Netflow filtering
For Netflow display, there are numerous filters available, including interfaces. We used this to show flows for each ISP connection at one location, but found the table to be empty most of the time for one ISP. Support went to dev and came back with this:
I'm advised that during data aggregation on the collector-side, we only display flows which are contributing to 95% of the Netflow traffic. I'm told that once we have the set of flows which together contribute to 95% of traffic, LM will paint this data in the UI. The rest of the 5% traffic flow is ignored in the UI.
I disagree this should be an expected behavior since the implication is that flows are reduced overall before filtering and that makes filtering effectively useless. Any such narrowing should be done based on the filters, then reduced for display in the UI. However, I was told this is not a bug but a feature request so I am posting in hopes it will be addressed sometime soon.