Find computers that are causing data spikes

[JordanCN]

Occasionally we have an issue where every minute or two a user/device will have a huge spike in bandwidth for just a second or two.  Even though we have our VoIP devices on a separate VLAN and QoS configured these spike can cause some noticable issues.

What is the best way to find a user/device that is causing the spike for brief moments.  I tried to using the data usage history, but it does not appear the culprit is using all that much data all together. 

[ww]

I dont know exactly.  You could look at the traffic analytics around the time of the problem, but that wouldnt solve your problem.

You have to set max client limit for the data vlan way below the max wan bandwidth.

Also make sure your voip devices mark the traffic with dscp EF themself so that mx would use the low-latency queue

[alemabrahao]

You can enabletraffic analysis as well

Network -> General

Afterwards, under Clients you can see which applications/https content etc. were used and by clicking on "Youtube" you can see which device used it and how much bandwidth was used by the device.

https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting

[PhilipDAth · Accepted solution]

I tend to use Wireshark when I get horrible ones like this.  Perform a capture over a period when this is happening, and then look at the graphs in Wireshark and what was generally happening.

[Crocker]

+1 for wireshark/packet captures for this. Meraki's traffic analysis leaves much to be desired when digging into specific bandwidth spikes. Much better to gather up the raw packets and use Wireshark's analysis tools to figure out your top talkers (and what they're talking about).