For the complete documentation index, see llms.txt. This page is also available as Markdown.

Controller

This page is UNDER CONSTRUCTION

Create/Edit controller: common settings

Only users with the Edit watches permission can save changes to controllers. Other admin users can see the edit panel but not change any details.

Use Create new to create a new controller in the current folder.

Applicable to all controller types: Main

Status

Enabled or Disabled (red toggle). Disabling a controller disables all associated devices and watches, meaning Highlight stops collecting data.

Type

Options available below this field change for each supported vendor. Note: Type is set on creation and cannot be changed later. Supported types: Cisco Meraki, Cisco Thousand Eyes, Cisco Catalyst, Fortinet, Extreme Networks, ICMP Polling

Name

Required. Can contain a maximum of 100 characters.

Description

Optional. Can contain a maximum of 100 characters.

Alerting checkbox

Do not alert on subwatches if controller uncontactable

Unchecked by default. When checked, if this controller is uncontactable, no alerts are sent for associated uplinks, tunnels, performance tests, switches or wireless access points. When this is checked, the watch status card for subwatches and the heat tile also do not change colour to amber or red.

Watch creation radio buttons

Pending Setting Watch creation to Pending on the controller sets this option to Pending on all discovered devices. Any uplinks, tunnels, tests and switches on a device will NOT be created and are instead visible only on the Controllers Admin page. These will not gather data so cannot change the colour of a heat tile nor send an alert. Auto This is the default option. Any uplinks, tunnels, tests and switches on a device will be created as enabled and start gathering data. These may change the colour of a heat tile and send an alert if a measurement is below threshold. Find out more about Controller watch pending.

Auto create checkbox

Locations (checked) Checked by default. On save, automatically creates Highlight locations in the current folder based on location information in the controller, assigns each location an autodiscovered name, and places discovered devices and watches in the correct location. Locations (unchecked) If unchecked, all discovered devices and watches are placed in a single default location in the current folder. This location has the autodiscovered name Devices - Controller name. See the Controller locations section below for more details.


Applicable to all controller types: Settings

This option makes it possible to spread the load for polling controller-based watches across multiple agents.

Use the Poller drop-down to select the required agent or agent group. Any additional poller agents must previously have been assigned to the folder using Agent Selection from Edit Folder Main.

If you select the default poller or poller group, then if the default is changed at some point in the future, watches associated with this controller will use the new default poller or poller group.

The actual poller agent in use is shown under the drop-down box.

Changes made in controller dialogs are recorded in the Highlight Audit log.

Applicable to all controller types

Autodiscovery

Use Rediscover (only available on edit) to trigger a rediscovery of devices and features which may have changed on the external network. Rediscovery normally happens every 15 minutes.

The Rediscover button is disabled if:

  • The controller is disabled

  • Any settings on the panel have changed

  • It was recently clicked

Use Save to save any changes made.

Use Delete (only available on edit) to remove the controller from Highlight along with any previously autodiscovered locations, devices, watches and subwatches.

clock-three-thirty

Discovery of watches, devices and locations can take up to 30 minutes to appear in Highlight. Any changes on the external network, for example adding new locations/devices/watches, will also take up to 30 minutes to be synchronised to Highlight.



Controller locations

Autodiscovered name is auto-generated on creation of a controller. Autodiscovered names cannot be changed in Highlight. Autodiscovered names differ for supported vendors and use the following information:

Vendor
Autodiscovered name source

Cisco Meraki

Network name (updates if changed in the Meraki dashboard)

Cisco Thousand Eyes

API "countryId" tag on the device

Cisco Catalyst

"Site " followed by the Site ID

Fortinet

Device name

Location name initially matches the autodiscovered name but can be changed. The location name displays everywhere in Highlight instead of the autodiscovered name if it has been changed. Use the revert option to reset the location name back to the autodiscovered name.


Create/Edit controller: Cisco Meraki

API Key

Required. The API key can be edited after creation. Use the Test button (available once an API key is entered) to confirm the API endpoint is valid. Contact your Meraki administrator to obtain your API key details and for any testing issues.

Organisation

Required. Use the Please select drop-down to retrieve a list of all available organisations. Select one and Highlight will discover devices and watches in that organisation only. Organisations are not shown in the list if their networks are inaccessible. Note: the drop-down is shown in Create only. To select an alternative organisation once a controller has been saved, delete the controller and recreate it with the required organisation.

Discovered

Shows the number of SD-WAN devices/networks. This will auto-populate once an organisation is selected.

Dashboard

Display link Unchecked by default. If checked, a link icon is shown to the right of the Meraki logo at the top of the details page for any watches associated with this controller. When clicked, the device on the Meraki dashboard opens in a new tab. If not already logged in, users will need to enter their details.

Cisco Meraki discovery behaviour

Note the following on discovery of Cisco Meraki:

Interface or Device
Status in Meraki
Highlight action on discovery

Device

Dormant

Highlight won't discover any watches on a device with status dormant.

Interface

Down, Failed or Disconnected

If watch creation is set to Pending, Highlight discovers these watches in a pending state.

Interface

Ready

The watch is created with the Dormant flag set in Highlight (dormant interfaces only send stability alerts if the device is uncontactable or Highlight has detected that the underlying connectivity service is unavailable). Contact us to disable this option.

Meraki: SD-WAN

Uplink bearers

None

Do not discover any uplink bearers.

Enabled

Default. Highlight determines the up/down status of uplinks via the API. On save, Highlight automatically discovers and creates bearer watches for any active WAN interface in the location of the device.

Enabled with perf tests

On save, Highlight automatically discovers and creates uplinks in the location of the device as subwatches to the associated device and any connectivity performance tests are subwatches of their parent uplink.

Meraki VPN peer

None

Do not discover any tunnels or performance tests.

Tunnels

Discover tunnels only.

Tunnels with perf tests

Default. On save, Highlight automatically discovers and creates tunnels in the location of the device as subwatches to the associated device and any performance tests are subwatches of their parent tunnel.

Note: If changed to None after uplinks, tunnels and performance tests have been discovered, these will continue to work and can be manually disabled if needed. No new uplinks, tunnels or tests will be discovered.

Meraki: Cellular

Enabled

Discover cellular devices and cellular watches.

Enabled with Cellular Clarity

Discover cellular devices and cellular watches with Cellular Clarity enabled.

Meraki: WiFi

Set to Enabled to discover WiFi devices and access points.

Meraki: Switches

Enabled

Default. Discover switch devices and switch watches with up/down status (Stability) only.

Enabled with port detail

Discover switch devices and watches as above but with extra detail on individual ports and the option to set some as critical. Find out more about critical ports.

Meraki: IoT

Cameras: Set to Enabled to discover camera devices and camera watches.

Sensors: Set to Enabled to discover sensor devices and sensor watches.


Create/Edit controller: Cisco Thousand Eyes

Highlight only discovers the Performance Agent if Highlight supported tests exist. Tests currently supported are ICMP Ping and HTTP Server tests.

API Key

Required. The API key can be edited after creation.

Test

button

Available once an API key is entered, use to confirm the API endpoint is valid. Contact your administrator to obtain your API key details and for any testing issues.

Account Group

Required. Use the Please select drop-down to retrieve a list of all available account groups. Select one and Highlight will discover devices and watches in that account group only. Account groups are not shown in the list if their networks are inaccessible. Note: the drop-down is shown in Create only. To select an alternative account group once a controller has been saved, delete the controller and recreate it with the required account group.

Discovered

Shows the number of devices/networks. This will auto-populate once an account group is selected. Highlight only discovers the Performance Agent if Highlight-supported tests exist. Tests currently supported are ICMP Ping and HTTP Server tests.

Dashboard

Display link

Unchecked by default. If checked, a link icon is shown to the right of the Thousand Eyes logo at the top of the details page for any watches associated with this controller. When clicked, the device on the Thousand Eyes dashboard opens in a new tab. If not already logged in, users will need to enter their details. When Display link is checked, the name of each performance test on the performance agent details page is also a link to that test in the Thousand Eyes dashboard.

Thousand Eyes: Tests

ICMP Ping

None / Enabled

HTTP Server

None / Enabled

With Enabled selected, on save Highlight automatically discovers and creates the selected test watches in the location of the device.


Create/Edit controller: Cisco Catalyst

Hostname

Required. Can contain a maximum of 200 characters and either an IP address or DNS name. Optionally a port can be specified after a colon; otherwise, the default communication will be attempted on port 443.

Ignore certificate errors

Unchecked by default. Checking this option disables all certificate validation. This is a security risk and not advised.

User Name

Required. Can contain a maximum of 50 characters.

Password

Required. Can contain a maximum of 50 characters.

Cisco Catalyst: SD-WAN

Uplink bearers

None

Do not discover any uplink bearers.

API

On save, Highlight automatically discovers and creates devices and bearer watches in the location of the device. If watch creation is set to Pending, interfaces which are down, failed or disconnected are discovered in the pending state. If these watches are later enabled, they show as red in Highlight.

Cisco Catalyst VPN peer

None

Do not discover any tunnels or performance tests.

Tunnels

Discover tunnels only.

Tunnels with perf tests

Default. On save, Highlight automatically discovers and creates tunnels in the location of the device as subwatches to the associated device and any performance tests are subwatches of their parent tunnel.

Note: If changed to None after tunnels and performance tests have been discovered, these will continue to work and can be manually disabled if needed. No new tunnels or tests will be discovered.


Create/Edit controller: Fortinet

Hostname

Required. Can contain a maximum of 200 characters and either an IP address or DNS name. Optionally a port can be specified after a colon; otherwise, the default communication will be attempted on port 443.

Ignore certificate errors

Unchecked by default. Checking this option disables all certificate validation. This is a security risk and not advised.

User Name

Required. Can contain a maximum of 50 characters.

Password

Required. Can contain a maximum of 50 characters.

Admin domain

Required. Can contain a maximum of 100 characters.

Note: The Highlight Agent will need to trust the certificate presented by the FortiManager.

Fortinet: SD-WAN

Uplink bearers

None

Do not discover any uplink bearers.

WANs

On save, Highlight automatically discovers and creates devices and bearer watches in the location of the device. If watch creation is set to Pending, interfaces which are down, failed or disconnected are discovered in the pending state. If these watches are later enabled, they show as red in Highlight.

Fortinet VPN peer

None

Do not discover any tunnels or performance tests.

Tunnels

Discover tunnels only.

Tunnels with perf tests

Default. On save, Highlight automatically discovers and creates tunnels in the location of the device as subwatches to the associated device and any performance tests are subwatches of their parent tunnel.

Note: If changed to None after tunnels and performance tests have been discovered, these will continue to work and can be manually disabled if needed. No new tunnels or tests will be discovered.


Create/Edit controller: Extreme Networks

User Name

Required. Can contain a maximum of 50 characters.

Password

Required. Can contain a maximum of 50 characters.

Extreme: WiFi

Set to Enabled to discover WiFi devices and access points.

Create/Edit controller: ICMP Polling

Main

For ICMP Polling the following options are shown, read-only.

Field
Meaning
Default value

Packet size (bytes)

How many bytes are sent

32

Pings per device

How many pings for each device in the polling period

1

Ping threshold

How many pings must be returned within the threshold to count as a "good" sample

1

Stability threshold (ms)

In milliseconds, above this amount means the sample is "bad" and thus the device is Down

1000

Health threshold (ms)

In milliseconds, above this amount means the sample is "bad" and thus the device is Down

150

Poll interval

How often the results are collected and shown on the Details page chart

00:01:00

Example (using the defaults): If 10 IP addresses are uploaded for a given ICMP Polling controller, then, if every minute, Highlight will ping each of the 10 devices once, sending 32 bytes.

Results (for a given device in a single minute):

If the ping returns in 150ms or less, then the sample is good for both Stability and Health. The "fuel gauge" for this watch is incremented for both Stability and Health. A green line is drawn for that minute on the Availability (Stability) line and the Health line.

If the ping returns in greater 150ms and less than 1000ms, then the sample is good for Stability but bad for Health. A green line is drawn for that minute on the Availability line and a reb blip shows on the Health line.

If the ping returns in greater 1000ms, then the sample is bad for Stability and good for Health. A red blip shows for that minute on the Availability line and a green line is drawn on the Health line.

Devices

Use this section to upload the devices to ping. The CSV is limited to 1000 devices.

Download: To view the format of the file - or if one has previously been uploaded, to review or update it.

Upload: To load devices for this controller to ping, or to make edits to the existing list.

ICMP Polling Devices CSV example

CSV format

host
description
location

Mandatory. Can be an IP address in IPv4 format or a hostname. Duplicates are not allowed.

Optional. If included, Highlight uses this description as the device name and the watch description. Must be fewer than 100 characters.

Optional. If include, Highlight autogenerates the location and creates the devices and watches in it. Must be fewer than 100 characters.

Create/Edit controller: Cisco Webex

Bot name

Required. Must be generated and applied to all devices to be monitored. Refer to the Cisco Webex Bot Token guide.

Webex: IoT

Set to Enabled to discover all Webex devices. These might include televisions, cameras, microphones, speakers, and touch controllers, and other items.

Last updated

Was this helpful?