graph, and Hotspot Issues .
-
Check the Application check box to display information for all flows that include application traffic.
-
Check the DNS check box to display information for all the flows with DNS resolution.
-
Check one or more severity check boxes ( Critical , Warning , and Informational ) to display information for events that have the corresponding severity level.
From Cisco Catalyst SD-WAN Manager Release 20.12.1 , when viewing the Overview tab for a single trace, click Application Stats to see the following graphs. These graphs provide information for the top 10 applications with the most flows. Hover your cursor over the data points in a graph to display more detailed information for the corresponding item.
-
Applications (top 10) - Total Flows : Total number of application flows for the duration of the trace. The selected color is for the egress WAN interface on which flows were initialized.
-
Applications (top 10) - Total Bytes : Overall application bidirectional bandwidth for the duration of the trace. Upstream and downstream flow bandwidths are counted on the egress WAN on which flows were initialized.
-
Applications (top 10) – Flow Setup Rate : New incoming flows per second, calculated at 1-minute intervals.
-
Applications (top 10) – Active Flow : Number of active flows, calculated at 1-minute intervals.
-
Applications (top 10) – Bandwidth : Number of KB per second, calculated at 1-minute intervals.
-
Applications (top 10) – Flow Live Time : Overall lifetime of application flows, based on the flows completed within the monitor interval and calculated at 1-minute intervals.
The Applications (top 10) - Total Flows and Applications (top 10) - Total Bytes graphs provide information for each item that is selected in the VPN , Device , and WAN Color fields. All the items that the trace detects are selected by default.
The other graphs provide information only when one item is selected in the VPN , Device , and WAN Color fields.
You can remove an item from these fields by unchecking it in the corresponding drop-down list, and add an item by choosing the item from the corresponding drop-down list.
You can view detailed information about an event in the Event Insight tab.