is there a best practise way for a meaningful real time network interface performance counter or network perfmon to show network performance or a general best practise guide for network performance queries in splunk 6.5.7