The NSX Intelligence visualization is composed of the groups or VMs and the network flows that occurred with those groups or VMs during the selected time period.

Important: The visualization shown for a specific time period represents all the network flows and activities, such as addition, deletion, or movement of VMs and Groups, that occurred in your NSX-T data center during that time period. It is possible that a VM appears more than once in the visualization. For example, if a VM was attached to an ESXi host that was originally unmanaged and the host becomes managed by a VMware vCenter Server™ during the selected time period, the VM appears twice in the VMs view. Similarly, if an ESXi host is disconnected from vCenter Server and added back during the same selected time period, the VMs attached to the host appear as both deleted and new during the selected time period. In Groups view, if a VM was in the Uncategorized group and added in a Group during the same selected time period, the VM appears in both the Uncategorized group and in its new Group.

NSX Intelligence supports Groups with VM member types only. If you have Groups with any other types of members, the Groups view might show correlated flows between the Groups with VM members types instead of actual Groups in the security rule.

Use the information in this section to learn more about working with the Groups view, VMs view, and the different traffic flows.