I would like to see the NetFlow Real-time have the capacity to capture more NetFlow data beyond 1 hour. I would like options similar to sniffer products I have used in the pass: Fix file size / buffer space, rolling file option, incrementing filename with maximum number of files.
We had a situation where different members of our team required netflow data for trouble shooting while we had to take Our Orion server down for some server work.
The one hour helped, but more would definietely have made the trouble shooting easier.
Later,
Dale