on Jul 20, 2016This topic provides an overview of the Alerts > Configure > Services tab The Services tab provides details of the ESA services added to Security Analytics.
The following figure shows the Services tab:
The Services tab has the following sections:
- ESA Services panel
- General Stats panel
- Deployed Rule Stats panel
Features
ESA Services Panel
The ESA Services panel lists the name of each ESA service added to Security Analytics.
General Stats Panel
The General Stats panel provides information on the Esper engine, rules and alerts.
The General Stats panel contains the following sections:
- Engine Stats
- Rule Stats
- Alert Stats
The following figure shows the General Stats panel.
The table lists and describes the parameters in each section.
| Sections | Parameter | Description |
|---|---|---|
| Engine Stats | Esper Version | Esper version running on the ESA service |
| Time | Time when the last event was sent to Esper Engine | |
| Events Offered | Number of events analyzed by the ESA service since the last service start | |
| Offered Rate | Current events offered rate on the ESA service | |
| Rule Stats | Rules Enabled | Number of rules enabled. |
| Rules Disabled | Number of the rules disabled | |
| Events Matched | Total number of events matched to all rules on the ESA service | |
| Alert Stats | Number of email notifications sent by the ESA service | |
| SNMP | Number of SNMP notifications sent by the ESA service | |
| Syslog | Number of Syslog notifications sent by the ESA service | |
| Script | Number of Script notifications sent by the ESA service | |
| Storage | Total number of alerts stored in database | |
| Message Bus | Total number of alerts sent to the message bus |
Deployed Rule Stats Panel
The Deployed Rule Stats panel provides details on the rules that are deployed on the ESA service.
The following figure shows the Deployed Rule Stats panel.
The table lists the various parameters in the view and their description.
| Parameters | Description |
|---|---|
 | Indicates the rule is enabled. Enables a rule that was disabled. |
 | Indicates the rule is disabled. Disables a rule that was enabled. |
| Health & Wellness | Displays a snapshot of memory usage when trial rules get disabled |
| Enable | Indicates whether the rule is enabled or disabled. Green icon indicates rule is enabled. White icon indicates rule is disabled. |
| Name | Name of the ESA rule. |
| Trial Rule | Indicates if the rule is running in trial rule mode. |
| Last Detected | The last time alert was triggered for the rule. |
| Events Matched | The total number of events that matched the rule. |