How to alert when interface traffic increase x Mbps in y Minutes?

Question

"x" means delta amount of bps.

This is very useful for no-business time abnormal traffic alert. The whole day abnormal traffic alert threshold is useless for this situation. Only a delta value threshold in a given time period can make it works, and also applicable for business time abnormal traffic alert.

blue0o0 · Answer

Thanks for your help. I would try to find out the custom SQL alert solution. Is there anyone familiar with SQL can give me some advise or example?

chad.every · Answer

There isn't anything out of the box that would allow for this type of an alert. The Orion platform is built with performance monitoring in mind and your request seems more security focused. However, if you or any one else in your company is good at SQL then you might be able to leverage a custom SQL alert, but that is a highly customized route.