I am working on my first custom report and hope I not chosen anything too difficult. We are about to add 100+ remote users to an in house application. The users telnet to the server where the application resides and work interactively from there. I am trying to create a report for one of our "power" users to get a base line for usage. I will then use these results to verify capacity and the additional load at the remote locations.
I have the user's IP address/host name and can search netflow endpoint to filter down to just this specific user. When I go thorugh the search results, Orion shows my 4506 Core switch with several interfaces. I am just not sure where to proceed from here. Do I use the interface of the users VLAN or the server or does it matter?
Suggestions?
