NOC View — SYNOTI

Active Alerts

24

3 critical · 7 high

Security Events

148

last 24h · 12 sources

Events / min

9.2

1.4 vs yesterday

Self-Heal Rate

~90%

auto-recovered

Core Services

synoti-core

CPU

42%

MEM

51%

synoti-core-worker

CPU

33%

MEM

44%

synoti-postgres

CPU

28%

MEM

62%

synoti-redis

CPU

12%

MEM

38%

synoti-kafka

CPU

46%

MEM

55%

synoti-prometheus

CPU

31%

MEM

47%

synoti-clickhouse

CPU

58%

MEM

71%

synoti-admin

CPU

8%

MEM

22%

synoti-web

CPU

5%

MEM

18%

synoti-chatops

CPU

14%

MEM

26%

synoti-backup

CPU

2%

MEM

12%

synoti-probation

CPU

11%

MEM

21%

wazuh-manager

CPU

63%

MEM

74%

wazuh-indexer

CPU

71%

MEM

82%

snmp-collector

CPU

19%

MEM

34%

Incident Timeline · 24h

Live Topology

Live Incidents

ID	Severity	Title	Status
INC-32418	Critical	Ransomware activity on mail-01	Contained
INC-32417	High	Anomaly detected: system — phy-08	Investigating
INC-32416	High	SSH brute force from 203.0.113.45	Open
INC-32415	Medium	[WARNING] HighDiskIOWait on 10.0.12.13:9100	Investigating
INC-32414	Critical	Service down: www-02	Contained

Security Events Feed

Failed SSH brute force — 203.0.113.9

12:04:11

FIM: /etc/shadow modified — mysql-01

12:02:47

Port scan detected — 198.51.100.7

11:59:03

Sudo attempt as root — ws-21

11:52:19

IOC match: SILVER-APT — ws-05

11:47:55

Alert Queue

Ransomware behavior blocked on mail-01 CRITICAL

Playbook PB-041 auto-contained host

2m

High CPU on app-02 HIGH

Auto-remediation playbook PB-031 triggered

6m

SSH brute force from 203.0.113.45 HIGH

16 attempts · source blocked by firewall

18m

Disk I/O pressure on ch-02 MEDIUM

IO wait 71% · queries slowing

31m

Workers

general-01Online1,284

general-02Online1,212

health-01Online976

health-02Online901

agent-01Online1,540

agent-02Online1,488

core-workerOnline2,113

chatops-botOnline342