WAN utilization report

You can start with the attachment.  copy it an place it in your reports directory and open the file with the Orion Report Writer.

Normal path for the report Directory = C:\Program Files (x86)\SolarWinds\Orion\Reports

The report uses the Interface caption of "Wan" to filter the results.

the report will give you a report that show the last 24 hours and if a interface goes over 80% on receive or Xmit.  if you can find a way to make it only report if it hits the 20 min mark, add it.

you will need to take this report and run the report scheduler in order to get daily reports.

Thanks gunner2510 for your help!

I added the report and modified it a bit for testing (lowered the utilization % and set the filter to filter on machine type contains Cisco)

When i preview the report in Orion Report Writer I see exactly what i need but when i run the report from our orion web interface I get no results.

Any idea what i'm missing?

That is a good one. Since it is the same report and the same database, I would look at an IIS issue. can you see other reports in the website?

all other reports seem to be working.

for the new report I get the headers of the report but below that I get "No activity to report"

I fixed this issue by unchecking the "group historical data by day" box on the general tab. 

Great. I was racking my brain for a fix.

any idea how i could limit the results to only display the interface 1 time with it's highest % utilization (above 80%) instead of listing each time it went above 80%?

As is an offending interface is listed 50+ times which makes the report hard to read.

I am not finding an easy way to create that report. I’ll keep trying

I am not finding an easy way to create that report. I’ll keep trying

i have an alert going out when an interface is at 80% utilization for 20min.

Would it be easier to make a report that just shows each time that event was triggered?

Yup. The easiest way would be to take the Premade Report- Triggered Alerts- Last 30 Days, and filter the message for whatever your event log message says at the start and limit it to 7 days.