NTA offers Top Domains resource for such cases. By default it's on NetFlow Node Details view, but you can add it to NTA Summary to get summary data over all nodes. There's also possibility to filter any view by domain - using Flow Navigator you can add facebook.com Domain filter and you'll get the view filtered (e.g. to get endpoints communicating with given domain).
How you add the domain facebook.com to be monitored?