Data Enabling Features
It also detects anomalous resource utilization if the consumption is significantly higher than the hourly
average.
The following resource usage data reports are available:
•
•
•
•
•
•
•
You can define custom rules, reports, and queries about resource usage based on the following events:
•
•
•
•
•
•
•
•
There is also is pre-defined resource utilization inspection rule:
•
•
•
Enabling the Required SNMP OIDs for Resource Monitoring
Table 2-5
User Guide for Cisco Security MARS Local Controller
2-42
Resource Utilization: Bandwidth: Inbound - Top Interfaces
Resource Utilization: Bandwidth: Outbound - Top Interfaces
Resource Utilization: CPU - Top Devices
Resource Utilization: Concurrent Connections - Top Devices
Resource Utilization: Errors: Inbound - Top Interfaces
Resource Utilization: Errors: Outbound - Top Interfaces
Resource Utilization: Memory - Top Devices
CPU Utilization Higher Than 50%
CPU Utilization Higher Than 75%
CPU Utilization Higher Than 90%
CPU Utilization Abnormally High
Memory Utilization Higher Than 50%
Memory Utilization Higher Than 75%
Memory Utilization Higher Than 90%
Memory Utilization Abnormally High
System Rule: DoS: Network Device - Success Likely
System Rule: DoS: Network - Success Likely
System Rule: Resource Issue: Network Device
lists the OIDs to enable, on a per device basis, for the supported model and versions.
Chapter 2
Reporting and Mitigation Devices Overview
78-17020-01