In the predefined Dashboards especially in the "Top Sources and Types" is there any way to add also the hostname next to the displayed IP on the TOP HOSTS panel?
Thanx a lot.
Top Sources and Types Dashboard
Re: Top Sources and Types Dashboard
Certainly, but first we need to ensure that a 'hostname' or appropriate field exists.
Click on 'dashboards' and scroll down to the fields section, as identified by this screenshot:
Do any of those fields contain the 'hostname' data that you'd like to display? If not, we'll need to generate a new field that contains the information you will need to display.
Click on 'dashboards' and scroll down to the fields section, as identified by this screenshot:
Do any of those fields contain the 'hostname' data that you'd like to display? If not, we'll need to generate a new field that contains the information you will need to display.
You do not have the required permissions to view the files attached to this post.
Re: Top Sources and Types Dashboard
Yeap, hostname is there...
You do not have the required permissions to view the files attached to this post.
Re: Top Sources and Types Dashboard
The best way to accomplish this would be to create another 'Terms' panel for the 'Hostname' field instead of the 'Host' field. This would still display a count of events as your current panel does - I recommend setting the panels side-by-side for the sake of visibility. The reason that two columns cannot be displayed is because a 'count' operation cannot occur on multiple fields at the same time without confliction.
Re: Top Sources and Types Dashboard
Understood. Thanx for your help.
Pls close the thread.
Pls close the thread.