This is hard to word, so please bear with me.
Have any of you built a LibreNMS alert rule to alert on port utilization changing beyond a trend? IE: 50% more than the previous week.
My goal is to catch ports that have anomalous traffic levels, even if they aren’t x& of the interface. A port that normally peaks at 100 megs each day now uses 500 megs one day is an anomaly that needs to be investigated, even if the port isn’t full (for some definition of full, the default rule is 80%).