What problem does it solve?
Network events are scattered across syslog, SNMP traps, flow records, and streaming telemetry, making it hard to see the full picture of network health or investigate incidents that span multiple data sources.
Core Features & Use Cases
- Unified Receiver Orchestration: Coordinates four telemetry receivers (syslog on UDP 514, SNMP traps on UDP 162, IPFIX/NetFlow on UDP 2055, gNMI on TCP 57400) through their respective MCP servers.
- Multi-Source Incident Investigation: Correlates syslog errors, linkDown traps, flow anomalies, and real-time gNMI interface state around a specific incident window.
- Device Onboarding Guidance: Provides Cisco Catalyst 9300 configuration snippets for syslog, SNMP traps, IPFIX export, and gNMI to onboard devices to monitoring.
- Use Case: When a network issue is reported at 3pm, query syslog for errors, check SNMP traps for link events, analyze flows for traffic anomalies, and subscribe to gNMI for live interface state, all from one workflow.
Quick Start
Start all telemetry receivers on their default ports and show me a summary of network health from every source.