Collect metrics for a segment of traffic across multiple IP addresses and ports by creating a custom device. Custom devices are useful for monitoring traffic outside of your local broadcast domain, such as branch offices, stores, or clinics.
Here are some important considerations about custom devices:
- Full system or full write privileges are required to create or delete a custom device.
- Custom devices only appear in the ExtraHop system after traffic that matches your specified criteria is observed.
- Avoid creating multiple custom devices for the same IP addresses or ports. Custom devices that are configured with overlapping criteria might degrade system performance.
- Avoid creating a custom device for a broad range of IP addresses or ports, which might degrade system performance.
- A single custom device counts as one device towards your licensed capacity for Advanced Analysis and Standard Analysis.
|Note:||You can also automate this task through the REST API.|
The following steps show you how to create a custom device:
- Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
- Click the System Settings icon and then click Custom Devices.
- Click Create Custom Device.
- In the Name field, type a unique name for the custom device.
In the Discovery ID field, type a unique identifier.
If this field is left blank, a Discovery ID is generated from the custom device name. The Discovery ID cannot contain spaces and cannot be changed after the custom device is saved.
- (Optional): Click the Custom Device Enabled checkbox to specify whether the custom device is enabled or disabled.
- (Optional): In the Description field, add information about the custom device.
From the Sensor drop-down list, select the sensor that
you want to associate with the custom device.
Command appliance and Reveal(x) 360 only.
Click Add Criteria to specify the IP addresses, port
ranges, and VLAN ranges that you want to collect metrics for.
You can provide a combination of criteria to collect metrics across multiple devices or for a single device. You do not need to complete each field.
- In the IP Address field, type an IP address or a CIDR notation.
- In the Destination Port Range fields, type a minimum and a maximum destination port number.
- In the Source Port Range fields, type a minimum and a maximum source port number.
- In the VLAN Range fields, type a minimum and a maximum VLAN ID.
- (Optional): Click Add Criteria to configure an additional IP address, port range, or VLAN range.
Click Save Changes.
Tip: Click Save All Changes to save all custom devices that have unsaved configuration changes.