Hi everyone, as the title says, I would like to know if it's possible (or if it is being worked on for future version) to set up an alert for NetFlow traffic, based on protocol or a single (indistinct) host, in such a way that if X traffic is done in the last Y minutes I can get a notify event.
As of now I'm only able to setup alerts if X traffic is done (or X% bandwidth is used) on an interface in the whole. This is not much useful since it lacks details. I would like to know when a single user (or a single protocol) causes a lot of traffic on a router, not everything that traverse through it. Is it possible?
Thank you.
