I have a low Internet bandwidth site (512KBps shared among several users) and I want to create a "Top Talkers" dashboard widget. I have two NGFW 2110s, in a high availability cluster managed by FMC.
I created a "Custom Analysis" widget on my FMC Dashboard. I selected:
Table = Connection Summary Data
Field = Initiator IP
Aggregate = Traffic (KB/s)
This gives me the kind of display I want, but unfortunately it's across all interfaces and our internal traffic beats the pants off the external traffic. How can I restrict the source data to one interface? Thanks in advance.
