Can you please help me how can I match the trigger alert using netflow enabled interface only.
Thank you.
I also used this Custom SQL Alert below and it also works.
SELECT Interfaces.InterfaceID AS NetObjectID, Interfaces.FullName AS Name FROM Interfaces
INNER JOIN NetflowSources ON (NetFlowSources.InterfaceID = Interfaces.InterfaceID)
WHERE
(
(Interfaces.InPercentUtil > 75)
)
This should do it. This one looks for Outbps > 100000. You will need to adjust the threshold criteria accordingly.
