This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

search endpoint gives all IPs in range - data or not?

One of my co-workers was trying to find flows for a given subnet so I had them go to search by endpoint and put the subnet in.
It returned every IP in the subnet range, whether it had data flows or not.

I would think/request that when I put a range in like that, for a given time period, it would search the DB and return only IPs and flows for interfaces that have traffic.

thoughts/comments...SW?

thanks