Forum

I'd say a baseline is what's needed to continuously monitor a network. If you're going to monitor something you have to know at what point you wanted to be alerted of a 'significant event'. Without having a baseline analysis your alert could be configured improperly and you'll start getting alerts-a-plenty! :) ...yeah, I've made that mistake before.

Basically, the goal here is to continuously monitor against some sort of baseline analysis. Also, as your applications and users change on your network, so therefore should your baseline. i.e. keep your baseline up to date.