Vantage Points

A vantage point is an Riverbed AppResponse system (data source) that can be used to scope which Riverbed AppResponse data the runbook can query in runbooksClosed An automated workflow that executes a series of steps or tasks in response to a triggered event, such as the detection of anomalous behavior generating an incident, a lifecycle event, or a manually executed runbook.. When you have more than one Riverbed AppResponse system connected to your tenant, the Vantage Point filter lets you restrict queries to a specific system or to the system that reported the anomaly, which keeps runbook results relevant and avoids mixing data from different locations. The list of available vantage points comes from the Riverbed AppResponse data sourcesClosed A product in your network that forwards data to the system. This data can be streaming data used to detect anomalies and generate incidents, or data that can be fetched on demand when runbooks are executed. configured for your tenant. See Data Sources page and Adding a Data Source.

The Vantage Point filter is available in a runbook only when an Riverbed AppResponse data source is present and the runbook uses an Application or Location triggerClosed A set of one or more indicators that have been correlated based on certain relationships, such as time, metric type, application affected, location, or network device.. You configure it in the Data Store node (and in other data-query nodes that support the data source filter). When the platform creates an incident from a specific Riverbed AppResponse system, it shows that system on the Incident Details page as the vantage point that reported the indicator.

Vantage Point options

In the runbook editor, when the Vantage Point (data source) filter is available, you can choose one of the following:

  • No Filter: The query may use all Riverbed AppResponse systems (and in some cases Riverbed NetProfiler or other data sources, depending on the query).

  • All Vantage Points: The query may use all Riverbed AppResponse systems. No other data source types are included.

  • Specific Vantage Points: Select one or more Riverbed AppResponse systems. Only those systems are queried.

  • Vantage Point From Trigger: The runbook queries only the Riverbed AppResponse system associated with the anomaly that triggered it.

Runbook output when multiple systems are queried

If the runbook queries more than one Riverbed AppResponse system and the runbook outputClosed A document containing data sets generated by the execution of a runbook, including output of queries and reports from point products, as well as output of analysis or other runbook nodes. is a table, a dropdown appears in the output so you can filter by vantage point. By default it shows all vantage points. You can select a single vantage point to narrow the data. For other visualizations (for example, pie, bar, or line chart), the runbook output shows data from one Riverbed AppResponse system at a time.