OK so I have taken over management of a bunch of network gear at a separate location. This site is plagued with unicast storms and broadcast storms. Currently the logs are full of unicast storm alerts. The threshold is set for 70.50 which I believe means if unicast storm activity is above 70.5% then filter traffic. Looking at Orion I am not seeing traffic utilization jump high enough to show any traffic went over 70% of available bandwidth (100 Mbps). I am pulling stats every 2 mins currently. My thought is that I am missing the burst of traffic. I am looking for a way to have Orion get an alert when the storm start and when it finishes. Can anyone help with how to do this?
