Topology

Based on the collected metrics, Axoflow visualizes the topology of your security data pipeline. The topology allows you to get a semi-real-time view of how your edge-to-edge data flows, and drill down to the details and metrics of your pipeline elements to quickly find data transport issues.

Security data pipeline topology

Select the name of a source host or a router to show the details and metrics of that pipeline elements.

If a host has active alerts, it’s indicated on the topology as well.

Alert indicator on the Topology page

Traffic volume

Select bps or eps in the top bar to show the volume of the data flow on the topology paths in bytes per second or events per second.

Queues

Select queue in the top bar to show the status of the memory and disk queues of the hosts. Select the status indicators of a host to display the details of the queues.

Queue details

The following details about the queue help you diagnose which connections of the host are having throughput or connectivity issues:

  • capacity: The total capacity of the buffer in bytes.
  • usage: How much of the total capacity is currently in use.
  • driver: The type of the AxoSyslog driver used for the connection the queue belongs to.
  • id: The identifier of the connection.

Disk-based queues also have the following information:

  • path: The location of the disk-buffer file on the host.
  • reliable: Indicates wether the disk-buffer is set to be reliable or not.
  • worker: The ID of the AxoSyslog worker thread the queue belongs to.

Both memory-based and disk-based queues have additional details that depend on the destination.