Hi, I have a switch with about 250 interfaces. I can see that the switch uplink ports were very utilized a month ago, and I would like to pin point the server interface that caused this load.

what is the best way for me to do that with PRTG?

Article Comments

Attention: This article is a record of a conversation with the Paessler support team. The information in this conversation is not updated to preserve the historical record. As a result, some of the information or recommendations in this conversation might be out of date.

I would recommend either: - a report of all the 250 sensors of the specific timeframe, then you can browse through the graphs visually. - if it was "enough" to raise a visible peak in the graph, you could just open the device in PRTG, click on the 30 days or other interval and check those graphs for suspicious peaks. - if you have unusual detection active, you could search the logs in the timeframe of the incident for the specific interface: Logs -> Status Changes -> Unusual and then filter for the timeframe. (not sure since which version this is available)


Apr, 2015 - Permalink

Another source of information is the Similar Sensor Analysis. Make sure this is enabled. It will go through already recorded historic data, and then show sensors with similar value-"curves" in the same time on the "Overview"-Page of a sensor.


Apr, 2015 - Permalink