Generate a geomap for a device group or an application

You can generate a geomap that tracks metric activity from a device group or an application through the Geomaps page in System Settings. The ExtraHop system determines the originating IP address of each metric event and plots it to a regional data point on the geomap.

Unlike automatically generating a geomap for a single device, the workflow for generating a geomap for a device group or an application has multiple steps: you must configure geomap settings, assign the geomap to a device group or application, and then you can open and view the geomap.

To learn about how geomaps work and what information is provided, see Geomaps.

Configure geomap settings

Configure settings for a geomap if you want to track count metric activity for a device group or an application. The ExtraHop system determines the originating IP address of each metric event and plots it to a regional data point on the geomap.

You can only configure geomaps to track a top-level count metric that can be drilled down by client or server IP address.
Note:The workflow for configuring geomaps in System Settings is deprecated and will be removed in a future version.
  1. Log into the Web UI on the Discover appliance.
  2. Click the System Settings icon , and then click Geomaps.
  3. Click New to open the Geomap Configuration window.
  4. On the Geomaps Settings tab, type a unique, friendly name.
  5. Select the count metric that you want to track and then complete the following information:
    1. Click the Select metric icon .
    2. Click the source of the metric, such as an application.
    3. Click the protocol of the metric, such as HTTP or SSL.
    4. Click the IP address type, such as client or server.
      Note:To track a custom metric, click Custom from the list and enter key pattern information about the metric to refine your search. The key pattern is interpreted as a regular expression and must apply Perl-Compatible Regular Expression (PCRE) syntax.
    5. Click the top-level count metric that you want to track.
      Note:Some top-level metrics enable you to specify additional information about the metric through a key pattern. The key pattern is interpreted as a regular expression and must apply PCRE syntax.
  6. Click Save.

Assign a geomap to a device group or application

After you configure geomap settings, you must assign the geomap to a metric source. After the geomap is assigned, it only displays data collected from that source.

You can only assign geomaps to a device group or an application. Otherwise, you can generate a geomap for a single device.

The source must match the type selected when you configured the metric for the geomap. For example, if you selected an application metric when you configured the geomap, you can only assign the geomap to an application.

Although you configure geomaps from System Settings, you assign a geomap to a source from the Metrics page in the ExtraHop Web UI. The following procedure shows you how to assign a geomap to an application, which is similar for device groups.

Note:The workflow for assigning a geomap configuration to sources is deprecated and will be removed in a future version.
  1. Log into the Web UI on the Discover appliance.
  2. Click Metrics.
  3. Click Applications in the left pane.
  4. Select the checkbox of each application you want to assign the geomap to.
  5. From the menu at the top of the page, click Assign Geomap.
    The system opens a list of geomaps that are eligible for assignment to the selected applications. For example, the list will not include geomaps configured for devices.
  6. Select the checkbox of each geomap you want to assign to the selected applications.
  7. Click Assign Geomaps.

Open a geomap for a device group or application

After you have configured a geomap and assigned it to a source, you can open and view a geomap from the device group or application it is assigned to.

  1. Log into the Web UI on the Discover appliance.
  2. Click Metrics.
  3. Select the device group or application that the geomap is assigned to.
  4. In the left pane, click Geomaps.
    Note:For device groups, you must switch to the deprecated view of the device groups page to see the list of geomaps assigned to the group.
  5. Click the name of the geomap you want to view.
    The geomap opens in full-screen on a new browser tab so that you can view multiple geomaps at the same time.
    Tip:You can save or bookmark the geomap URL to quickly return to it.
Published 2017-11-20 17:13