We have a video to take you through the Troubleshooter. All the information in the video is also added below for your reference. Happy watching!
After searching for something, you can click on any graph. You could also do this from the graph browser, reports, alarms, or even some widgets. Clicking on a graph will take you to the troubleshooter.
Once in the troubleshooter, you will see a list of actions on the left of your screen. The details of the graph are listed below these actions. Time and graph controls are found on the right of the screen.
TROUBLESHOOT: Show Related Graphs
When you click on Show Related Graphs, the related graphs appear in the tabs at the bottom of the graph. If you click on any of the related graphs, it will now become the main graph. You can also zoom in to a specific period on the graph. You will notice that all the related graphs zoom as well. You can zoom out by right clicking on the graph.
The sub-elements tab shows us sub-elements graphs. These all still relate to the same interface.
This is not the case with similar graphs for this device. Here it shows you exactly the same graph, but for all other interfaces on the device.
Similar graphs in this view shows you the same traffic graphs for the entire view.
Similar graphs in the segment shows you graphs that have the same circuit identifier. Point to point circuits have an A and B side and are usually identified by the same circuit identifier. This could be issued by a third party telecoms provider; it could be an internal reference; it could just be a VLAN number; or just any other made up identifier.
Service tags are also another way to group graphs. You can give each mnemonic a specific service tag. If you have a CRM system that uses some identifier per customer service, you use that. Alternatively, you can just use it for information, for example: if this is an ADSL service or fibre-to-home service or something similar. By clicking this tab, all these services will be grouped together.
|You can change the start and end time and all the graphs will update as you adjust the time controls.|
You can set the time to Now and you can Reset the time.
You must click Update so that the graphs update to the new times.
When you click Reset, it will reset the time controls to what they were when you first opened the troubleshooter.
TROUBLESHOOT: Show Configuration
Note, that in order for this to work, you will need to have config backup enabled for your device.
If you click config of the device, you get the config for the whole device.
If you click inventory for the device, you will see inventory data such as serial numbers and part numbers of all the parts that have been installed; as well as the chassis serial numbers.
The raw backup data is essentially the unprocessed data that we get back from the device. There might be some problem with the parsing of the config or extracting some information such as a serial number in which case, checking the raw data will help you track it down.
Revision history gives you the list of all the past config changes so you can see what has changed.
TROUBLESHOOT: Show Events
If you click Show Events, you will see a list of all the events that have happened in the specific time frame that we are looking at. Often, you will see a spike or a drop in traffic, and you can tie that directly to some event that happened on the network.
Directly related events pertain to events that are directly tied to this interface. You can broaden your search to events on the device.
TROUBLESHOOT: Show Flow Data
Another incredibly useful tool is Netflow data. This has to be enabled on the device and interface for you to see it.
It gives you the breakdown of the traffic that you see on the graph. AS Number, protocol, application, source IP, destination IP, conversation - which a combination of source and destination IP - and even down to the raw detail. Note that you can only see the detail if you have selected a small enough time period, as pulling detail for longer periods puts too much strain on the system. If you click on any of these, you actually go through to the flow explorer which allows you to do further debugging.
TROUBLESHOOT: Time Shift
Time Shift takes the pattern of the graph and shifts it by one day. It then shows the comparison between these two patterns. It is very useful for patterns that are very consistent such as interfaces that move high volumes of traffic. On the top, you will see a line that is red or green. This shows whether the deviation in pattern was acceptable or not. The more consistent the pattern, the narrower the allowed deviation, and the more erratic the pattern, the more lenient the allowed deviation. You could use Time Shift to compare by week and month as well.
TROUBLESHOOT: Show Tools
You are able to check the ping and traceroute directly from the troubleshooter. You can also check the ping and traceroute from the configuration tab.
TROUBLESHOOT: Live Graph
Live Graph is a very useful feature. Sometimes you will need to do real time troubleshooting on a graph. Live graph gives you the ability to refresh up to every 5 seconds on a particular data source on the router.
Sometimes 5 seconds might be too much, so you can select 10 or 15 seconds.
TROUBLESHOOT: Export Data
|You can also have the ability to export the data in PDF or CSV format.|
CSV will give you the raw values that make up this graph here. You can use excel to do your own calculations on the data.
PDF is quite useful for you to send to a customer. It shows all the related graphs and you can export the Netflow into a nice report that you can send off via email.
The details section shows you the device and interface name. You can click on the device to edit the device if you have permission; or you can also see all the mnemonic details including the monitored IP and you can edit it to change any of these if you like.
Graph controls control what is displayed on the graph image.
|Show Timeframe in Graph will add the timeframe to the bottom of the image.|
This is quite useful if you want to send just an image off in a mail, as you can simply drag the image from your browser into the mail. Be aware that you need to drag it from the bottom of the image; if you try to drag it from the zoom area, it will try to zoom.
Show Peak Traffic is the max of the max so it just shows you the peak values inside the averages. Averaging won’t give you the maximum value but rather the average, so clicking here will show you the peak value in that average.
Another useful control is Show Business Hours. This will shade the areas of the graph that are excluded. This also includes any maintenance that may have been added. Here you can see that the business hour average is higher than the daily average. Also, nightly backups tend to skew the averages so it is useful to exclude that.
Show Trends are quite a nice way of seeing the rate at which the traffic is increasing. To make the trends more accurate, you will need to select a time period of at least 6 months to a year.
Most of these controls are also available as a report metric so you can just as easily represent these stats in a report.
Iris Certified Engineer (ICE) Level 1, 2 and 3
We offer certification exams for all users and administrators. Tracks have been developed to cover the content for each of the levels. To register to be an ICE, please email firstname.lastname@example.org.
TRACK 1: This is the end of your track. You can register for your ICE level 1 exam. Email email@example.com.
For the next article, click on the track that you are following:
TRACK 2: Service Manager
TRACK 3: Administrator
To return to the contents page, click on the track that you are following:
TRACK 2: Service Manager
TRACK 3: Administrator