derhally

The following query gives you the TOP 5 applications for the last hour last hour based on total bytes. SELECT TOP 5 Flows.Application.Name, Flows.Application.PortName, SUM(TotalBytes) AS TotalBytes, SUM(TotalPackets) AS TotalPacketsFROM Orion.Netflow.FlowsWHERE Flows.ProtocolID IN (6, 17) AND Flows.ObservationTimeStamp >…

What version of NTA are you running?

If you are familiar with asp.net, we do have a "Query" webservice method that takes a query as a string parameter and returns a DataTable as a result. The path to the webservice is /Orion/Services/Information.asmx . This will use the identity of the current logged in user.

You may want to ask your question in the Orion NPM forum, this is the Orion EOC forum. :)