Applications FAQ

Here are some answers to frequently asked questions about geomaps.

What is the All Activity application?

The All Activity application is a built-in application that aggregates metrics for all devices on your network.

Why is there unexpected metric activity in my application?

Unexpected activity might be a result of one or more triggers written to send traffic to the application. For example, if you see metrics from devices or protocols that are not selected in the Web UI configuration of the application, it might be from the devices the trigger is assigned to or the events the trigger runs on.

Why can't I delete an application?

To preserve historical data, applications cannot be deleted. If, over time, an application stops seeing metric activity, it becomes inactive. For example, if you remove data sources from an application, disable any triggers associated, or if the assigned sources themselves are inactive, the application becomes inactive.

From the Applications page, you can sort the applications list to view only active applications.

Why can't I change the application ID?

The application ID is referenced by triggers that send traffic to the application. Modifying the application ID might break a trigger or result in the trigger creating a duplicate of the original application.

What are the REST API application properties for?

The REST API properties are unique identifiers that you reference to perform configuration tasks through the ExtraHop REST API. For example, to retrieve details for a specific application through the REST API, you must enter the API ID for the application.

From the Overview page of an application, click Properties to view the REST API details.

When should I write a trigger to create an application?

Write a trigger if you need an advanced application, such as in the following examples:

  • You want advanced filtering, such as collecting traffic only when HTTP 404 responses occur.
  • You want to commit custom metrics to the application.
  • You want to collect metrics from non-L7 traffic such as Flow or TCP.

I wrote a trigger to create an application with custom metrics. Can I view the custom metrics in the application?

Custom metrics cannot be viewed from an application; applications only display built-in metrics. Although the custom metrics are committed to the application, you must create a chart to view custom metric data.

To see metrics in one place, can I build a dashboard from multiple devices instead of an application?

Yes, dashboards are another method for viewing the metrics you want in one place; however, a dashboard requires you to manually build and maintain charts for the metrics you want, which takes time and consumes more resources.

Published 2021-06-09 14:42