Only Global Admins and Restricted Admins with elevated View and Manage privileges can take this action.
For any Network Monitor you have added to your LogRhythm deployment, there are a number of functions you might want to monitor. Some of these can be monitored on this Network Monitors tab of the LogRhythm SIEM Client Console.
For NetMon administration and configuration capabilities not described in this topic, see LogRhythm NetMon API in the LogRhythm NetMon Help.
- On the main toolbar, click Deployment Manager.
- Click the Network Monitors tab.
- Right-click the Network Monitor that you want to review, click Actions, and then click one of the following:
- Display Query Rules. This dialog box shows the configuration of the continuous, search-based Alarm rules that are configured in the Network Monitor.
- Service Status. This dialog box shows the status of the services that are required for NetMon to function correctly.
System Logs. This dialog box shows the logs generated by NetMon in real time. The following table describes the logs.
Log Data Description
Displays a log for NetMon's packet-processing component (the Engine), which collects and reads the network traffic and processes it.
Displays a log for the component that sends data through the Rule Engine threads.
Displays a log for NetMon's component that manages other services, such as the Engine and the Logger.
Displays a log for the component that indexes metadata in Elasticsearch.
Displays a log for the process which tests for alarm conditions using the Elasticsearch percolate function.
Displays the raw log output of NetMon's database.
Displays the log for the process used to generate statistical data for NetMon's Diagnostics page.
Displays the log for the process used to maintain NetMon's Elasticsearch indices.
Displays the log for the process that maintains the license state of the NetMon distribution.
Displays an error log for NetMon's web server component.
Displays a log for user activity by IP address. This log activity constantly refreshes.
Displays an activity log for the metadata storage engine.
Displays a log of Deep Packet Analytics Rules that have run at the flow level.
Displays a log of Deep Packet Analytics Rules that have run at the packet level.
Displays event and diagnostic logs for NetMon. For more information, see Diagnostic Messages.
Displays log messages related to file extraction in NetMon.
- Click Close.