Does anyone one know if it is possible to modify the information retuned with the search by application / port in the NTA? I have been using the search feature quite a bit lately and was wondering if something like "last time" the search criteria was seen.
If I understand it right, the search looks through the entire database but it may have been weeks or months since the search criteria was last seen on a specific node / interface. One then has to go through each node / interface and play with the time frames to look at this detail information.
I am thinking it would make life simplier if there was somethig that listed the last date / time that the search criteria was discovered on a node / interface. If currently not possible, I think this would be a good feature request.
This is actually a common feature request. One of the things we're working on is the ability to perform global searches and filtered summary views. In this way, when you performed a search, you would get a filtered summary view that you could then drill-down to the relevant endpoints. See the what we're working on post Orion NTA – What we’re working on… for more details.