Is it possible to create an alert if a conversation is detected from or to a certain country or countries?
Not currently, but there is already work underway on building out the infrastructure to support flow-based alerting in performance-friendly way.
Can you describe exactly how you'd like to set up the alert so I can capture this use-case? For example, would you want to specify a particular source node or interface?
I know this is a narrow minded use-case but there are certain countries that our sites should NOT be communicating with. If one of these countries is detected by NetFlow I want to be able to send an email alert, ring bells, spin around and make the sun rise.
Is that enough or do you need more?
Nope, that's perfect.
BTW, making the sun rise might be a challenge, but I'll make sure dev at least looks at it.
Having netflow variables in other alerts would be awesome too.
IE If an alert goes out for high utilization on a circuit and you could insert a variable for the netflow top talkers on it.
