The NSX Intelligence user interface provides several graphic elements to help with the visualization of the data center entities, traffic flows, and certain activities in your NSX-T Data Center environment.

The following table lists a glossary of NSX-T Data Center graphic elements that you might see in a NSX Intelligence visualization.

Graphic Element Description


This icon represents a group, which is a collection of VMs where security policies, including East-West firewall rules, can be applied. See Working with the Groups View.


This icon represents a virtual machine (VM) that is part of your NSX-T Data Center. A VM can belong to more than one group. See Working with the VM View.


This icon represents the public IPs in the Internet. If at least one VM in your NSX-T Data Center environment communicated with a public IP during the selected time period, that traffic flow is included in the current visualization.


An IP address, such as a unicast, broadcast, or multicast IP, that participated in the network traffic activities during the selected time period.


This icon is used for the group of VMs that do not belong to a group.


An arrow represents a network traffic flow that occurred between two VMs during a selected time period. There are three different types of arrows: a dashed red-hued arrow for an Unprotected flow, a solid blue-hued arrow for a Blocked flow, and solid green-hued arrow for an Allowed flow. See Working with Traffic Flows.


A node that has been selected as the current node in focus is surrounded with a dashed circle. It is the pinned node during the selection mode and the current view being displayed.


This icon appears on a group node's border if the group was added in the NSX-T Data Center inventory during the selected time period. If NSX-T Data Center discovered a VM during the selected time period, the icon appears on that VM node's border.


This icon appears on the group node's border if the group was deleted during the selected time period and the VM members were not deleted. On a VM node's border, this icon indicates that the VM was deleted during the selected time period. Although, a VM or group has been deleted, it still appears in the current visualization to give a historical view that the VM or group was removed during the selected time period.


This icon appears whenever we see group and VMs together. For example, in a deep dive groups view or related VMs of a group.
The icon appears on a VM node's border in the following cases.
  • if the VM was moved out of the currently viewed group during the selected time period
  • if, at some point during the selected time period, the VM was part of the group you are currently viewing, but it is no longer a member of that same group