Baseline analysis allows short term and long term comparative analysis that can be performed on any and every element.
For example, interface/IP/Location/Application or a combination thereof for a particular period compared against a previous period. Comparative analysis of each element across the time line gives the ability to identify which element caused the change and when.
Baseline Alerting can then be activated to learn and watch traffic changes as is used extensively in Netflow Intelligent Baseline Anomaly Detection.