Skip to main content

Threat Detection ManagementThreat Detection Management Guide

Monitor the Analytics Engine

From the Threat Detection Management app on the New-Scale Security Operations Platform, you can monitor the status of the analytics engine.

When you log in to the app, the first tile that you see summarizes the analytics Engine Status.

tdm-analytics-engine-status.png

Depending on the state of your environment, the analytics engine displays one of the following statuses:

Status

Description

tdm-analytics-engine-status-triggering.png

Triggering

The analytics engine is actively detecting threats based on real-time data.

tdm-analytics-engine-status-changes-pendng.png

Pending changes

The analytics engine is actively detecting threats based on real-time data but has pending rule changes. Review and apply the rules as needed to get the latest in threat detection logic.

tdm-analytics-engine-status-inactive.png

Inactive

The analytics engine does not have any active rules by which it can raise alerts. Enable one or more rules to begin threat detection activity.

tdm-analytics-engine-status-training.png

Training

The analytics engine is currently assessing historical data to establish baselines. If desired, view progress to monitor the training status.

tdm-analytics-engine-status-failure.png

Failure

The analytics engine has encountered an error and is not currently operational. The error was reported to Exabeam Support for immediate investigation. After the issue is resolved, the analytics engine will reprocess and apply threat detection rules to historical data.