Implemented

Alerting: Reduction in Traffic

I would like to have access to an alert that shows when a flow falls below a threshold.

As part of this alert, one would define a specific service, and minimum traffic threshold (possibly also source and destination).

Ideally, this alert could be given time thresholds, both for duration of condition, and hours of operation.

This would be useful in cases where a single interface provides a variety of services to a variety of endpoints, and could be use to indicate a service that is not performing as expected (or if the inverse alert was available, that the service was being used in excess of expectations).

To take this even further....these alerts could be dynamic, and alert when a service shows a increase or decrease of X% as compared to the trending usage during the previous X time period (preferably this time period could be limited to certain hours of the day).