The NSX Intelligence user interface provides several graphic elements to help with the visualization of the NSX-T Data Center entities, traffic flows, and certain activities in your NSX-T Data Center environment.

The following table lists a glossary of NSX-T Data Center graphic elements that you might see in a NSX Intelligence visualization graph.

Graphic Element

Description

This icon is a circle with a light gray border. Inside the circle are four small squares, two squares on top of the other two. In between each square is a line to represent that they are connected in some way. See surrounding text for what the icon represents.

This icon represents a group on which security policies, including East-West firewall rules, can be applied. A group can be a collection of VMs, physical servers, or sets of IP addresses. See Working with the Groups View.


This is the icon used for a virtual machine (VM) that is part of your NSX-T Data Center. A VM can belong to more than one group. See Working with the Computes View.

Image is a screenshot of a circle with an icon for a physical server. Additional description provided in the text for the image's row.

This icon represents a physical server that is part of your NSX-T Data Center environment. A physical server can belong to more than one group. See Working with the Computes View.


This is the icon for the public IP addresses on the Internet. If at least one compute entity in your NSX-T Data Center environment communicated with a public IP address during the selected time period, that traffic flow is included in the current visualization.


This icon represents an IP address, such as a unicast, broadcast, or multicast IP address, that participated in the network traffic activities within your NSX-T Data Center environment during the selected time period.


This node icon is used for the group of compute entities (VMs, physical servers, or IP address sets) that currently do not belong to a group.

This is an image of a red-hued arrow with a dashed line.

This arrow represents a network traffic flow that occurred between two groups or compute entities during a selected time period. There are three different types of arrows.

  • a dashed red-hued arrow for an unprotected flow

  • a solid blue-hued arrow for a blocked flow

  • a solid green-hued arrow for an allowed flow

See Working with Traffic Flows for more information.

This is an icon for group node that is currently in focus. The icon is of a grey-hued circle that has a darker grey-hued perimeter. Inside the circle are four squares, two squares above the other two. In between the two squares is a small line connecting them. Around the circle is a dashed-lined circle.

A node that has been selected as the current node in focus is surrounded with a dashed circle. It is the pinned node during the selection mode and the current view being displayed.

This is an icon with a green-hued circle that has a white-lined open square. The square has a white-lined plus sign in it.

This icon appears on a group node's border if the group was added in the NSX-T Data Center inventory during the selected time period. If NSX-T Data Center discovered a new compute entity, such as VM or physical server, during the selected time period, the icon appears on that compute entity node's border.

This is an icon with a gray-hued circle that has a white-lined open square. The square has a white-lined minus sign in it.

This icon appears on the group node's border if the group was removed from the inventory during the selected time period. Its compute entity members might or might not have been deleted.

On a compute entity node's border, this icon indicates that the compute entity was removed from the inventory during the selected time period.

Although a compute entity or group has been removed from the inventory, it still appears in the current visualization graph to give a historical view that the entity was removed during the selected time period.

This is an icon with a blue-hued circle that has a white-lined open square inside it. The squeare has a white arrow that is pointing in the right-side direction.

This icon appears whenever we see a group and compute entities together. For example, in a deep dive groups view or related compute entities of a group.

The icon appears on a compute entity node's border after the compute entity was moved out of the current group that is being viewed. It appears on a compute entity's node border in the following cases.

  • if the compute entity was moved out of the currently viewed group during the selected time period

  • if, at some point during the selected time period, the compute entity was part of the group you are currently viewing, but it is now no longer a member of that same group

Red hexagon with white exclamation point

This icon appears on a compute entity node's border if the NSX Suspicious Traffic feature detected that the compute entity was part of a suspicious network traffic activity during the specified time period. See Detecting Suspicious Network Traffic in NSX-T Data Center for details.