I am looking to trigger an alert that sends me an email when a specific device's conversation meets a threshold of another node's interface. For example:
Server ABC is my target device. It talks to a lot of other servers at any given time, across the LAN and WAN.
Node ASA is my WAN network node, with a 1Gb inside interface.
I want to know when server ABC is having a large conversation with any other device on my network, AND that conversation is taking up 20% of ASA's interface speed.
I do not want to alert just on ABC's interface, because it often has conversations on the LAN and does not interfere with ASA's interface.
How would I configure an alert to do something like that?
Thanks in advance!