solarwinds  |  thwack
in
Search 44,481 posts and 621 resources contributed by 21,475 members or post a topic.

Already Joined? Sign in
customized reports for netflow data

rated by 0 users
Not Answered This post has 0 verified answers | 6 Replies | 3 Followers


6 Posts
Points 18
trek_1701 posted on 08-15-2008 3:34 PM
rated by 0 users

I noticed the canned reports available for Netflow, but I was looking for more customized reports. Is it possible to run a report on a specific IP address for a specific timeframe?  We are looking at maybe using Netflow as a security tool that we could reference if there are questions as to what a user was accessing.

Thanks.

--AJ 

 

 

  • | Post Points: 3

All Replies


359 Posts
Points 798
Moderator
SolarWinds Employee
mcbridea replied on 08-15-2008 3:42 PM
rated by 0 users

Hi AJ,

Just use the Search NetFlow Endpoint resource.

Andy

Andy McBride Product Manager SolarWinds
  • | Post Points: 3

6 Posts
Points 18
trek_1701 replied on 08-18-2008 9:03 AM
rated by 0 users

Andy,

I took a look at the Endpoint and it shows the last 2 hours.  Is there a way to change that so I could go back to a specific time, like 8 hours previous and see what that particular IP was talking to?

Thanks 

 --AJ 

 

 

  • | Post Points: 3

359 Posts
Points 798
Moderator
SolarWinds Employee
mcbridea replied on 08-18-2008 10:09 AM
rated by 0 users

Happy Monday AJ,

 Just to the left of the "Last 2 Hours" click on the down arrow and select whatever time period you want.

Andy

Andy McBride Product Manager SolarWinds
  • | Post Points: 3

6 Posts
Points 18
trek_1701 replied on 08-18-2008 11:35 AM
rated by 0 users

Andy,

 

With the netflow I have I see the "Top 25 Conversations" then underneath "Last 2 Hours".  I dont seem to have a drop down option , but there are buttons to the right for "EDIT" and "HELP".  The "EDIT" is to change the number of items displayed.  Am I in the right place?

--AJ 

 

  • | Post Points: 3

359 Posts
Points 798
Moderator
SolarWinds Employee
mcbridea replied on 08-18-2008 12:42 PM
rated by 0 users

Are you on 3.0? If so can you attach a screen shot?

Andy McBride Product Manager SolarWinds
  • | Post Points: 3

11 Posts
Points 27
jswan replied on 08-19-2008 12:35 PM
rated by 0 users
I have a related question... how can I search for a particular conversation? If I search for just one end of the conversation, say 10.1.1.1, it returns way too much information. Can I see just the conversation between 10.1.1.1 and 10.2.2.2? Or better yet, 10.1.1.0/24 and 10.2.2.0/24?
  • | Post Points: 1
Page 1 of 1 (7 items) | RSS