customized reports for netflow data

I noticed the canned reports available for Netflow, but I was looking for more customized reports. Is it possible to run a report on a specific IP address for a specific timeframe?  We are looking at maybe using Netflow as a security tool that we could reference if there are questions as to what a user was accessing.

Thanks.

--AJ 

 

 

Andy,

I took a look at the Endpoint and it shows the last 2 hours.  Is there a way to change that so I could go back to a specific time, like 8 hours previous and see what that particular IP was talking to?

Thanks 

 --AJ 

 

 

Andy,

 

With the netflow I have I see the "Top 25 Conversations" then underneath "Last 2 Hours".  I dont seem to have a drop down option , but there are buttons to the right for "EDIT" and "HELP".  The "EDIT" is to change the number of items displayed.  Am I in the right place?

--AJ 

 

I have a related question... how can I search for a particular conversation? If I search for just one end of the conversation, say 10.1.1.1, it returns way too much information. Can I see just the conversation between 10.1.1.1 and 10.2.2.2? Or better yet, 10.1.1.0/24 and 10.2.2.0/24?