Data Feeds and Assigned Filters
- Last Updated: April 5, 2026
- 1 minute read
- Flowmon Products
- Flowmon Anomaly Detection System
- Documentation
Rules for data feeds and assigned filters that are associated with a method instance:
-
The method instance must be assigned to at least one data feed. Assigned filters are optional except for some detection methods.
-
The method instance is always processing only the data from assigned data feeds.
-
Data from a single data feed is processed alone, the classifiers based on these data are also kept separately for each data feed and each instance of a method.
-
The assigned IP address filter restricts the data according to the source or destination IP addresses.
-
Certain methods may generate events from IP addresses that fall outside the assigned filter scope. This happens when the event targets themselves are included in the filter. Each method implements filter behavior differently, with specific details provided in the respective method documentation.
-
There is no need to use the IP filter if all data from the current data feed satisfies this filter.
-
It is better to not use any filter instead of using the filter with all IP addresses.
-
Some of the detection methods need to have a filter assigned to achieve better performance.