What you see in usage monitoring is the result of traffic monitoring. You first position the monitoring point so that it has access to the traffic passing through your network. When you start usage monitoring, the monitoring point starts generating flow records in real time. AppNeta Performance Manager (APM) collates those records into groups and classes so that you can easily understand how your network resources are being consumed.
- Set up a monitoring point.
- Make sure that you set the monitoring point location.
- Turn on email notifications for usage monitoring events.
Declare local subnets
If you want APM to be able to distinguish between inbound and outbound traffic, you need to tell it which subnets are local to the monitoring point. Configuring traffic direction has the added benefit of hostname resolution for local subnets.
- Navigate to Usage > Monitoring Points.
- Click ‘configure’ next to any monitoring point.
- Select ‘traffic direction’ from the drop down.
- Enter a network address and subnet mask.
- Click ‘+’ for each additional subnet.
- Click ‘apply’ before navigating to any other configuration option, e.g., traffic direction.
On the monitoring point list page, click ‘start usage monitoring’. It takes at least 5 minutes for the first results to come in.
There is no indicator for whether usage monitoring is turned on and collecting data. This is because your APM service instance is stateless. Instead, look at ‘most recent traffic rate’ on the monitoring points page.
This column shows the average rate of traffic for the most recent 5-minute period. If monitoring is on, this column will update. Since usage data rolls in every 5 minutes, it may take up to 10 minutes for you to see any change.
Let monitoring run for a while, then consider these additional features:
- Usage alerts
- Describe when APM should trigger alerts in terms of flow characteristics—e.g., rate, volume, ip address—and corresponding thresholds.
- Custom apps
- If you don’t see a particular app your looking for—for example, if it’s being lumped together with tcp—define a custom app.
- User resolution
- If you’re running Active Directory on Windows Server 2008 R2 in your network, you can enable user resolution
- Second interface
- Monitoring point r40 or higher support a second capture interface so you can monitor multiple points in your network. You can also give each interface a meaningful name so that there’s no confusion when starting and stopping monitoring.