Home
CMC
Learn how CMC provides centralized visibility and monitoring of Nozomi Networks sensors.
User Guide
Information and resources about the main features of the Central Management Console (CMC), and the tasks that you can do from the user interface (UI).
Queries
You can use the Nozomi Networks Query Language (N2QL) syntax to create complex data processes to obtain, filter, and analyze lists of information from the Nozomi Networks software.
Commands
Nodes-specific commands reference

CMC
Learn how CMC provides centralized visibility and monitoring of Nozomi Networks sensors.
- Introduction
  An overview of the Central Management Console (CMC).
- Installation Guide
  Information and resources on how to install the Central Management Console (CMC), and the different options and settings available.
- Administrator Guide
  Information and resources about the Administration section of the Central Management Console (CMC), and the tasks that you can do in this part of the software.
- User Guide
  Information and resources about the main features of the Central Management Console (CMC), and the tasks that you can do from the user interface (UI).
  - Sensors
    The Sensors page lets you view all of the sensors that you have in your system.
  - Alerts
    The Alerts page shows all the latest alerts in the system. It lets you view the alerts in different modes, and carry out actions on the alerts.
  - Assets
    The Assets page shows all the physical components and systems in the local network environment and their associated details. It also lets you perform actions on those assets. Depending on the nodes and components involved, assets can range from a simple personal computer to an operational technology (OT) device.
  - Queries
    You can use the Nozomi Networks Query Language (N2QL) syntax to create complex data processes to obtain, filter, and analyze lists of information from the Nozomi Networks software.
  - Smart Polling in CMC
    The Smart Polling page gives you a read-only view of Smart Polling.
  - Arc in CMC
    Arc™ is a host-based sensor that detects and defends against malicious or compromised endpoints, and insider attacks. You can use Arc sensors to aggregate data for analysis and reports, either on-premises, or in the Vantage cloud.
  - Reports
    The Reports page lets you manage, generate, schedule and view reports.
  - Assertions
    The Assertions page shows all the assertions and lets you configure them.
  - Vulnerabilities
    The Nozomi Networks software continuously discovers vulnerabilities in monitored assets.
  - Administration
  - Personal settings
    The personal settings page lets you do actions that are specific to your profile.
  - Troubleshooting
- Maintenance Guide
  Information about the maintenance tasks of Central Management Console (CMC), to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for the Central Management Console (CMC).

Nodes-specific commands reference


Syntax	`where_node <field> < ==\|!=\|<\|>\|<=\|>=\|in?\|include?\|exclude?\|start_with?\|end_with? > <value>`
Parameters	field: the name of the field to which the operator will be applied operator value: the value used for the comparison. It can be a number, a string or a list (using JSON syntax), the query engine will understand the semantics.
Description	The where_node command will send to the output only the items which fulfill the specified criterion, many clauses can be concatenated using the boolean OR operator. The where_node command is similar to the where command, but the output will also include all the nodes that are communicating directly with the result of the search. Note: This command is only applicable to the nodes table.


Syntax	`where_link <field> < ==\|!=\|<\|>\|<=\|>=\|in?\|include?\|exclude?\|start_with?\|end_with? > <value>`
Parameters	field: the name of the links table's field to which the operator will be applied. operator value: the value used for the comparison. It can be a number, a string or a list (using JSON syntax) the query engine will understand the semantics.
Description	The where_link command will send to the output only the nodes which are connected by a link fulfilling the specified criterion. Many clauses can be concatenated using the boolean OR operator. Note: This command is only applicable to the nodes table.


Syntax	`graph [node_label:<node_field>] [node_perspective:<perspective_name>] [link_perspective:<perspective_name>]`
Parameters	node_label: add a label to the node, the label will be the content of the specified node field node_perspective: apply the specified node perspective to the resulting graph. Valid node perspective values are: roles zones transferred_bytes not_learned public_nodes reputation appliance_host link_perspective: apply the specified link perspective to the resulting graph. Valid link perspectives are: transferred_bytes tcp_firewalled tcp_handshaked_connections tcp_connection_attempts tcp_retransmitted_bytes throughput interzones not_learned
Description	The graph command renders a network graph by taking some nodes as input.