Lets say I want to answer the question:
What applications were in the Unknown status 5 hours ago?
How would I go about trying to answer that?
Finding unknowns, or something else from the live tables seems fairly straightforward, but I haven't the foggiest how to ask the database for time-based questions like this.
Noone's really asking this specific question, but often something historical comes up, and while those questions are decently easy to answer for single statistics in the UI it becomes a right faff when you're trying to look over a larger estate.
I'm avoiding perfstack at the moment, that's great for this sometimes but I'm looking to answer the questions where perfstack isnt appropriate
Also avoiding reports at the moment, though I have used specific timeframes in reports in the past. Though if that's just the method to use please say.
If there's a solid method for the above does it hold for volumes, interfaces, transactions, netflow, or are these all have separate techniques?
Is there a way to quickly change a query from asking about NOW to asking a question about some other time?
Do you have any solid methods, queries, elements, dashboards, etc for figuring out how an estate looked some time ago?
