Alert for traffic abrupt change

I'm not aware of a way of doing this natively.

You could either change the warning and critical alerting thresholds for a particular interface and base an alert on this, or simply specify an alert that fires when the interface transmit/receive goes over a particular % usage.

Bitrate may not be restricted top or bottom. it can vary smoothly from 0 to 100% and it is normal behavior. But drastic changes, increase ro decrease, of bitrate in less than few minutes may indicate faults in the network, when node's rechability is normal.

kirill_a I believe that the current limitations of alerting for NTA traffic/events will not allow you to achieve this. Perhaps head over to the NetFlow Traffic Analyzer Feature Requests page to make a suggestion.

And this is now available in General Release as NTA version 4.5!

Specifically - you can alert when an application appears - or is dropped from - the TopN query by interface.

You can check out the Release Notes, download the new release on the Customer Portal, and get all the help they need with the upgrade at the Success Center.

joer