After the latest update lots of our sensors (predominately switch ports) have all changed to unusual status, even though traffic hasn't changed at all , it occurred as soon as the server started up again after the update , affects multiple different switches / devices.
looking at the history graphs / tables i can see no change in data throughput, in fact many are at a constant <0.1Mb as they are not in use , these are also indicated as unusual.
I adjusted the threshold that indicates 'unusual' traffic but this made no difference even when set to the highest fluctuation tolerance - then only way to get rid of teh status is disable 'unusual' detection - however if it can work correctly i would like to keep unusual detection enabled.
umm , help ?
Any advise appreciated, thanks
Add comment