NetFlow monitoring applications are like cars. It’s important to have a good engine and a strong body to make sure it can get you to where you need to go and can stand the test of time. But if the steering wheel is in the wrong place and the clutch keeps dying every 2,000 miles, then the best engine in the world won’t matter. Like a top of the line BMW, our goal is to provide the best of both worlds; a strong, durable core, with aesthetics that make using our NetFlow analysis software an enjoyable experience.
Last week you read about five new features set to be included in the upcoming release of Scrutinizer version 7. Nathan got our blog preview series started by talking about, encryption exclusions, more flows, collector improvements, group permissions for users and proxy server configuration. This week, I have five more new features for you that are certain to whet your appetite for more network traffic analysis goodness from Scrutinizer v7.
Feature 1: Overriding report interval when no data is available
Have you ever been hot on the heels of a problem by drilling into a time frame or running a report only to find that there is no data stored for that time frame in the interval you need to see at that granularity? Because remember, Scrutinizer stores as much data as your server can hold, but storing data in 1 minute intervals for years would take up an immense amount of hard drive space. If you don’t believe me, just ask our NetFlow Calculator. So, of course, the obvious thing to do is only save 1 minute intervals for a certain amount of time. After that time goes by (let’s say 1 month) getting that granular may no longer be as important as it would be for today or yesterday.
This method of storing data makes it realistic for storing long term historical data. However, what happens on the rare occasion that you want to look at a specific time frame for 1 minute or 5 minute data, but you have told Scrutinizer to only hold onto data in those intervals for not as far back as you now want to look? Well, now if Scrutinizer does not have the stored data to display the time frame you have selected in the granularity you have chosen, it will show you what other intervals contain data for that time frame.
Okay, so I want to get as close in on a problem that happened over a month ago, but I don’t have 1 minute intervals available, now I can easily select the next closest interval that does have data, or go further out if I choose.
Feature 2: Connections for Google Maps
Displayed connections between devices with color coded indicators based on utilization have long been a fan favorite in Scrutinizer’s Flash Maps. It was only a matter of time before we ported this feature over to the Google Maps portion of the product. As I’ve mentioned before, we take pride in the many innovative ways we visualize NetFlow data.
Feature 3: Host and application quick search
In Scrutinizer 7, custom filtered reports are easier than ever to create. However, if you know exactly which host or application you are looking for, why not just run a quick search, and go directly to the information you are looking for? The search icon is clickable from any screen of the Scrutinizer interface.
Feature 4: Customizable log in environment
User management and customization has been much improved. Now users will be able to choose the look and feel of their own Scrutinizer experience – choose your favorite skin, your home tab, your preferred language, and much more. Customizable MyView gadgets with multiple tabs make it easy for users to have the information that is most useful to them right at their fingertips, every time they log in.
Feature 5: Alarm category filters
The Alarm tab now allows for on-the-fly custom filters based on category. Want to know which hosts are sending excessive multicast packets? Easy. Click the Alarm tab, enter MULTICAST VIOLATION in the search box, select the “message” category from the drop down, then click search. It’s that simple. Use the same method to find a specific host that is triggering alarms or a certain device that needs investigation.
So you can see that Scrutinizer 7 is all about streamlining the user experience to make it unique to each individual and organization, while making the information that users need quicker and easier to get to. We’re not just throwing new parts under the hood, we’re changing the way the ride feels. I’d say drive it ‘til the wheels fall off, but that could take a while…
Look for Joanne’s follow up next week for five more Scrutinizer v7 features.