Clear data
From this page, you can clear data stored on Cisco Cyber Vision to optimize the Center's performances.
You can clear data partially or totally, like below:
-
all data
-
components and associated data (refer to Purge components)
-
activities, flows and variables
-
flows and variables
-
variables
Clearing data should be performed carefully. Clearing any data can impact monitoring of the network. Please read below all implications about all data clearance.
About all data clearance:
Clearing all data is to be used as a last resort in case of database overload issues.
This will result in the entire database content deletion. Network data such as components, flows, events and baselines will be deleted from Cisco Cyber Vision and the GUI will be emptied.
All configurations will be saved. Existing users and user data configuration (such as capture modes, events severity set up, syslog configuration) will remain unchanged.
Purge components
In Cisco Cyber Vision, a component represents an object of the industrial network from a network point of view. It can be the network interface of a PLC, a PC, a SCADA station, etc., or a broadcast or multicast address. To protect the system the number of components stored in the database is limited.
As the system reaches more than 120,000 components a popup and red banner alert appears on the user interface to inform the user that a purge must be performed. Components purge can be based on several criteria.
If the system reaches 150,000 components the ingestion stops. Incoming sensor data are not treated nor stored and are directly deleted. A popup and a red banner alert appears on the user interface to inform the user that a purge must be performed.
To do so:
Procedure
Step 1 |
Navigate to Admin > Data management > Clear Data. |
Step 2 |
Deploy the Components selection menu. |
Step 3 |
Select which components to delete based on:
|
Step 4 |
Click Clear data. |