Kaspersky Anti Targeted Attack (KATA) Platform

Monitoring the receipt and processing of incoming data

8 November 2023

ID 247515

In the Processed widget, you can assess the processing status of data coming from the Sensor component and the Endpoint Agent component to the server with the Central Node component, and track data processing errors.

To select the component (Sensor or Endpoint Agent) for which you want to assess incoming data, use the drop-down list to the right of the Processed widget name.

You can select the type of data display in the drop-down list to the right of the component name (Sensor or Endpoint Agent):

The left part of each widget displays the legend for colors used in the widget itself.

If the Current load data display type is selected, the average data processing rate over the past 5 minutes is displayed to the right of the key.

Example:

The Processed widget has (SPAN) or (ICAP) Sensor type and Current load data display type selected and displays the data processing rate for SPAN and ICAP traffic coming from the Sensor component to the server with the Central Node component over a specific time period.

The following data is displayed:

  • Traffic—Rate of incoming traffic to the server with the Central Node component, indicated in green (Mbps).
  • Files—Rate of file processing indicated in gray (objects per second).
  • URLs—Rate of URL processing indicated in blue (objects per second).
  • Unprocessed—Number of unprocessed objects indicated by vertical red lines.

    When you move the mouse cursor over a widget, you see a pop-up window that displays the data processing rate for a specific time period.

    The Processed widget has (SMTP) Sensor type and Current load data display type selected and displays the data processing rate for mail traffic coming from the mail sensor to the server with the Central Node component over a specific time period.

    The following data is displayed:

  • Traffic—Rate of incoming traffic to the server with the Sensor component, indicated in green (messages per second).
  • Files—Rate of file processing indicated in gray (objects per second).
  • URLs—Rate of URL processing indicated in blue (objects per second).
  • Unprocessed—Number of unprocessed objects indicated by vertical red lines.

    When you move the mouse cursor over a widget, you see a pop-up window that displays the data processing rate for a specific time period.

    The Processed widget has (LOAD) Endpoint Agents Sensor type and Current load data display type selected and displays the processing rate for events coming from Endpoint Agent components to the server with the Central Node component over a specific time period (events per second).

    When you move the mouse cursor over a widget, you see a pop-up window that displays the data processing rate for a specific time period.

If the Selected period data display type is selected, to the right of the key you will see the average rate of incoming traffic to the server with the Central Node component and the number of objects processed during the selected period.

Example:

The Processed widget with an (SPAN) or (ICAP) Sensor, Selected period data display type, and Month data display period selected, displaying the rate of SPAN and ICAP traffic coming to the server with the Central Node component, as well as the number of files and URLs extracted from mail traffic during the selected month.

The following data is displayed:

  • Average traffic—Rate of incoming traffic to the server with the Central Node component, indicated in green (objects per second).
  • Files—Number of extracted files indicated in gray.
  • URLs—Number of extracted URLs indicated in blue.
  • Unprocessed—Number of unprocessed objects indicated by vertical red lines.

    When you move the mouse cursor over a widget, you see a pop-up window that displays the rate of incoming traffic to the server with the Central Node component and the number of objects processed during a specific time period.

    The Processed widget with an (SMTP) Sensor, Selected period data display type, and Month data display period selected, displaying the data processing rate of mail traffic coming to the server with the Central Node component, as well as the number of files and URLs extracted from mail traffic during the selected month.

    The following data is displayed:

  • Average traffic—Rate of incoming traffic to the server with the Central Node component, indicated in green (objects per second).
  • Files—Number of extracted files indicated in gray.
  • URLs—Number of extracted URLs indicated in blue.
  • Unprocessed—Number of unprocessed objects indicated by vertical red lines.

    When you move the mouse cursor over a widget, you see a pop-up window that displays the rate of incoming traffic to the server with the Central Node component and the number of objects processed during a specific time period.

    The Processed widget with (LOAD) Endpoint Agents Sensor type, Selected period data display type, and Month data display period selected, displaying the number of events coming from hosts with the Endpoint Agent component to the server with the Central Node component during the selected month.

    When you move the mouse cursor over a widget, you see a pop-up window that displays the number of events for a specific time period.

See also

Monitoring the performance of the application

About widgets and layouts

Selecting a tenant and a server to manage in the Dashboard section

Adding a widget to the current layout

Moving a widget in the current layout

Removing a widget from the current layout

Saving a layout to PDF

Configuring the data display period in widgets

Monitoring the queues for data processing by application modules and components

Monitoring the processing of data by the Sandbox component

Viewing the working condition of modules and components of the application

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.