Open topic with navigation

# Topology View

As announced in the 23.1 release, the Collectors feature and the Connectors in Transformation Hub (CTH) feature have been deprecated, and from the ArcSight Platform 24.2 release on, only existing collectors and CTH deployments are supported. You can continue managing your collectors and CTHs in the platform, but you cannot create any new ones.

The Topology View displays your end-to-end data flow in browseable format. Shown are the logical relationships between network devices (event producers), Connectors and Collectors, and their destinations in each of your ArcMC locations.

As your environment scales to thousands of source devices, you can use logical groupings (locations) to model subsystems, and datacenters can quickly trace issues and drill down on details.

To display the Topology View, click Dashboard > Topology View.

The left column highlights the current topology view. The available views are based on the locations defined in ArcMC.

Each of monitor icons represents a Device Product type, and the bubbles on the left of each monitor icon indicate the number of devices for each Device Product type.

The severity status of each item in the topology view is indicated by its color. Item status may be Healthy (green), Fatal (red), Critical (amber), Warning (yellow), or Unknown (gray).

The status indicates the severity as reported by the managed product. Hovering over the device product show more details of the severity status. Clicking on any of the severity levels opens the device details filtered by that product type and severity combination.

The Devices area shows any devices which are forwarding events in your network.

- To view the EPS (events per second) traffic to and from a device, mouse over the device.

The Connectors/Collectors area shows Connectors and Collectors in the current topology view, specific to the location.

- To view the EPS (events per second) traffic to and from a connector, and get an overview of the connector status, mouse over the connector. Also shown are name, Device Type, Status, Path, Rule Violation (if any), Version, and ArcMC Managed.
- To drill down and view the health of the connector in detail, including health history, click the connector.

- In some cases, such as immediately following adding a connector node, an unmanaged connector may be displayed. This will be replaced with the connector data within a few collection cycles as data from the new connector is collected.

- Connectors displayed with the symbol are included in a different location from the one currently selected for viewing.

Note: Transformation Hub drill-down mode is ArcMC-location specific.

The Destinations area shows connector destinations.

- To drill down and view the health of an ArcMC-managed destination in detail, click the destination.

The Topology View refreshes automatically once per minute. (You can toggle automatic data refresh with the Auto Refresh control.) To refresh the view manually, click Refresh in the toolbar.

The Export button allows users to export the devices list, status, last reported, eps, event size, connector, and customer URI into a CSV file.

When exporting the devices list, users can choose between Use stored data and Real time device query information. These options are displayed from a drop-down after clicking the Export button.

Note: The Real time device query option might take some time to be completed.

You can also toggle the display of legends for the graphic with the Legends control.

Click Deployment View to show your environment's Deployment View.

Note: If any are present, unmanaged connectors (or other nodes) in your network are noted as such in the Topology View. ArcMC will have no visibility into unmanaged connectors, nor any visibility of traffic from those nodes. Various scenarios for such views, and the results of each scenario, are detailed here. To get the most complete and accurate picture of your network, you are strongly encouraged to use ArcMC to manage all connectors which are part of your logical topology.