An integrated view

Thinking out aloud:

Netflow consoles given an accurate view of traffic but a few overlays are required to create an integrated view...

• An overlay of the times of the expanded incident lifecycle of a major incident.
• An overlay of key word occurrence in logged incidents at the service desk. Thus the word slow should appear as a high occurence during congestion, the application name should appear as a high occurence when users experience service degradation, etc.
• An overlay of change windows and changes.
• An overlay of abnormal deviations on IPSLA measurements.
• An overlay of log counts from network or security devices.