Quick question for everybody -- where do you think it's better to monitor your interfaces: at the switch, or on the host itself? Or does it even matter?
My experience is seeing quicker response on the host itself. It seems to kick off an alert faster and more accurately for root-causes. Also, we rarely have failures at the switch.