Submit a ticketCall us
Home > Success Center > Netflow Traffic Analyzer (NTA) > NetFlow Traffic Analyzer Getting Started Guide > Identify consumers of interface bandwidth > Identify consumers of interface bandwidth using alerts

Identify consumers of interface bandwidth using alerts

NTA Getting Started Home

Updated: March 14, 2017

Many network performance issues are caused by high bandwidth utilization.

You can address these situations proactively with SolarWinds NTA by modifying out-of-the-box alerts. The High Receive Percent Utilization with Top Talkers and High Transmit Percent Utilization with Top Talkers alerts trigger when the percent utilization of an interface rises above 75%. You can adjust the threshold value and configure the alert to send an email to you.

The following scenario assumes that bandwidth capacity is a concern of yours, and walks you through how to identify top talkers that are consuming bandwidth. The information in these examples help you determine if top consumers of interface bandwidth are using resources for business purposes (and therefore need to add capacity), or if you should block top talkers.

For more information about alerts, see the NPM Getting Started Guide. You can also create your own alert on bandwidth utilization with custom trigger conditions and actions. For more information about creating customs alerts, see the NPM Administrator Guide.

Change the threshold for Top Talker alerts and identify bandwidth consumers

The High Receive Percent Utilization with Top Talkers and High Transmit Percent Utilization with Top Talkers alerts are out-of-the-box and sent from SolarWinds NPM, which help you monitor the bandwidth utilization. For more information about alerts, see the NPM Getting Started Guide.

The Top Talker alerts use a default utilization threshold of 75%.

According to your internal business guidelines regarding bandwidth utilization, you want to be notified when bandwidth utilization exceeds 70%.

When the utilization exceeds 70%, you can configure an email notification.

The following example shows you how to take the High Receive Percent Utilization with Top Talkers alert, and duplicate and edit it to change only the trigger condition.

  1. Click Alerts & Activity > Alerts.
  2. Click Manage Alerts.
  3. In the Group By field, select Trigger Actions Type.
  4. In the Group By field, select Email a Web Page.

    File:Success_Center/Reusable_content_-_InfoDev/NTA/NetFlow_Traffic_Analyzer_Getting_Started_Guide_Reuse/0070-Identify_consumers_of_interface_bandwidth/0010-Introduction_to_the_scenario/managealerts_emailawebpage_620x360.png

  5. Select the High Receive Percent Utilization with Top Talkers alert.
  6. Click Duplicate & Edit.
  7. Under Enabled, turn the alert On and select how often the trigger condition should be checked.

    File:Success_Center/Reusable_content_-_InfoDev/NTA/NetFlow_Traffic_Analyzer_Getting_Started_Guide_Reuse/0070-Identify_consumers_of_interface_bandwidth/0010-Introduction_to_the_scenario/nta_alert_enabled_frequency.png

  8. On Trigger Condition, change the utilization percent to 70.

    File:Success_Center/Reusable_content_-_InfoDev/NTA/NetFlow_Traffic_Analyzer_Getting_Started_Guide_Reuse/0070-Identify_consumers_of_interface_bandwidth/0010-Introduction_to_the_scenario/nta_alert_triggercondition_threshold70.png

  9. On Time of Day, schedule when to run the alert.
  10. Complete the Trigger Actions and Reset Actions panels as necessary.

    If there are endpoint-centric resources on the Interface Details page when it is captured for a top talker alert notification, the links to those resources are non-functional in the email. The information in the alert notification is not customizable.

    File:Success_Center/Reusable_content_-_InfoDev/NTA/NetFlow_Traffic_Analyzer_Getting_Started_Guide_Reuse/0070-Identify_consumers_of_interface_bandwidth/0010-Introduction_to_the_scenario/nta_alert_action.png

  11. Review the Summary, and click Submit.

Identify top talkers when the interface bandwidth utilization alert triggers

This scenario assumes that you have created an Orion alert on bandwidth utilization for a specific interface, and that the alert has been triggered when interface bandwidth utilization reached 70%. You investigate the top talkers after this alert triggered.

  1. When you click the link in the alert email, you are redirected to the NetFlow Interface Details for Alerts page in the Orion Web Console, and to the interface that triggered the alert.

    File:Success_Center/Reusable_content_-_InfoDev/NTA/NetFlow_Traffic_Analyzer_Getting_Started_Guide_Reuse/0070-Identify_consumers_of_interface_bandwidth/0010-Introduction_to_the_scenario/interfacedetailsforalerts_610x450.png

  2. Review the Top 5 Endpoints resource. You notice that endpoint 1e100.net (YouTube) is consuming a majority of your bandwidth.

    File:Success_Center/Reusable_content_-_InfoDev/NTA/NetFlow_Traffic_Analyzer_Getting_Started_Guide_Reuse/0070-Identify_consumers_of_interface_bandwidth/0010-Introduction_to_the_scenario/topendpointsresource_610x689.png

  3. In the Top 5 Endpoints resource, click on the endpoint to navigate to the details.
  4. Review the Top 5 Conversations resource and identify the individuals that are consuming bandwidth.

    The following example shows a considerable amount of utilization on the Ethernet1 WAN (NetFlow) interface of the Internet Gateway 3725 node.

    File:Success_Center/Reusable_content_-_InfoDev/NTA/NetFlow_Traffic_Analyzer_Getting_Started_Guide_Reuse/0070-Identify_consumers_of_interface_bandwidth/0010-Introduction_to_the_scenario/interfacedetailsview.png

 

After you set alerts that help you identify consumers of interface bandwidth, you can monitor bandwidth utilization using Flow Navigator for creating custom traffic views directly from any NetFlow view. These custom filters allow you to view specific statistics about your entire network and its devices without having to navigate through the web console by single-device views.

Last modified
04:06, 3 Apr 2017

Tags

Classifications

Public