Blades > IDA

ida.ad_query.events

AD Query data.

AsyncCounter

{events}

{'ip', 'name'}

• ip

  The destination IP address of the AD query.

• name

  The name of the AD query.

ida.authenticated

Total number of authenticated objects that Identity Awareness acquired.

AsyncCounter

{objects}

{'entity', 'method'}

• entity

  The owner (user or machine).

• method

  The authentication method:

  • Kerberos

  • User and password

  • AD Query

  • SAML

ida.components.state

The state of the Identity Awareness component (PDP, or PEP).

Gauge

{state}

{'local', 'name'}

• local

  Is the component running on the Security Gateway you query?

• name

  The name of the PDP or PEP server.

ida.memory

Memory used by Identity Awareness.

AyncCounter

By

{'type', 'entity'}

• type

  The type of the buffer.

• entity

  The kind of session.

ida.logins.count

Total number of logins related to Identity Awareness.

AsyncCounter

{logins}

{'method'}

• method

  The authentication method:

  • Captive Portal

  • Total Identity Agents

  • AD Query

  • Full Identity Agents for Windows OS

  • Lite Identity Agents for Windows OS

  • Mac Identity Agents for macOS

  • Identity Agents for Windows Terminal Server

  • RADIUS Accounting

  • Remote Access VPN

  • Identity Collectors (Active Directory)

  • Identity Collectors (Cisco ISE)

  • Identity Collectors (eDirectory)

  • Identity Awareness API

  • Identity Awareness acquired from the Packet Tagging protection

ida.logged.unsuccessful

Total number of unsuccessful logins related to Identity Awareness.

AsyncCounter

{logins}

{'entity', 'method'}

• entity

  The owner (user or machine).

• method

  The authentication method:

  • Kerberos

  • User and password

ida.broker.subscribers

This metric is available in:

• R82 Jumbo Hotfix Accumulator Take 44 and higher.

Displays Broker Subscriber statistics: Status, Errors, Filtered, Message Transport, and Sync Transport values.

• Disconnected: 0

• Disconnected [Not Established]: 0

• Connected: 1

• Default: 2

Gauge

{state}

{ip, version, type}

• ip

  Subscriber’s IP

• version

  Broker Version

• type

  Errors / Filtered / Message Transport / Sync Transport / Status

ida.pdp.smartpull.peaktime

This metric is available in:

• R82 Jumbo Hotfix Accumulator Take 44 and higher.

PDP maximal recorded SmartPull statistics, displaying Register Requests, Network Requests, Single Rtt, and Average Rtt peak values per PEP.

Gauge

{state}

{ip, type}

• ip

  PEP’s IP

• type

  Register Requests / Network Requests / Single Rtt / Average Rtt

ida.pep.smartpull.realtime

This metric is available in:

• R82 Jumbo Hotfix Accumulator Take 44 and higher.

PEP concurrent SmartPull statistics, displaying Held Packets, Register Requests, Network Requests, Failed Requests, Single Rtt, and Average Rtt values per PDP.

Gauge

{state}

{ip, type}

• ip

  PDP’s IP

• type

  Held Packets / Register Requests / Network Requests / Failed Requests / Single Rtt / Average Rtt

ida.pep.smartpull.firewallstats

This metric is available in:

• R82 Jumbo Hotfix Accumulator Take 44 and higher.

Firewall SmartPull statistics, displaying SingleRtt, AverageRtt, and Failed Request counts from kernel measurements.

AsyncCounter

{logins}

{type}

• type

  Single Rtt / Average Rtt / Failed Requests

ida.pep.overview

This metric is available in:

• R82 Jumbo Hotfix Accumulator Take 44 and higher.

PEP hardware overview statistics, displaying CPU, Memory Size, and Memory Rss values.

AsyncCounte

{logins}

{method}

• method

  CPU / Memory Size / Memory Rss

ida.overview.multi_instance_status

This metric is available in:

• R82.10 and higher

Identity Awareness multi-instance status:

• Disabled (Single Instance): 1

• Enabled (N Instances) = N, for N = 2..10

• default/unknown = -1

Gauge

{state}

{}

ida.overview.concurrent_process_resources_allocation

This metric is available in:

• R82.10 and higher

Identity Awareness statistics for concurrent process resource allocation.

Gauge

{state}

{name, type}

• name

  The process name

• type

  The resource type:

  • CPU

  • Memory_size

  • MemoryRss

  • Uptime

ida.pdp.message_queues

This metric is available in:

• R82.10 and higher

Identity Awareness statistics for PDP message queues.

Gauge

{state}

{message_queues_name, type}

• message_queues_name

  The name of the message queue.

• type

  The queue metric:

  • concurrent_queue_size

  • peak_queue_size

  • fragmented_messages_count

ida.pep.scaled_sharing

This metric is available in:

• R82.10 and higher

Identity Awareness statistics for PEP Scaled Sharing.

AsyncCounter

{logins}

{type}

type:

The Scaled Sharing metric:

• Query rates: single_ip_queries_rate, ip_range_queries_rate, network_queries_rate

• Peak query rates: single_ip_queries_peak, ip_range_queries_peak, network_queries_peak

• Overall query counters: single_ip_queries_overall, ip_range_queries_overall, network_queries_overall, summary_of_all_queries

• Empty responses: empty_single_ip_response, empty_network_response

• Invalidation counters: inval_add_session_overall, inval_add_network_overall, inval_delete_session_overall, inval_delete_network_overall

• Network counters: scaled_sharing_networks_overall

• Last event timestamps: last_single_ip_query_time, last_ip_range_query_time, last_network_query_time, last_add_session_inval_time, last_add_network_inval_time, last_delete_session_inval_time, last_delete_network_inval_time

ida.pep.scaled_sharing.rate_peak_invalidations

This metric is available in:

• R82.10 and higher

Identity Awareness statistics for peak Scaled Sharing invalidation rates.

Gauge

{state}

{source_ip, type}

• source_ip

  The source IP address.

• type

  The invalidation type:

  • add_session

  • add_network

  • delete_session

  • delete_network

ida.pep.scaled_sharing.round_trip_time_peak

This metric is available in:

• R82.10 and higher

Identity Awareness Scaled Sharing statistics for peak round trip time.

Gauge

{state}

{source_ip, type}

• source_ip

  The source IP address.

• type

  The query type:

  • single_ip_query

  • ip_range_query

  • network_query

ida.pep.scaled_sharing.networks_count

This metric is available in:

• R82.10 and higher

Identity Awareness statistics for the number of Scaled Sharing networks.

Gauge

{state}

{source_ip, type}

source_ip:

The source IP address.

ida.pep.Infinity_Identity.concurrent_rate_of_invalidations

This metric is available in:

• R82.10 and higher

Infinity Identity statistics for concurrent invalidations.

Gauge

{state}

{source_ip, type}

• source_ip

  The source IP address.

• type

  The invalidation type:

• add_session

• add_network

• delete_session

• delete_network

ida.pep.Infinity_Identity.round_trip_time_avg

This metric is available in:

• R82.10 and higher

Infinity Identity statistics for average round trip time.

Gauge

{state}

{source_ip, type}

• source_ip

  The source IP address.

• type:

  The query type:

  • single_ip_query

  • ip_range_query

  • network_query

ida.pep.Infinity_Identity.disconnections_count

This metric is available in:

• R82.10 and higher

Infinity Identity statistics for disconnections.

Gauge

{state}

{source_ip, type}

• source_ip

  The source IP address.

• type

  • disconnections_count

ida.pdp.scaled_sharing.queries_rate

This metric is available in:

• R82.10 and higher

Identity Awareness statistics for the PDP Scaled Sharing query rate.

Gauge

{queries}

{source_ip, type}

• source_ip

  The source IP address.

• type

The query metric:

• Single_IP_Query

• Range_IP_Query

• network

• empty_responses

ida.pdp.scaled_sharing.invalidation_rates

This metric is available in:

• R82.10 and higher

Identity Awareness statistics for the PDP Scaled Sharing invalidation rate.

Gauge

{invalidations}

{source_ip, type}

• source_ip

  The source IP address.

• type

The invalidation type:

• add_session

• add_network

• delete_session

• delete_network

ida.pdp.session_count

This metric is available in:

• R82.10 and higher

Identity Awareness statistics for the number of PDP sessions.

Gauge

{state}

{instance_name, type}

• instance_name

  The PDP instance name.

• type

The session metric:

• basic_sessions_count

• peak_basic_sessions_count

• super_sessions_count

• peak_super_sessions_count