By default the command fw ctl multik print_heavy_conn will show all current and past elephant/heavy flows that were detected on the security gateway in the last 24 hours. Questions:
1) Is there any way to tweak the 24 hours to some longer value?
2) Any way to keep some kind of historical log file of these elephant flows, even if it is just some kind of simple text file log on the gateway?
Thanks!
Attend my 60-minute "Be your Own TAC: Part Deux" Presentation
Exclusively at CPX 2025 Las Vegas Tuesday Feb 25th @ 1:00pm