I would like to have alerts sent with host name and IP with total of ingress traffic amount they are causing from web use when it hits a certain threshold. would anyone have a alert already configured that they would like to share?
You will need NTA to do this. You have to be able to monitor specific ports. NPM cannot do it alone.
You may be able to get similar information from the webserver side, but as Christoper says, if its more generic for given part of the network then you will need NTA to read the flow data.
