For example, how could I setup SA to watch firewall traffic and if certain port activity goes beyond a certain percentage based over the last x number of days, to alert me. Just looking for basic trending setup information....
Currently, you cannot do that type of alerting. It is a feature candidate for a future release.
View solution in original post
can CEP do that?
Does anyone have a "work around" that they use for similar functionality? Like dumping reports to a spreadsheet or access-type database?
