customized reports for netflow data

I noticed the canned reports available for Netflow, but I was looking for more customized reports. Is it possible to run a report on a specific IP address for a specific timeframe? We are looking at maybe using Netflow as a security tool that we could reference if there are questions as to what a user was accessing.

Thanks.

--AJ

Find more posts tagged with

Accepted answers

All comments

mcbridea

Hi AJ,

Just use the Search NetFlow Endpoint resource.

Andy

trek_1701

Andy,

I took a look at the Endpoint and it shows the last 2 hours. Is there a way to change that so I could go back to a specific time, like 8 hours previous and see what that particular IP was talking to?

Thanks

--AJ

mcbridea

Happy Monday AJ,

Just to the left of the "Last 2 Hours" click on the down arrow and select whatever time period you want.

Andy

trek_1701

Andy,

With the netflow I have I see the "Top 25 Conversations" then underneath "Last 2 Hours". I dont seem to have a drop down option , but there are buttons to the right for "EDIT" and "HELP". The "EDIT" is to change the number of items displayed. Am I in the right place?

--AJ