I am looking for a way to get SolarWinds to track the number of times that two endpoints have initiated conversation.
To put it a different way, is there a way see how many times two devices have, for example, transferred files?
It is easy to find the total size of the transfers, but that isn't really what I am looking for?
Is there a module that does this, or a report that I can set up?
Thanks for your help
I think you're looking for a sweet query and output, but all I have to offer is the option of changing the time frame to include the dates you're interested in. By default you'll probably only see the activity for the last 15 minutes, but you can set custom times or dates in NTA and go back as long as you keep records. Just check the Absolute Time Option in NTA to set the "From" and "To" times.
It's in the Netflow tab, the Conversations link in the upper left, and then on the far upper right it's the small blue square box with the white down-arrow in it, next to "Last 15 Minutes":
If you DO happen to find that sweet query place, please respond with it in the comments, or mention me in it. I like the sound of it!
Swift packets!
Rick S.
If you are running a ftp software that writes to the logs, all the data will be there but how do you find it. The answer is LEM.
With Log and Event Manager you can find the log files for the transfer and see who sent what to whom and when.
Its as easy as a Google search with built in nDepth search tool in LEM.
There is even a FTP traffic filter in Monitor.
RT
Of course the FTP traffic will have to traverse an interface that is setup for Netflow. If so you want to narrow it down further use the Applications tab under Flow Navigator and select 21 File Transfer.
You will not get file names but you will get bytes transferred and approximate times.
