2013-11-13 03:35 PM
For example, how could I setup SA to watch firewall traffic and if certain port activity goes beyond a certain percentage based over the last x number of days, to alert me. Just looking for basic trending setup information....
2013-11-13 03:59 PM
Currently, you cannot do that type of alerting. It is a feature candidate for a future release.
View solution in original post
2013-11-13 08:02 PM
can CEP do that?
2013-12-05 03:10 PM
Does anyone have a "work around" that they use for similar functionality? Like dumping reports to a spreadsheet or access-type database?
