the alert you want is built-in in your NTA already. It is called High Receive Percent Utilization with Top Talkers/ High Transmit Percent Utilization with Top Talkers. It is capable of sending email with 5 minute snapshot of top entities for interface which triggered alert. Please check NTA admin guide:http://www.solarwinds.com/documentation/NetFlow/docs/NetFlowAdministratorGuide.pdf, page 103.
can you confirm if this is possible with NTA 4.0.3 or later? We are on 4.0.3, and i'm not getting any results on my first attempt. Just want to confirm that it should work, now that flow storage is in place for netflow.
choly is correct, there are 2 pre-canned alert for High Percent Utilization for both transmit and received. You may just modify the alert base on what element information you want to trigger (percent utilization or bandwidth).
I have NTA 3.11 all the way to 4.1, this alert is on it epenney (Advance Alert Manager).