Netflow reports

Couple of questions

Reports
1) I want to provide to my management a combination report. When Opmanager reflects high utilization for a site I would like to trigger a Netflow report showing top talkers both source and destination as well as protocol being used. Can this be done?

2) There are some sites that are always going to be on the top talker list..i.e. (the hub in a hub and spoke network or Internet connection) is there a way not to include them in the top talker list but still collect the data on the initial splash screen?

3) Are there any ties into ISA or Websense to gain greater detail automatically for what websites are being visited and causing high bandwidth utilization. Today I loose time piecing it all together?

4) Looking at the Hub location when pulling reports I see the COS markings are correct for what is coming in but the out markings are incorrect. Meanwhile I check at the remote location the in shows the correct tags but out again does not. I do have a theory that Netflow only shows the in but I need a confirmation and ideally for the correct markings to be shown.

I have more but this is my first post and want to keep it some what manageable.