Martin Scheu

+1 !

Thanks @lucaderi We have Clickhouse version: 22.4.5.9

good decision!

What is the difference to the Check "Unexpected Device Connected" ?

How can we manage devices past the learning period? Alerting new devices is good, but then if it is a new device I add on purpose, I need to be...

is the standard ntopng installation with mirror port

yes, source is Suricata

@cardigliano my setup is ntopng and surricata installed on the same host. I don't think surricata is generating so many log entries. Normal traffic:  Syslog interface added:  and...

ok thanks @cardigliano would be nice to have it :-)

I have `13/03/2024 01:40:49 - 11/04/2024 14:52:59` so above example might be out of the window. (didnt it give a error message in such case?) I tried with `last week`...