Devices

Edit online

IBM® Network Intelligence creates investigation for the network observations that are identified in each device. Devices page displays the investigations with the network observations of the Devices. The Devices page includes the table with the analysis status, device name, interfaces, equipment, investigations, and priority of the network observations.

Overview of the Devices

Devices consist of interfaces and equipment. You can view the investigation and observations of the interfaces and equipment of the devices in the Devices page.

Interfaces are the physical or virtual points of connection that enable communication, data exchange, and control between the devices and other network devices. The interfaces can be physical (Ethernet port, fiber port, or radio link) or virtual (VLAN, loopback, tunnel, or subinterface).

Equipment refers to the hardware component that is installed in the device.

The Interfaces and Equipment sections in the Devices page displays the investigations and network observations in each interface and equipment of the devices.

The network observations in the devices are classified in three priority levels:

P1: The network observations with P1 flag are critical network anomalies that cause the critical system failure or major outrage in the network operations.
P2: The network observations with P2 flag are non-critical and high priority anomalies that can cause the impacts in the network operations.
P3: The network observations with P3 flag are low-impact anomalies that cause minimal or no impact on network operations.

Managing devices

Network Intelligence analyzes network data only from enabled devices to detect network observations and skip the analysis of the disabled devices. For more information, see Managing devices.

Viewing the network observations in the devices

To view the network observations in the interfaces and equipment of the device:

Go to the Devices page. You can also click the Priority tab in the Dashboard page.
Select the required device in the Devices page. You can search for the specific device with the device name or filter with Analysis, Device name, Investigation, and priority levels.
Select the Interfaces or Equipment tab of the selected device.
Click Initially analyzed, Causes identified, Remediation created, or Resolved in the Investigations section to view the hypothesis, observation, and reasoning of the network observations in the interfaces and equipment.
- Valid investigations:
  Click Valid investigations to view the investigations with the approved network observations.
- Dismissed investigations:
  Click Dismissed investigations to view the investigations with the network observations that are marked as false positive.
- Initially analyzed:
  Lists all the investigations with the identified network observations. The possible cause and remediation for the network observation is not generated for the investigations in the Initially analyzed section.
- Causes identified: Lists the analyzed investigations with the possible causes for the network observations. Network Intelligence uses the AI agents to generate root cause hypothesis and update the investigations with the possible causes.
- Remediation created: Lists the investigations with the possible causes and remediation steps to resolve the network observations.
- Resolved: List the investigations with the resolved network observations.
If you need to group, enable, or disable the specific device for network analysis, click Manage this devices. For more information, see Managing devices.
Select the required Interface name or Equipment name.

Figure 1. The graphical representation of the Metric cells for the selected interface

Enable Events to view the network incidents based on the severity categories. The graph with the Events and Observations of the selected interface or equipment are displayed in the console.

The graph provides the information on the events, metric cells, observations, alarms, and time period for the selected interface or equipment of the IP router. The Metric cells are custom parameters that are grouped in the category based on the network metrics data.

Ensure that the metric cells of the devices are grouped in the Observation metrics section to view the Metrics and Observation graphs. For more information, see Observation metrics.

Marking network observation as false positive

You can mark the network observation as false positive when the identified observation is incorrectly triggered despite the normal network operations. To mark the network observation as false positive:

Click the dot in the Observations graph.
Click the Mark as false positive icon.
Click Mark and remove to mark the observation as false positive and remove it from the Devices page.
The network observation is closed and excluded for the further analysis when you mark the observation as false positive.

Filtering the network observations in the Devices

You can filter the devices based on the investigation and network observations using the Analysis, Device name, Investigations, Priority, Start, and End fields.

A figure of network observation filter in the Devices interface — Figure 2. Filtering Devices with the investigation and network observations

Analysis: Click Analysis to filter the devices based on the analysis on or off status in the selected device group.
Device name: Click Device name to filter the devices based on the name of the device for the selected group.
Investigations: Click Investigations to filter the devices based on the total number of investigations.
Priority: Select All, P1, P2, or P3 in the Priority field to display the devices with the network observations.; Select All to display all the Devices with the network observation. Select P1, P2, or P3 to display the devices with the network observations based on the specified priority.
Start and End: Select the date and time period in the Start and End field and click Apply to filter the devices with the network observations for the specified date and time period.