The ExtraHop system classifies every device it discovers on your network.
Your
platform determines the total analysis capacity, which is the number of devices, or endpoints, that can receive Standard Analysis. On the Analysis Priorities page, you can
target specific device groups or activity groups for Standard Analysis as needed, based on
their importance to your network. Groups are ranked in an ordered list, so you can let the
ExtraHop system know which devices are the most important to you.
Here are some important considerations about Standard Analysis:
- If there is still room in Advanced Analysis, devices in the top-most
groups in the Standard Analysis section will receive Advanced Analysis.
- You must have full write privileges to edit analysis priorities.
The following steps show you how to prioritize devices, such as HTTP servers and DNS
servers, for Standard Analysis:
-
Log into the Web UI of a Discover appliance or Command appliance.
-
Click the System Settings icon
and then click Analysis
Priorities.
-
If you are managing analysis priorities from a Command appliance, find the
Discover appliance with the devices you want to prioritize in the
Manage Priorities from this Command Appliance section.
Click Edit Properties in the row that contains the
Discover appliance.
-
Prioritize groups by completing the following steps:
-
In the For Standard Analysis section, click
adding a group.
-
In the Group drop-down list, type the name of a device group or
activity group and then click the group name from the search results.
For example, type HTTP servers and select the
HTTP Servers activity group.
- (Optional):
In the Description field, type information about why this group is a
priority.
-
Click Add Group to include another device group
or activity group.
-
Click the Group drop-down, type a group name such as DNS
servers, and then click the group from the search
results.
There are now two groups, where the top group (HTTP Servers) has
a higher priority over the bottom group (DNS Servers).
- (Optional):
Click-and-drag the left edge of the Group to move
its position in the list. The groups at the top of the list have the
highest priority.
-
In the Automatically Fill section, make sure
On is selected.
Note: | If your appliance is having performance issues, then click
Off. This selection will remove devices and make
sure that only devices in prioritized groups receive Standard
Analysis. |
-
At the top of the page, click Save.
- (Optional):
Click the check
icon to collapse the group. Click the pencil
icon to
expand the group again, as shown in the following figure.
-
Click the x icon to remove a group from the list, as shown in the following
figure.
Thank you for your feedback. Can we contact you to ask follow up questions?