Hi,
I have a switch with about 250 interfaces.
I can see that the switch uplink ports were very utilized a month ago, and I would like to pin point the server interface that caused this load.
what is the best way for me to do that with PRTG?
Article Comments
I would recommend either:
- a report of all the 250 sensors of the specific timeframe, then you can browse through the graphs visually.
- if it was "enough" to raise a visible peak in the graph, you could just open the device in PRTG, click on the 30 days or other interval and check those graphs for suspicious peaks.
- if you have unusual detection active, you could search the logs in the timeframe of the incident for the specific interface: Logs -> Status Changes -> Unusual and then filter for the timeframe. (not sure since which version this is available)
Apr, 2015 - Permalink
Another source of information is the Similar Sensor Analysis. Make sure this is enabled. It will go through already recorded historic data, and then show sensors with similar value-"curves" in the same time on the "Overview"-Page of a sensor.
Apr, 2015 - Permalink
I would recommend either: - a report of all the 250 sensors of the specific timeframe, then you can browse through the graphs visually. - if it was "enough" to raise a visible peak in the graph, you could just open the device in PRTG, click on the 30 days or other interval and check those graphs for suspicious peaks. - if you have unusual detection active, you could search the logs in the timeframe of the incident for the specific interface: Logs -> Status Changes -> Unusual and then filter for the timeframe. (not sure since which version this is available)
Apr, 2015 - Permalink