Hello
Using NTA 3.8. In the context of being Alerted when a user download / upload a considerable amount of data within a time frame (say during last 15 min), we need to know about that to immediately preserve the shared bandwidth for Company business traffic.
The "Top Talker Advanced Alerts" built-in Alert is meant for an interface that exceeds a Threshold BUT we need more granularity, in the sens of creating a similar Alert that tells which end point (Top Receivers / Transmitters) user exceeded a Threshold ( Thershold could be a quota of data within last 15 min or just a percentage of the bandwith).
Ingress/ Egress traffic per end user
Most probably, it requires Advanced ALert with SQL query , which Table(s) ? Any help ?
Thank you