Can the Alert Reports sent from Alert Profile be adjusted?
We have recently deployed Netflow Analyzer and I have been playing with the Alert Profiles as being able to receive an emailed summary of what source & destinations are generating high traffic loads is a real time saver for us.
One thing I have noticed is that the report that is sent tries to cover a period 10 minutes before & 10 minutes after the event. This could be useful but most often the report is sent so quickly that there is no data for the 10 minutes after the event as that time period is yet to happen.
The other thing I have noted - and I suspect this is due to when the database writes happen - is that we can get an event triggered & the report emailed, but it will be missing the data from the time immediately prior to the event; the graphs will stop up to a couple of minutes before the event time-stamp.
My questions are:
Can you adjust the time period sent in the Alert Report so instead of being 10 minutes before & 10 minutes after the event it is say just the 15 minutes up to the time of the event?
Is there a way to delay the sending of the report so that it catches all of the data that triggered the Event?
One thing I have noticed is that the report that is sent tries to cover a period 10 minutes before & 10 minutes after the event. This could be useful but most often the report is sent so quickly that there is no data for the 10 minutes after the event as that time period is yet to happen.
The other thing I have noted - and I suspect this is due to when the database writes happen - is that we can get an event triggered & the report emailed, but it will be missing the data from the time immediately prior to the event; the graphs will stop up to a couple of minutes before the event time-stamp.
My questions are:
Can you adjust the time period sent in the Alert Report so instead of being 10 minutes before & 10 minutes after the event it is say just the 15 minutes up to the time of the event?
Is there a way to delay the sending of the report so that it catches all of the data that triggered the Event?