Observer GigaFlow
Table of Contents
- Legal
- Glossary
- Introduction
- About GigaFlow
- How-To Guide for GigaFlow
- First Steps
- Conducting Searches in GigaFlow
- Search for Security Events Associated with an IP Address
- Conduct a Search and Apply a Macro (or Script)
- Diagnostics and Reporting
- Explore Bandwidth Usage by Interface and Application
- Identify Bandwidth Usage by User
- Use First Packet Response to Understand Application Behaviour
- Determine if Bad Traffic is Affecting Your Network
- Create a Script
- Create a Traffic Group
- Create and Use a Profile
- Create an Integration
- Alerts and Events
- Configuration and System Set-up
- FAQs and Troubleshooting
- Which Web Browers Are Supported by GigaFlow?
- What Server Specification Do We Need?
- Flows and Server Sizing
- Disk Throughput for Flow Writing to Database
- Disk I/O for Flow Writing To Database
- Disk I/O for Flow Reading from Database
- Disk Sizing
- RAM Sizing
- CPU Sizing
- Experimental Results
- Does GigaFlow have an API?
- Does GigaFlow Require a Client?
- Reference Manual for GigaFlow
- Log in
- User Interface Overview
- GigaFlow Search
- Overview
- Search Scope
- Searching by IP Address
- Searching by MAC Address
- Searching by Username
- Searching for a Specific Network Switch
- Graphical Flow Mapping
- Dashboards
- Server Overview
- Summary Devices
- Events
- Summary Interfaces
- Reporting Period
- Device and Interface Overview
- Forensics DB
- Device Overview
- Top 10 Applications This Hour
- Top 10 Source IPs This Hour
- Top 10 Destination IPs This Hour
- Summary Devices
- Summary Interfaces
- Device Details
- Attributes and Tools
- Events Graph
- All Interfaces CSV
- Interface Overview
- Interface Details
- Attributes and Tools
- Summary Interface Total Traffic
- Summary Interface In
- Summary Interface Out
- Summary Interface In Packets
- Summary Interface Out Packets
- Summary Interface In Flows
- Summary Interface Out Flows
- Traffic Group Overview
- Events
- Threat Map
- Events (Main)
- Profiling
- Reports
- My Current Queries
- My Complete Queries
- All Complete Queries
- Canceled Queries
- Cluster Search
- DB Queries
- Forensics
- First Packet Response Reports
- Saved Reports
- System Wide Reports
- SQL Reports
- User Events
- Configuration
- Attributes
- GEOIP
- Infrastructure Devices
- Detailed Device Information
- Configuration/Profiling
- New Flow Object
- New Profiler
- Existing Profilers
- Existing Defined Application
- New Defined Application
- Reporting
- Server Subnets
- Traffic Groups
- System
- Alerting
- Event Scripts
- GigaFlow Cluster
- Global
- General
- LDAP
- SSL
- Import/Export
- SNMP V2 Settings
- SNMP V3 Settings
- Log Setting
- Proxy Setting
- MAC Vendors
- Mail Settings
- Storage Settings
- Data Retention and Rollup
- Integrations
- Licenses
- GigaFlow License
- 3rd Party Licenses
- Cleartext Communication
- Call Home Send
- Call Home Response
- Call Home Errors
- Receivers
- Syslog Parsers
- System Health
- System Status
- Users
- Existing Users
- Existing User Groups
- New Local User
- New User Group
- Existing Portal Users
- New Portal User
- Existing LDAP Groups
- New LDAP User
- New LDAP Group
- New Data Access Group
- Existing Data Access Groups
- Data Access Groups
- Watchlists
- Appendices
- Forensic Report Types
- Application
- ASs by Dst
- ASs by Source
- ASs Pairs
- Address Pairs
- Addresses As Sources And Dest Port By Dest Count
- Addresses By Dest
- Addresses By Source
- All Fields
- All Fields Avg FPR
- All Fields Max FPR
- Application Flows
- Application Flows With User
- Applications With Flow Count
- Class Of Service
- Duration Avg
- Duration Max
- FW Event
- FW Ext Code
- Interface Pairs
- Interfaces By Dest
- Interfaces By Destination Pct
- Interfaces By Source
- Interfaces By Source Pct
- MAC Address Pairs
- MAC Addresses By Dest
- MAC Addresses By Source
- Ports As Dest By Dest Add Popularity
- Ports As Dest By Src Add Popularity
- Ports As Src By Dest Add Popularity
- Ports As Src By Src Add Popularity
- Ports By Dest
- Ports By Source
- Posture
- Protocols
- Servers As Dest With Ports
- Servers As Dst Address
- Servers As Src Address
- Servers As Src With Ports
- Sessions
- Sessions Flows
- Sessions With Ints
- Subnet Class A By Dest
- Subnet Class A By Source
- Subnet Class B By Dest
- Subnet Class B By Source
- Subnet Class C By Dest
- Subnet Class C By Source
- Subnet Class C Destination By Dest IP Count
- Subnet Class C Source By Source IP Count
- TCP Flags
- Traffic Group By Dest
- Traffic Group By Source
- Traffic Group Pairs
- URLs
- Users (Report)
- TCP Flags