You search for a destination domain if you have a specific interest of the location where people on your network are going to services on the Internet.


For example, you may want to identify IP addresses connecting to AmazonAWS.


Insight Analytics Search Flow Query Box


This search returns a list of source IP addresses connected to AmazonAWS at the time you executed the search:


Insight Analytics Flow Destination Domain Search Results Upper Dashboard


Insight Analytics Flow Destination Domain Search Results Middle Dashboard


Insight Analytics Flow Destination Domain Search Results Middle Dashboard


Insight Analytics Flow Destination Domain Search Results Bottom Dashboard


You search for specific source IP addresses. For example, srcip 10.34.30.5, returns the information:


Insight Analytics Flow Search Source IP Search


You display the list of connections and details:


The device with that specific IP address is going to the destination IP address 10.a.b.c, 10.x.y.z using the application HTTP or HTTPS which indicates connecting to the Internet using a Web browser.


These are just some examples of searching for specific information about your network. The search engine is very powerful and simple to use. It also accepts Boolean queries as well.


And as with the Dashboard, you drill down into the Connections Timeline by highlighting a section that seems important and then displaying the relevant information.


As you drill down, the timespan becomes smaller and smaller allowing you to pinpoint specific times that there is a lot of activity or no activity.