While monitoring and alerting on anomalies is how operations teams become aware of issues, simple threshold alarms can create too many alarms to track down and false positives due to known legitimate causes. Leveraging network intelligence when detecting anomalies and identifying root-causes leads to fewer alarms, reducing alarm-fatigue, while also improving overall troubleshooting efficiency.
Kentik has released new Insights features that provide network operators with additional auto-detection capabilities, more context on detected issues, and identification of the potential root-cause. With these new capabilities, Kentik enables NetOps to improve alarm handling, reduce MTTR, and deliver more reliable networks.
Insights Details Enhancements
The Details view of Insights events has been improved with additional contextual information allowing users to better assess issues and immediately take actions.
The following details are added to the issue event:
- From Policy, link to the Alert Policy editor for Custom Insights
- From Family, link to filter the Insights and Alerting results
- How Often? provides mini graphs of how often the Key, Insight, and Insight type is happening.
- Take Action suggests next steps to further explore and triage issues
See the screenshot below of an event page with new Insights Details enhancement features.
Flagging/Upvoting Insights Gives 5-year Retention
Another enhancement to event handling is the possibility to increase the retention of insights events. Users can now Flag or Upvote an insight to increase the retention of both Kentik Insights or Custom Insights to five years.
- Retention for Custom Insights (alarms): 90 days
- Retention for Kentik Capacity Insights: 5 years
- Retention for Kentik Insights (that are not Capacity Insights): 28 days
Note: Insights only stores the details and metadata of the insight, not the underlying data.
Simple Traffic Profile
Going forward, Insights will use the Simple Traffic Profile (as a way to distinguish the different traffic profiles via filtering) in Comparison Insights.
The Simple Traffic Profile comprises:
- Inbound: Traffic that originates outside your network and terminates inside your network
- Outbound: Traffic that originates inside your network and terminates outside your network
- Internal: Traffic that both originates and terminates inside your network
- Through: Traffic that both originates and terminates outside your network
- Other: Traffic that is not classified by the above profiles
For more information regarding product updates, please contact our Customer Success team.