Core Aggregate Pages

The following topics cover the aggregate views in the Network Explorer module of the Core section of the portal:

Note: For details pages in the Network Explorer module, see Core Detail Pages.

The Aggregate page in Network Explorer for sites.
 

About Aggregate Views

The Network Explorer aggregate views are part of the Core section of the portal. To access these pages, go to Core » Network Explorer and click the Explore Top Talkers button in the Core card at the top of the right sidebar, then pick a view from the drop-down menu.

The Network Explorer aggregate views are each focused on one specific aspect (e.g. dimension or data source) of your overall network traffic. For example the Applications aggregate page (Core » Network Explorer » Applications) presents your network traffic broken out by the applications to which Kentik attributes the traffic. These applications are listed in the Aggregate Traffic Table. By clicking on an individual application listed in that table you can drill down to the detail view for that specific application (see Core Detail Pages).

 

Aggregate Views UI

The main content area in an aggregate view includes the following UI elements:

  • Related Insights (on SubNav): A button that pops up the Insights Pane, which shows insights related to the traffic type of this page (e.g. to applications on the Applications aggregate page; see About Insights).
  • Parameter controls: Set the parameters of the query whose results are displayed in the page's graph and table (see Parameter Controls):
    - Filters control: Apply filters that narrow the traffic covered by the query results.
    - Aggregate selector: Choose the calculation by which traffic data displayed in the graph and table is aggregated
    - Metric selector: Set the metric by which query results are evaluated for top-X and displayed in the graph and table.
    - Time Range selector: Set the duration, looking back from the current time, covered by the query whose results are displayed in the graph and table.
  • Tabbed graph: Displays visualizations of the results returned from the query specified with the Parameter Controls (see Aggregate Views Graph).
  • Aggregate Traffic Table: A top-X table presenting the results returned from the query specified with the Parameter Controls. The group-by dimension for the query is the dimension corresponding to the current page, e.g. when the page is Applications the dimension is applications. The columns of the table are listed in Aggregate Traffic Table.
  • Add Device (Devices aggregate view only): Opens the Add Device dialog in a new tab (see Device Settings Dialog).
 

Aggregate Views Graph

The Aggregate Views Graph displays visualizations of the results returned from the query specified with the Parameter Controls. Depending on your actual traffic volume, there will be a tab for each of the following types of traffic:

  • Total: The sum of traffic in all of the subsets below.
  • Internal: Traffic whose origin and destination are both within your network.
  • Inbound: Traffic entering from somewhere outside your network.
    Note: In the Interfaces aggregate view, Inbound is replaces with Ingress.
  • Outbound: Traffic leaving to somewhere outside your network.
    Note: In the Interfaces aggregate view, Outbound is replaces with Egress.

Note: For a full description, see Tabbed Graph.

 

Aggregate Traffic Table

The Aggregate Traffic Table lists your network's top-X instances of the dimension corresponding to the current page. On the Applications aggregation page, for example, the table is a top-X list of applications on your network. The table, whose underlying query can be tailored with the Parameter controls, provides information and actions for each of the listed instances. The columns in a table vary depending on the specific aggregate view, but generally include the following:

  • Dimension (actual heading varies by page): The name of the instance (e.g. on the Applications aggregation page, the name of an application). Click the name to go to the details page for that instance (see Core Detail Pages).
    Note: The heading for this column will correspond to the dimension of this page. For example, on the Applications aggregation page the column heading will be Applications.
  • Breakdown popup (only on AS Paths aggregate page): Click the numbered list icon to the right of the path to open a popup showing additional hops in the path (next, 2nd, 3rd, etc.).
  • Internal: The volume of traffic on this site both originating and terminating within the network. The unit depends on the setting of the Metric Selector.
  • Inbound: The volume of traffic on this site originating outside the network. The unit depends on the setting of the Metric Selector.
    Note: In the Interfaces aggregate view, Inbound is replaces with Ingress.
  • Outbound: The volume of traffic on this site terminating outside the network. The unit depends on the setting of the Metric Selector.
    Note: In the Interfaces aggregate view, Outbound is replaces with Egress.
  • Total (not included in aggregate tables for Sites, Devices, or Interfaces): The sum of traffic in all of the subsets above.
  • View in Explorer (hamburger icon): Opens Data Explorer for further exploration of the traffic. The Data Explorer controls will be set to query about the traffic in this row of the table. Three options are available:
    - Open Internal in Data Explorer
    - Open Inbound in Data Explorer
    - Open Outbound in Data Explorer

Note: For a full description of table UI, see Traffic Table.

 

Aggregate Views Categories

Other than the landing page, which provides an overall view of traffic, the Network Explorer views are grouped into the following categories:

  • Network & Traffic: Information related to non-cloud data sources including interface names and descriptions, port IDs, how and by whom it’s transported, etc:
    - Sites
    - Devices
    - Interfaces
    - Providers
    - Connectivity Types
    - Network Boundaries
  • IP & BGP Routing: IP addresses (Ipv4 or Ipv6), protocol (e.g. TCP or UDP), TCP flags, and ToS, as well as routing information including source and destination AS, AS path, AS names, community, prefixes, and hops:
    - ASNs
    - AS Paths
    - BGP Community
    - INET Family
    - IP Addresses
    - Next-Hop ASNs
    - Packet Size
    - Protocols
    - Route Prefixes
  • Geographic: Properties related to physical location:
    - Countries
    - Regions
    - Cities
  • Host Monitoring: Metrics from host agents:
    - TCP Traffic
    - DNS Traffic
  • Application Context: Factors related to context, e.g. whether a flow originated or terminated with a commercial CDN, or what “service” (port and protocol) it represents:
    - Applications
    - Services
  • Cloud: Information sourced from VPC flow logs from cloud providers:
    - Amazon Web Services
    - Google Cloud Platform
    - Microsoft Azure
    Note: The views in this category are currently Kentik preset dashboards rather than standard Network Explorer views.

Note: For more information on the dimensions represented by the above views, see Dimensions Reference.

© 2014- Kentik
In this article:
×