cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to aggregate Software services type TCP Port or UDP port ?

jean_louis_lorm
Dynatrace Pro
Dynatrace Pro

Hello,

I need to aggregate this type of software services : UDP Port or TCP Port.

Is there a threshold or a specific configuration to avoid the type of software service when the activity is low ? I need this type of software service only for the high activity.

3 REPLIES 3

chris_v
Dynatrace Pro
Dynatrace Pro

On the AMD (check the global configuration), the 'port finder' can be disabled entirely, and you'll end up with software services you define only. Or you can change the packet threshold before a new port number software service is created.

Something sensible like 1,000 packets is a good place to start, adjust higher/lower as needed for you're particular environment.

Thanks for sharing the trick, @Chris! 🙂

ulf_thornander3
Inactive

Salut @Jean-Louis Lormeau

Looking at the size of the SS makes me wonder if there has been some port scanning going on in that network. Typically long ranges of ports with similar volume could indicate something along those lines.