Here is a example of want we are trying to achieve. as you can see the screen shot below. the link capacity is 1G. and there was a spike of 300+ Mbps, which was a attack to one of our users. How can we capture such incident as a alert.
Clik here to view.
