Create a device group

You can create both dynamic and static device groups. Dynamic groups automatically add all devices that match specified criteria to the group, while static groups require you to manually add each device.

Create a dynamic device group

You can create dynamic device groups with complex filters, which enable you to specify multiple criteria and create nested groups of criteria.
Tip:You can quickly create a dynamic device group from a filtered list of devices on the Devices page. Click Create Dynamic Group from the upper right corner of the Devices page to open a Device Group Properties window. The filter criteria you specified on the Devices page is selected for you.
  1. Log into the Web UI on the Discover appliance.
  2. From the top menu, click Metrics and then click Device Groups in the left pane.
  3. Click Create Device Group.
  4. In the Group Name field, type a descriptive name to identify the group
  5. Optional: In the Description field, add information about this device group.
  6. In the Group Type section, click Dynamic.
    The Filter Criteria section appears.
  7. Click Match All and select one of the following match operators from the drop-down list:
    Option Description
    Match All Filters only devices that match all of the specified criteria.
    Match Any Filters devices that matches any of the specified criteria.
    Match None Filters devices that do not match any of the specified criteria.
  8. Click Name and select one of the following categories from the drop-down list:
    Option Description
    Name Filters devices by the discovered device name. For example, a discovered device name can include the IP address or hostname.
    IP Address Filters devices by the device IP address in IPv4, IPv6, or CIDR block.
    MAC Address Filters devices by the device MAC address.
    Vendor Filters devices by the device vendor name, as determined by the Organizationally Unique Identifier (OUI) lookup.
    VLAN Filters devices by the device VLAN tag. VLAN information is extracted from VLAN tags, if the traffic mirroring process preserves them on the mirror port.

    Only available if the devices_accross_vlans setting is set to False in the Running Config file.

    Tag Filters devices by user-defined device tags.
    Role Filters devices by the assigned device role, such as gateway, firewall, load balancer, and DNS Server.
    Activity Filters devices by protocol activity associated with the device. For example, selecting HTTP Server returns devices with HTTP server metrics, and any other device with a device role set to HTTP Server.
    Discovery Time Filters devices that were automatically discovered by the ExtraHop system within the specified time interval. For more information, see Create a device group based on discovery time.
    Software Filters devices by operating system software detected on the device.
    DNS Name Filters devices by the DNS name assigned to the device.
    DHCP Name Filters devices by the DHCP name assigned to the device.
    NetBIOS Name Filters devices by the NetBIOS name assigned to the device.
    CDP Name Filters devices by the CDP name assigned to the device.
    Custom Name Filters devices by the custom name assigned to the device.
    Appliance Filters by devices associated with a connected Discover appliance name.

    Only available from a Command appliance.

  9. Select one of the following operators from the drop-down list; the operators available are based on the selected category:
    Option Description
    = Filters devices that are an exact match of the search field for the selected category.
    Filters devices that do not exactly match the search field.
    Filters devices that include the value of the search field for the selected category.
    ≈/ Filters devices that exclude the value of the search field for the selected category.
    starts with Filters devices that start with the value of the search field for the selected category.
    exists Filters devices that have a value for the selected category.
    does not exist Filters devices that do not have a value for the selected category.
  10. In the search field, type the string to be matched, or select a value from the drop-down list. The input type is determined by the selected category.
    For example, if you want to find devices based on Name, type the string to be matched in the search field. If you want to find devices based on Role, select from the drop-down list of roles.

    Tip:Depending on the selected category, you can click the Regex icon in the text field to enable matching by regular expression.

  11. Optional: Click Add Filter to add more filter criteria.
  12. Optional: Click Add Filter Group to add filter criteria to the results of the original filter.
    For example, if you filter for devices names that start with "acct", you can add a new group of criteria that filters for a certain role or tag within the group of devices that start with "acct".
  13. Click Save.
You can change the criteria by clicking the group you want to modify from the Device Groups page, and then clicking Properties.

Create a static device group

  1. Log into the Web UI on the Discover appliance.
  2. Click Metrics and then click Device Groups.
  3. Click Create Device Group.
  4. In the Name field, type a name for the new group.
  5. In the Group Type section, select Static.
  6. Optional: In the Description field, add information about this device group.
  7. Click OK.
    Your device group is now created. Next, assign devices to your group.
  8. Add devices to your group.
    1. Click Devices in the left pane.
    2. Find a device and then select the checkbox next to the devices you want to add to your group.
      You can view traffic and protocol metrics associated with the device by clicking the device name.
    3. At the top of the device table, hover over the icons and click the (Assign to Group) icon.
    4. Select your device group from the Select a group... drop-down list.
    5. Click Add to Group.
Published 2019-02-06 19:15