Find a device
The ExtraHop system automatically discovers devices such as clients, servers, routers, load balancers, and gateways that are actively communicating with other devices over the wire. If you want to see network activity associated with a specific device, you can search for your device in the Discover or Command appliance, and then view traffic and protocol metrics on a protocol page.
- Perform a general search from the global search field at the top
of the page and select the device you want from the results list. Select a
source from the Any Type drop-down to filter your
results further, or select the Hide inactive sources
checkbox to only show active devices.
- Perform a detailed search from the device
list page in the Metrics section of the ExtraHop Web UI, where you can
filter search results by device attributes.
- Perform a search by protocol activity from an activity group.
- Perform a search for peer devices talking to a device.
Search for a device by details
You can search for devices by information observed over the wire, such as IP address, MAC address, hostname, or protocol activity. You can also search for devices by customized information such as device tags.
The trifield search filter enables you to search by multiple categories at once. For example, you can add filters for device name, IP address, and role to view results for devices that match all of the specified criteria.
Next steps
- Click the name of a device to view information on the Overview page for the device.
- Select any protocol from the left pane to view additional metrics.
- Click Create Dynamic Group from the upper right corner to create a group based on the filter criteria.
- Click the command menu and then select PDF or CSV to export the device list to a file.
- Change a device name
- Change a device role
- Add a tag to a device
Search for devices by protocol activity
The Activity page displays all protocols that are actively communicating over the wire during the selected time interval. You can quickly locate a device that is associated with a protocol, or discover a decommissioned device that is still actively communicating over a protocol.
Next steps
- Investigate additional metrics by selecting another protocol in the Server Activity or Client Activity sections in the left pane.
- Change a device name.
Search for devices accessed by a specific user
From the Users page, you can see active users and the devices they have logged into during the specified time interval.
Tip: | Search for users from the global search field at the top of the
page.![]() |
This procedure shows you how to perform a search from the Users page.
Next steps
Click the name of a device to open the Overview page for that device and view all of the users that have accessed the device during the specified time interval.Search for peer devices
If you want to know which devices are actively talking to each other, you can drill down by Peer IPs from a device or device group protocol page.
Next steps
Thank you for your feedback. Can we contact you to ask follow up questions?