Organization Insights (BETA)
Investigate issues affecting sites, devices, clients, tunnels, alerts, events, and firmware for your Mist organization.
Find the Org Insights
Go to the Insights page. By default, the Site Insights page displays. Select the drop-down menu and select Entire Org. In the top right corner of the page, select Trends.

You can select a time frame for which you want to view the data. To do so, select the drop-down menu at the top of the page and select the desired time frame.

Organization Client Experience
This section displays real-time statistics outlining client experience and impacted sites.

-
Overall SLE Health—This displays the overall SLE health across Wireless, Wired, and WAN clients. The SLE health score is calculated by considering a subset of the most actionable SLEs within each. There is also a shortcut in each widget you can use to jump to those Insights pages.
-
Active Sites—The Active Sites count inidicates the number of sites in service and lists the sites that have had client activity in the past 7 days. This count also tells you the number of sites in your org that had client activity in the past 7 days. The breakdown provides you with the number of sites with optimal (represented in green) or sub-optimal (in red) SLEs for the subset of SLEs in each domain. This is refreshed every minute minute.
Select the red portion of the bar to bring up the list of Impacted Sites with sub-optimal SLEs. This displays the impacted SLE and the success percentage.

-
Devices—The Devices count provides insight into the total number of active devices (active in the last 14 days) and a further breakdown of connected and disconnected devices at an organization level.
Click the red portion of the bar to open the list of disconnected devices per device category.

-
Mist Edge Tunnels—This count provides insight into the total number of tunnels configured for Mist Edges. If you click the red portion of the bar, the breakdown provides insight into the tunnels that are configured but currently disconnected.
-
Top Alerts—This section displays the alerts with the highest impact, effectively reducing alert fatigue. The following alert types can be displayed in this list:
-
Marvis Action
-
AP Loop Detected event
-
WAN Edge/Switch DHCP Pool Exhausted
-
Critical Switch Port Up/Down
-
Critical WAN Edge Port Up/Down
-
EVPN Detected Duplicate MAC Address

-
Network Activity Overview
These graphs provide high-level insights into network activity. The data visualizations reflect system status and usage patterns over a selected time period. The graphs are updated via the API and WebSockets.
-
Clients—This graph reflects the most up to date number of clients per wired and wireless assurance. The numbers are updated every minute via WebSockets. The graph itself displays client connectivity for wireless and wired users and automatically refreshes every 10 minutes. It may take up to 5 minutes for the graph to indicate a major drop in trends.

-
Devices—The most up to date number of cloud connected wired, wireless, and WAN devices are displayed. These numbers are updated every minute through WebSocket, and can take up to 5 minutes before indicating a major drop in trends. The graph itself shows device cloud connectivity for access points, switches, WAN Edges and Mist Edges. It automatically refreshes every 10 minutes.

-
Authentications—The current rate of successful authentication events across wired and wireless clients are shown. These numbers are updated every minute through WebSockets. The graph itself shows trends of successful authentication events across wired and wireless clients per 5 minutes per hour based on the selected time. It automatically refreshes every 10 minutes.

-
Alerts—This displays the total number of alerts for the selected time period, including the most up to date number of Security, Infrastructure, and Marvis alerts. In the graph, you can see what types of alerts occurred at a specific point in time.

-
Events—This displays the total number of current infrastructure and client events for the selected time period. The graph is updated via API and the UI refreshes every 10 minutes.

Firmware Overview
The firmware section provides a detailed breakdown of device firmware deployments segmented by device type, firmware version, and hardware model. Network engineers and IT administrators can use the firmware section to monitor firmware consistency, identify upgrade opportunities, and ensure optimal performance across wireless infrastructure.

You can also click on the number in the Device Count column to see a pop-up window which includes device information such as device name, MAC address, and the Site that the device belongs to.
