Faddom now allows you to compare the traffic of the port on a specific connection for two timeframes. This will assist you in performing root-cause analysis, identifying deviations from normal operations, and determining impacts.
For example, you can examine server connections before and after an anomaly, focusing on significant traffic changes. This could provide insight into what occurred and help you perform root-cause analysis.
For best results, it is recommended you set up Anomaly Detection and Notifications and Alerts so you can be notified when something happens.
To set up the investigation you need to do the following -
Find the server you are interested in either through Search or on one of the maps
Open the properties by left-clicking on the server
Either click on Anomalies or open up the full properties and select Investigate
Select the time stamps you want.
Note - how far you can investigate depends on how long you keep the topology history. By default, this is seven daysClick Go and you will be presented with the results to investigate