# Flow Specifics ### Overview Flow provides visibility of Applications running on the network, showing top sources and destinations, plus top conversations for each. Detail is shown for each completed hour. {% hint style="info" %} Highlight can collect Flow data from compatible devices such as Cisco, Juniper, or Riverbed. {% endhint %}
Flow chart
### Flow colour coding Colour coding applies to all sections on the Details page except Traffic Trend and Traffic Analysis (Flow and NBAR). There are no targets for Traffic Analysis data and thus it does not impact any heat tile colours. The indicator will always be green for today and grey for any week, month or any day other than today. ### Flow Detail - Top Applications/Top Talkers Once configured a Traffic Analysis (Flow) section will appear at the bottom of the Details page. The dialog displays the top 20 hosts/applications (plus others grouped together) with outbound traffic on the left, inbound on the right. {% hint style="info" %} The settings will be remembered when you next log in. {% endhint %} #### Applications/Hosts Applications: Displays the top 20 applications (plus others grouped together) running across the selected link Hosts: Displays the top 20 hosts (plus others grouped together) sending across the selected link Conversations: Displays the top 20 conversations (plus others grouped together) either sending or receiving traffic (only data table view available, not graph) #### Graph/Data table Switch between graphical and text views of the information using the buttons provided. Display results for the current time period (as selected in the time bar at the top of the page). Show the top 20 hosts/applications (plus others grouped together) either sending or receiving traffic. Graph: Displays bar charts, as shown above, note: graphs are not available for conversations Data table: Displays text and has the option to break the data down further (by hour on a day view, day on a week view and week on a month view) #### Today only 24 hour: Displays the full day Last hour: Displays 6 segments of ten minutes each. If auto-refresh is on or the page is refreshed, the segments will shift to show the most recent with the oldest segment disappearing from the graph or data table. The times shown will adjust if the time zone is changed. #### Graph only Hover over each coloured section to see the percent of total traffic used by that host/application during the selected time period. The host/application name is also indicated in the list. Uncheck a host/application to remove it from the graph, check only those of interest **Show all / Top 5:** When there are more than five applications/hosts, toggle this button to show all or limit the list to the top five highest percent usage options. The buttons are not shown for fewer than five applications/hosts. #### Data table only Zoom in to display results for a specific time period. e.g on a day view, click 08 to display information accumulated for the hour from 8:00am to 9:00am. ### Flow Detail - Data table edit **User permission:** Only users with permission **Manage applications** can make changes to an application or host name, which will be visible to all users. **Locations affected:** Changes to an application name or host name will impact all locations in the same folder. To make name changes affect a wider range of locations, set the top level folder as [an application domain in Edit Folder on the Features tab](https://support.highlight.net/help/admin/create_tree#edit_a_folder). When **Data table** is selected, you can edit the name of an application or host/IP using

In the example GIF, the IP Address is changed to display as salesforce

Start the editStore changes, both the OUT and IN name will be updatedCancel changes Any change to Flow host or application names is recorded in Reporting, Audit Log ### Flow Detail - Conversations Conversations: This option displays the top 20 conversations (plus others grouped together) either sending or receiving traffic (only data table view available, not graph) With **Data table** selected for applications or hosts, there is a further option to view a list of the top ten conversations involved with the entry. #### By Application If you clicked when looking at an application such as email, you'll see the ten busiest pairs of hosts using this application - in each case one inside your network, one outside it - along with the volume and percent of traffic each has created. #### By Host If you clicked when looking at a particular host system, such as a server, you'll see the top ten other systems this host is talking to and the application being used in each case. Highlight also lists the volume of data and percent being generated by each. If the name of the host has been edited, then the original name will appear in the top line of the Window as **Host Name.** ### Flow Retention Highlight will normally keep top 20 information for 12 months and detailed conversation information for 93 days. ### Flow Reporting Reporting for Flow in Highlight is a technical listing extracted from the [Admin Watch report](/reporting/admin-reports/watch-report.md), which can be very useful as a means of identifying Flow watches that are no longer reporting. Alternatively, [contact us](/getting-started/contact-us.md) for customised Flow reporting options. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://help.highlight.net/details/bearers-traffic-analysis/flow-specifics.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.