I am learning swql trying to figure out how to determine what clients are using the bandwith within the time interval that is set for the top XX conversations.
I have this query:
SELECT f.SourceIP, f.DestinationIP, f.Bytes, f.totalbytes, f.timestamp, AddHour(-6,f.timestamp) as ourtime,
f.ingressbytes, f.destinationipgroupsegmentid, f.interfaceidrx, f.interfaceidtx, i.interfacealias, n.nodename
FROM Orion.Netflow.Flowsbyconversation f
inner join orion.npm.interfaces i on f.interfaceidrx = i.interfaceid
inner join orion.nodes n on n.nodeid = i.nodeid
WHERE
f.TimeStamp > '2017-05-11 07:00:00' AND f.TimeStamp <= '2017-05-11 17:05:00'
and n.nodename='switchname'
and f.sourceip='xx.xx.xx.xx'
and f.destinationip = 'yy.yy.yy.yy'
What i cant figure out is how the interface figures out the transfer rates when you mouse over the timeline, thats the value Im looking to determine.
Is there someplace solarwinds documents how to get that number? or better yet anyone have a query that shows how to do it.
More info: what i am looking to figure out is which windows clients to not have their BITS rate limiting set (GPO policy) as those computers are using a large portion of the WAN pipe downloading windows updates from the WSUS server.
thanks