Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Organization Insights (BETA)

Investigate issues affecting sites, devices, clients, tunnels, alerts, events, and firmware for your Mist organization.

Find the Org Insights

Go to the Insights page. By default, the Site Insights page displays. Select the drop-down menu and select Entire Org. In the top right corner of the page, select Trends.

Network monitoring dashboard showing metrics: Wireless success rate 66 percent, Wired 97 percent, WAN 91 percent; 8 impacted sites; alerts for connectivity failures and rogue APs; graphs for 103 clients, 43 devices; authentication and tunnel data over time.

You can select a time frame for which you want to view the data. To do so, select the drop-down menu at the top of the page and select the desired time frame.

Dropdown menu for selecting a time range with options like Last 60 Min, Last 24 Hr, and more. Today is selected with a yellow BETA tag.

Organization Client Experience

This section displays real-time statistics outlining client experience and impacted sites.

Dashboard interface monitoring network client experience; shows success rates: Wireless 68 percent, Wired 86 percent, WAN 94 percent. Highlights 6 impacted sites out of 20, 4 impacted devices out of 47, and 3 operational Mist Edge Tunnels. Includes tabs for navigation and filtering options; labeled BETA.

  • Overall SLE Health—This displays the overall SLE health across Wireless, Wired, and WAN clients. The SLE health score is calculated by considering a subset of the most actionable SLEs within each. There is also a shortcut in each widget you can use to jump to those Insights pages.

  • Active Sites—The Active Sites count inidicates the number of sites in service and lists the sites that have had client activity in the past 7 days. This count also tells you the number of sites in your org that had client activity in the past 7 days. The breakdown provides you with the number of sites with optimal (represented in green) or sub-optimal (in red) SLEs for the subset of SLEs in each domain. This is refreshed every minute minute.

    Select the red portion of the bar to bring up the list of Impacted Sites with sub-optimal SLEs. This displays the impacted SLE and the success percentage.

    Dashboard showing Wireless tab of Impacted Sites with three entries: wan-vsrx-hub AP Health 0 percent, wan-srx_hub Successful Connect 0 percent, sdwan_toronto Successful Connect 0 percent.

  • Devices—The Devices count provides insight into the total number of active devices (active in the last 14 days) and a further breakdown of connected and disconnected devices at an organization level.

    Click the red portion of the bar to open the list of disconnected devices per device category.

    Network management interface showing 7 disconnected access points listed by name, site, and MAC address, with sites like sdwan_westford and Live-Demo. Also mentions 1 Mist Edge, 0 Switches, and 0 WAN Edges status.

  • Mist Edge Tunnels—This count provides insight into the total number of tunnels configured for Mist Edges. If you click the red portion of the bar, the breakdown provides insight into the tunnels that are configured but currently disconnected.

  • Top Alerts—This section displays the alerts with the highest impact, effectively reducing alert fatigue. The following alert types can be displayed in this list:

    • Marvis Action

    • AP Loop Detected event

    • WAN Edge/Switch DHCP Pool Exhausted

    • Critical Switch Port Up/Down

    • Critical WAN Edge Port Up/Down

    • EVPN Detected Duplicate MAC Address

      Top alerts from Marvis for Live-Demo site: AP offline on Sep 11 at 2:49 PM, DNS failure on Sep 29 at 12:00 AM, authentication failure on Sep 29 at 12:00 AM, DHCP failure on Sep 29 at 12:00 AM, ARP failure on Sep 29 at 12:00 AM.

Network Activity Overview

These graphs provide high-level insights into network activity. The data visualizations reflect system status and usage patterns over a selected time period. The graphs are updated via the API and WebSockets.

  • Clients—This graph reflects the most up to date number of clients per wired and wireless assurance. The numbers are updated every minute via WebSockets. The graph itself displays client connectivity for wireless and wired users and automatically refreshes every 10 minutes. It may take up to 5 minutes for the graph to indicate a major drop in trends.

    Network usage graph showing 99 total clients, with 32 wireless and 67 wired. Timeline spans 1 AM to 4 PM. Highlighted time Sep 16, 1:05 PM - 1:10 PM, shows 90 clients connected. Pink area represents wired connections and blue area represents wireless connections.

  • Devices—The most up to date number of cloud connected wired, wireless, and WAN devices are displayed. These numbers are updated every minute through WebSocket, and can take up to 5 minutes before indicating a major drop in trends. The graph itself shows device cloud connectivity for access points, switches, WAN Edges and Mist Edges. It automatically refreshes every 10 minutes.

    Dashboard displaying status of 45 network devices: 17 APs, 10 Switches, 15 WAN Edge, 3 Mist Edge. Timeline graph shows consistent device counts from 1 AM to 4 PM.

  • Authentications—The current rate of successful authentication events across wired and wireless clients are shown. These numbers are updated every minute through WebSockets. The graph itself shows trends of successful authentication events across wired and wireless clients per 5 minutes per hour based on the selected time. It automatically refreshes every 10 minutes.

    Line graph showing network authentications from 12 AM to 4 PM. Wireless authentications are 9, wired are 4. Activity increases after 12 PM.

  • Alerts—This displays the total number of alerts for the selected time period, including the most up to date number of Security, Infrastructure, and Marvis alerts. In the graph, you can see what types of alerts occurred at a specific point in time.

    Dashboard displaying 211 alerts categorized as Security 128, Infra 79, and Marvis 4. Bar chart shows alert distribution from 12 AM to 4 PM.

  • Events—This displays the total number of current infrastructure and client events for the selected time period. The graph is updated via API and the UI refreshes every 10 minutes.

    Bar chart showing 156 events over 24 hours. Infra category in blue has 2 events. Client category in pink has 154 events, increasing sharply after 1 PM and peaking at 3 PM.

Firmware Overview

The firmware section provides a detailed breakdown of device firmware deployments segmented by device type, firmware version, and hardware model. Network engineers and IT administrators can use the firmware section to monitor firmware consistency, identify upgrade opportunities, and ensure optimal performance across wireless infrastructure.

Dashboard displaying firmware versions with device counts and a selected Access Points tab. Lists access points with connected device metrics and progress bars. Tabs for monitoring other network components are visible.

You can also click on the number in the Device Count column to see a pop-up window which includes device information such as device name, MAC address, and the Site that the device belongs to.

Table labeled AP Firmware listing access points LD_Conf2 and LD_Marvis with MAC addresses 04:cd:c0:23:47:6f and 04:cd:c0:d2:09:b3, both associated with site Live-Demo.