Receiving logs from x hosts is +1 more than the Top Sources
Posted: Wed Jan 21, 2015 9:36 pm
On my main dashboard I see:
That's only 4 Hosts.
Am I correct in assuming that the message "Receiving logs from 5 hosts" is detecting the localhost "127.0.0.1 and 0:0:0:0:0:0:0:1" and counting both, where as the "Top Sources and Types dashboard" is smart enough to count them as 1?
If that's not the case, how do I determine what all 5 hosts are?
When I open the Top Sources and Types dashboard I see:Receiving logs from 5 hosts.
Code: Select all
Term Count
10.25.6.51 362991
10.25.1.254 119833
10.25.2.1 23380
0:0:0:0:0:0:0:1 15843 Am I correct in assuming that the message "Receiving logs from 5 hosts" is detecting the localhost "127.0.0.1 and 0:0:0:0:0:0:0:1" and counting both, where as the "Top Sources and Types dashboard" is smart enough to count them as 1?
If that's not the case, how do I determine what all 5 hosts are?