Home
Guardian
User Guide
Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
Time machine
Time machine
Time machine lets you load a snapshot, which is a previously saved state, and go back in time, to analyze the data from a past situation. You can load a single snapshot and use the platform as usual or load two snapshots and compare the user interface to highlight changes.

Guardian
- Introduction
  An overview of Guardian.
- Installation Guide
  Information and resources on how to install Guardian, and the different options and settings that are available.
- Administrator Guide
  Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
- User Guide
  Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
  - Sensors
  - Alerts
  - Assets
  - Queries
  - Smart Polling
  - Arc
  - Network
  - Process
  - Reports
  - Assertions
  - Time machine
    - Time machine
      Time machine lets you load a snapshot, which is a previously saved state, and go back in time, to analyze the data from a past situation. You can load a single snapshot and use the platform as usual or load two snapshots and compare the user interface to highlight changes.
      - Time machine diffs
        You can use time machine to view diffs between historical snapshots, or an historical snapshot and the current live view.
      - Load a snapshot
        To create a diff, you must first load a snapshot.
      - Request a diff
        The time machine lets you create a diff between to historical snapshots, or a snapshot and the current view.
      - Reload the diff operation progress
        Diff operations can take a long time to conclude. While an operation is in progress, you can continue to use the software as normal.
      - View a diff from an alert
        This automatic feature will use the previous and subsequent snapshots according to the time of the alert.
  - Vulnerabilities
  - Administration
  - Personal settings
- Maintenance Guide
  Information about the maintenance tasks of Guardian, to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for Guardian.

Time machine

Time machine lets you load a snapshot, which is a previously saved state, and go back in time, to analyze the data from a past situation. You can load a single snapshot and use the platform as usual or load two snapshots and compare the user interface to highlight changes.

Time machine page — Figure 1. Time machine page

Reload

If you initiate a diff and then navigate to another area of the software, when you return to this page you might not see the progress of the diff. The Reload button lets you either:

Reload the progress bar (if the diff is still in progress)
View the results (if the process has finished)

Exclude frequently changing fields

You can select the Exclude frequently changing fields toggle to on to exclude the fields that change frequently. This excludes the diff all fields that are affected from normal traffic handling. Examples of frequently changing fields are the number of bytes received / sent, and the last activity time.

Diff

The Diff button starts the diff process. The system evaluates the diff baseline - target files and estimates how central processing unit (CPU) / memory intensive the diff operation is going to be. If there is not enough free memory at the moment, the diff will be aborted with the appropriate message. If the diff is estimated to take more than a few minutes, a warning will show and a confirmation dialog will show.

Live

The LIVE button lets you choose the current view as part of the diff.

Step forward

The step forward icon lets you go back to the present time view after you have viewed a snapshot.

Live / refresh

The Live icon lets you change live view on, or off. When live mode is on, the page will refresh approximately every five seconds.

Load snapshot

The load snapshot icon lets you select a historical snapshot.

Select for diff

The select for diff icon to choose the related snapshot as part of the diff.