A network administrator receives frequent complaints about slow application performance during mid-morning hours. When she checks the monitoring dashboard, current utilization looks high, but she has no reference to determine whether these levels are normal for that time of day. Which practice should she implement to accurately identify future deviations from normal network behavior?