Monitor Event Source Health

You can monitor incoming and parsed data for an event source to determine the overall health of your data and easily identify, troubleshoot, and resolve issues. To view event source health data, go to the Data Visualization page and select the Event Source tab. Then, click the Monitor Health button to view the data for an event source.

InsightIDR displays data for incoming and parsed data received in the last day, week, two weeks, or month. For a more granular view of data and parsing rates, use the date picker to adjust the time range.

Not seeing incoming or parsed data?

For information about expected and unexpected reasons why you might not be seeing incoming or parsed data, visit the Event Source Troubleshooting page.

Monitor your incoming data

The Incoming Data section provides you with visibility into how events are received and sent from the collector to the platform. You can view the number of events received per minute and review data transmission rates to determine internet bandwidth usage for an event source.

You can also view the compressed data sent by the collector to the platform as well as a breakdown of events (and their size) that have been sent to Log Search for an event source.

Monitor your parsed data

The visualizations in the Parsed Data sections are intended to help you determine whether your data is being successfully parsed. You can view a breakdown of the percentage of parsed versus unparsed within a selected timeframe, what type of data of your event source is getting parsed, and a comparison of parsed events by data type within selected time, where you can easy find anomalies in the behaviour of your data.