Open for Voting

Top talker optimization retention time

There is a "Top talker optimization" setting which discards flows in order to not save unnecessary data.

Instead of discarding a set percentage of all low bandwidth flows when received by NTA, I would like to discard the data at a later time.

I would like to save 100% for the first day or week and then after that discard 10% or more.

This would make it possible to both do forensics on current problems and create top talker reports spanning longer periods.