Detection

Edit online

The Detection dashboard is dedicated to the information provided by the IBM® Storage Defender® sensor suite and its current configuration. On the Detection dashboard, you can review events from the IBM Storage Defender sensors, IBM Storage FlashSystem, and view detailed log information to understand why an alert was generated. You can also review the current state of the existing IBM Storage Defender sensor installations and IBM Storage FlashSystem.

To view the Detection dashboard for a recovery group, complete the following steps:

  1. On the Data Resiliency Service home page, click Recovery Groups.

  2. From the list of recovery groups, click the row in the table for the recovery group that you are interested in.

  3. On the recovery group's Overview dashboard, go to the navigation menu and click Detection.

To review the events from the defender sensors, complete the following steps:

  1. On the Detection dashboard, go to the Detection events section.

  2. Events can be viewed in the included table with the following columns:
    • Time – shows the time when an event is generated from a connected source.
    • Source – shows the connected source type that generated the event.
      Tip: Clicking the down arrow shows the reporting sensors. For heartbeat summary events, the sensors are divided into active heartbeats and missing heartbeats. Missing heartbeats might indicate an issue with the underlying system.
    • Event – shows the type of event.
      Tip: For Potential threat events, you can click the Eye symbol to view the full log generated by the sensor.

  3. You can scroll through the list to view the events in chronological order, or use the Search option to find specific events.

To review the list of virtual machines in the recovery group along with its FQDN and OS, complete the following steps:

  1. Click Manage on the Defender sensors tile.
    Note: If you have not installed any sensor previously, you will see the Get started button on the Defender sensors tile.
  2. Review the list of virtual machines in this recovery group along with their FQDN and operating system.
    Tip: IBM Storage Defender sensors are supported on the following operating systems:
    • RHEL 9.0 or later version
    • SUSE 15 SP5 and later version
    • Ubuntu 24.04 LTS and later version
    • Windows 2011
    • Windows 2019
    • Windows 2022
    • Windows 2025

  3. You can download this list by selecting Download, for your reference during Ansible configuration.

  4. To close the window, click X.

To review detailed documentation related to Ansible playbooks and IBM Storage Defender sensors, complete the following steps:

  1. Click Manage on the Defender sensors tile.

  2. Click the link indicated for the current sensor version and supported operating systems.