Download PDF

Product Requirements

All ExtraHop systems

Thank you! We will contact you soon to ask how we can improve our documentation. We appreciate your feedback.

Was this topic helpful?

Yes No

Thank you for your feedback. Can we contact you to ask follow up questions?

How can we improve?

Need more help?

Ask the Community

Prioritize groups for Advanced Analysis

You can specify device groups for Advanced Analysis based on their importance to your network. Groups are ranked in an ordered list.

Here are some important considerations about Advanced Analysis:

Devices on the watchlist are guaranteed Advanced Analysis and are prioritized over device groups.
Devices within a device group that are inactive do not affect Advanced Analysis capacity.
Custom metrics are only available for devices in Advanced Analysis. If you want to see custom metrics for a specific device, prioritize a group that contains the device or add the device to the watchlist.
You must have full write privileges to edit analysis priorities.
You cannot prioritize more than 200 device groups for Advanced Analysis.

Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
(These steps must be completed on the console or sensor that is managing these shared settings.)
Go to the settings for Standard Priorities.
- On a console, click the System Settings icon and then click Analysis Priorities. Then, click Edit Priorities next to the sensor you want to modify.
- On a sensor, click the System Settings icon and then click Analysis Priorities.
Prioritize groups by completing the following steps:
1. In the For Advanced Analysis section, click adding a group to add the initial group or Add Group to add additional groups.
2. In the Group drop-down list, type the name of a device group and then click the group name from the search results. For example, type HTTP servers and select the HTTP Servers device group.
3. (Optional): In the Note field, type information about the group.

In the Automatically Fill section, make sure On is selected.

Note:

If your system is having performance issues, click Off. Only devices that are in prioritized groups or on the watchlist will receive Advanced Analysis.

At the top of the page, click Save.

Next steps

Here are some additional ways to manage and refine groups that receive Advanced Analysis:

If you add multiple groups, the groups are prioritized from top to bottom. Click the upper left icon next to Group, and then drag the group to another position in the ordered list.
Click the check icon to collapse the group. Click the pencil icon to expand the group again, as shown in the following figure.
Click the go to icon next to a group name to navigate to the device group page. The device group page displays which devices and how many devices are in the group. The icon is only available when the group is collapsed.
Click the x icon to remove a group from the list, as shown in the following figure.