3.1.12.3.4. Profiling Metrics

The Profiling Metrics dashboard presents device tag metrics to enhance device profiling capabilities.

We can see the following views on this dashboard, starting from the header:

../../../../_images/profiling_metrics_header.png


This header composed of four dashboards allows filtering by Network Device Location, Device Network Name, Device Network CDIRs, Endpoint Types. It will always look for the temporary index that is regenerated every day. In this toolbar, filter your data using KQL syntax.

../../../../_images/profiling_metrics1.png


  • End Point distribution: A pie chart that displays the percentage of each EPT.

  • Profiling tags stats: A table that shows statistics based on EPT: tag, accuracy (TAG DPA), total, percentage, minimum number of tags, average, and a maximum of TAGs.

../../../../_images/profiling_metrics2.png


  • MAC vendor per End Point Type: A table that displays the MAC tags related to vendor per Endpoint Types.

../../../../_images/profiling_metrics3.png


  • DHCP fingerprint per Endpoint Type: A table that displays the DHCP fingerprint per Endpoint Type.

../../../../_images/profiling_metrics4.png


  • Open ports per End Point Type: A table that displays the open ports per Endpoint Type.

../../../../_images/profiling_metrics5.png


  • Passive Open ports per End point Type: A table that displays the passive Open ports per Endpoint Type.

../../../../_images/profiling_metrics6.png


  • Destination ports per End Point Type: A table that displays the destination ports per Endpoint Type.

../../../../_images/profiling_metrics7.png


  • Service banners per End Point Type: A table that displays the service banners per Endpoint Type

../../../../_images/profiling_metrics8.png


  • HTTP parsed information per End Point Type: A table that displays the HTTP parsed information per Endpoint Type.

../../../../_images/profiling_metrics9.png


  • SNMP OID per End Point Type: A table that displays the SNMP OID per Endpoint Type.

../../../../_images/profiling_metrics10.png


  • Organization Issuer certificates per End Pint Type: A table that displays the Organization Issuer certificates per Endpoint Type.

../../../../_images/profiling_metrics11.png


  • Common Name Subject certificates per End Point Type: A table that displays the Common Name Subject certificates per Endpoint Type.

../../../../_images/profiling_metrics12.png


  • DNS queries per End Point Type: A table that displays the DNS queries per Endpoint Type

../../../../_images/profiling_metrics13.png


  • SSL queries per End Point Type: A table that displays the SSL queries per Endpoint Type.

../../../../_images/profiling_metrics14.png


  • HTTP browsers per End Point Type: A table that displays the HTTP browsers per Endpoint Type.

../../../../_images/profiling_metrics15.png


  • HTTP User Agent Device per End Point Type: A table that displays the HTTP User Agent Device per Endpoint Type.