Sensors are Trellix Communication Broker Senders (Comm Brokers) in your Helix network. You can review the health of a sensor in your Helix environment. If your sensors stop functioning, log data from your data sources will not be received by Helix.
Helix provides information about how your individual sensors are performing and how much data is being received from them.
Note
Sensor health data is collected only for the latest versions of standalone Comm Brokers. Sensors that have been disconnected for more than seven days are not shown.
Health Information | Description |
|---|---|
Suricata Loss | The percentage of packets lost from the Suricata network detection engine. |
Bro Loss | The percentage of packets lost from the Bro Network Security Monitor. |
PCAP Loss | The percentage of packets lost from all packet captures (pcap). |
Memory Consumption | The percentage of memory used for packet transfer by the sensor. |
CPU Consumption | The percentage of CPU used for packet transfer by the sensor. |
EPS | The EPS rate generated by the sensor from five minutes ago. This may include forwarded syslog events and network traffic metadata. |
Bandwidth | The bandwidth of the sensor in megabits per second (Mbps). |
For information about unmanaged Comm Brokers, see the Unmanaged Communications Broker Installation and Configuration Guide.