The ExtraHop system makes it easy for you to generate a geomap on-the-fly for a single device from a chart widget that contains the count metric you want to track. The ExtraHop system determines the originating IP address of each metric event and plots it to a regional data point on the geomap.
|Note:||If the source of the metric you want to track is a device group or application, you must create and configure a geomap through System Settings, assign it to the source, and then open it from the metric source page.|
To learn about how geomaps work and what information is provided, see Geomaps.
- Log into the Web UI on the ExtraHop Discover or Command appliance.
Navigate to the chart that contains the count metric you want to map.
- To go to a chart on a device protocol page, click Metrics, click Devices from the left pane, and then click the device you want.
- To go to a chart on a dashboard, click Dashboards, and then click the dashboard you want.
Note: If there is no chart that displays the count metric you want, create a chart widget and add it to a dashboard. Keep in mind that each source you add to the chart must be a device and each metric must be a count metric that can be broken down by IP address.
- Click a metric label in the chart legend to open a context menu.
From the Drill down by list on the context menu, select
the detail metric that you want to map.
Note: If the count metric is configured to display a detail metric, the Drill down by list is not available, and you cannot generate a geomap from the chart.You will navigate to the device page for that detail metric.
Click the View on Map button.
The geomap opens in full-screen on a new browser tab so that you can view multiple geomaps at the same time.
Tip: You can save or bookmark the geomap URL to quickly return to it.