Alarms that occurred during Time Window specified are visible as indicators in the NetFlow Module within the Top talker table. For example, we can see below alarms for Facebook Traffic by hosts.

Alarms that have an arrow to the right are active alarms (trigger condition is still active). Number of alarms showed in Alarms column represents a total number of triggered events for selected Time Window. Color of this label is determined by the triggered alarm with the highest severity.