Enabling/disabling algorithms

Because Plixer Scrutinizer is designed to support the full spectrum of enterprise network types, it may include FA algorithms that do not apply to a specific environment. This will be based on the devices and elements present on the network, the types of flow data available, and/or organizational IT policies.

As part of optimizing the system’s monitoring and reporting functions, all unnecessary FA algorithms should be disabled. This includes algorithms that:

  • Only benefit devices or elements that are not present on the network

  • Require flow data that is not being sent by devices on the network

  • Target traffic or patterns that are made irrelevant by the organization’s IT policies

The Admin > Alarm Monitor > Flow Analytics Configuration page lists all FA algorithms and shows whether they are currently enabled (default) or disabled.

Hint

Hover over the information (i) icon next to an algorithm to view additional information about it.

Disabling FA algorithms

To disable an algorithm, click on it to open the configuration tray and use the toggle. The algorithm can also be re-enabled this way at any time.

Multiple algorithms can also be disabled or enabled as a bulk action when one or more algorithms are selected.