After you activate Security Intelligence, by default, Security Intelligence collects network traffic data on all standalone hosts and cluster of hosts. If necessary, you can optionally stop data collection from a standalone host or cluster of hosts.

The Standalone Host section in the Data Collection tab in the System Settings > NSX Intelligence UI lists only the hosts that do not belong to a cluster and hosts that are not managed by a compute manager. The Cluster section lists all the clusters in your NSX environment.

You cannot deactivate or activate data collection for a single host that belongs to a cluster. You can only deactivate or activate data collection on the entire cluster to which that host belongs. When data collection is deactivated for a cluster, NSX Intelligence stops collecting data on all the hosts that belong to that cluster. Similarly, if data collection mode is activated on a cluster, NSX Intelligence starts collecting data on all the hosts that belong to that cluster.

If the data collection mode is deactivated for a standalone host and that host is added to a cluster whose data collection is activated, NSX Intelligence starts collecting data on that host after it joins that cluster. If a host moves from a cluster (with an activated data collection setting) to a standalone host, the data collection setting is retained in the now standalone host. If a standalone host has its data collection mode activated and it is added to a cluster whose data collection is deactivated, NSX Intelligence stops data collection on that host after it joins that cluster.

Prerequisites

  • Security Intelligence must be activated on NSX Application Platform. See Activate Security Intelligence.
  • You must have NSX Enterprise Administrator user privileges.
  • A valid license must be in effect for your NSX Manager session.

    For information on NSX licensing and adding a new license key in NSX Manager. See the License Enforcement topic in the NSX Administration Guide.

Procedure

  1. From your browser, log in with Enterprise Administrator privileges to an NSX Manager at https://<nsx-manager-ip-address>.
  2. In the NSX Manager UI, select System and in the Settings section, select NSX Intelligence.
  3. To manage traffic data collection for one or more hosts, perform one of the following steps.
    1. To stop traffic data collection, select the host or hosts in the Standalone Host section, click Deactivate, and click Confirm when prompted if you are sure.
    2. To start traffic data collection, select the host or hosts, click Activate, and click Confirm when prompted if you are sure.
    The system updates the Collection Status value for each affected host to Deactivated or Activated, depending on the data collection mode you had set.
  4. To manage traffic data collection for one or more clusters of hosts, perform one of the following steps.
    1. To stop data collection for one or more clusters, select the cluster or clusters in the Cluster section, click Deactivate, and click Confirm when prompted if you are sure.
    2. To start traffic data collection, select the cluster or clusters, click Activate, and click Confirm when prompted if you are sure.
    The system updates the Collection Status value for each affected cluster to Deactivated or Activated, depending on the data collection mode you had set.