View the device health monitor

The device health monitor compiles device metrics and displays health status and trends using an array of dashboards.

Before you begin

You must be an Admin, Maintenance, or Security Analyst user to perform this procedure.

Follow these steps to view the device health monitor:

Procedure

Step 1

Choose Troubleshooting > Health > Monitor.

Use the Monitoring navigation pane to access device-specific health monitors.

Step 2

In the device list, click Expand(expand icon) and Collapse (collapse icon) to expand and collapse the list of managed devices.

Step 3

View the Health Alerts for the device in the alert notification at the top of page, directly to the right of the device name.

Hover your pointer over the Health Alerts to view the health summary of the device. The popup window shows a truncated summary of the top five health alerts. Click on the popup to open a detailed view of the health alert summary.

Step 4

Configure the time range from the drop-down in the upper-right corner.

The time range can reflect a period as short as the last hour (the default) or as long as two weeks. Select Custom from the drop-down to configure a custom start and end date.

Click the refresh icon to set auto refresh to 5 minutes or to toggle off auto refresh.

Step 5

Click the Show the deployment details on top of the graphs (Show Deployment Info icon) icon for a deployment overlay on the trend graph, with respect to the selected time range.

The icon indicates the number of deployments during the selected time-range. A vertical band indicates the deployment start and end time. In the case of multiple deployments, multiple bands/lines can appear. Click the icon on top of the dotted line to view the deployment details.

Step 6

View the device monitor reports health and performance metrics in several predefined dashboards by default.

The metrics dashboards include:

  • Overview: Highlights key metrics from the other predefined dashboards, including CPU, memory, interfaces, connection statistics; plus disk usage and critical process information.

  • CPU: CPU utilization, including the CPU usage by process and by physical cores.

  • Memory: Device memory utilization, including data plane and Snort memory usage.

  • Interfaces: Interface status and aggregate traffic statistics.

  • Connections: Connection statistics (such as elephant flows, active connections, peak connections, and so on) and NAT translation counts.

  • Snort: Statistics related to the Snort process.

  • ASP Drops: Statistics related to the Accelerated Security Path (ASP) performance and behavior.

Note

  • Multi-threaded Snort processes are allocated across multiple Snort cores to improve device performance. Note that the Snort core allocation shown in the CPUdashboard reflects the total number of Snort process threads assigned to Snort cores.

  • The Process Health widget in Cloud-Delivered Firewall Management Center displays the CPU% usage for each process. The CPU% metric reflects usage relative to the number of cores in the Firewall Threat Defense device, where 100% corresponds to full utilization of one core. For example, on an 8-core device, 200% indicates two fully utilized cores, leaving six available for other processes. To monitor overall system CPU usage, use the CPU widget instead of the Process Health widget.

You can navigate through the various metrics dashboards by clicking on the labels. For a comprehensive list of the supported device metrics, refer to Cisco Secure Firewall Threat Defense Health Metrics.

Step 7

Click the Add New Dashboard(add new dashboard icon) to create a custom correlation dashboard by building your own variable set from the available metric groups.

For more information, refer to Correlating device metrics.