Skip to main content
toperski
toperski
New Member
January 31, 2017
Question

Dataset for report containing topusers of top destinations

  • January 31, 2017
  • 1 reply
  • 4244 views

Hi,

 

I would like create a dataset that would query top destinations with corresponding top users per destination.

 

Please assist me in creating syntax for data set

 

Thanks in advance,

Toperski

    1 reply

    hzhao_FTNT
    Staff
    hzhao_FTNT
    Staff
    February 7, 2017

    Please try:

     

    Log type: traffic

    select coalesce(root_domain(hostname), ipstr(dstip)) as destination, coalesce(nullifna(`user`), nullifna(`unauthuser`), ipstr(`srcip`)) as user_src, sum(coalesce(`sentbyte`, 0)+coalesce(`rcvdbyte`, 0)) as bandwidth from $log where $filter and logid_to_int(logid) not in (4, 7, 14) group by destination, user_src  order by bandwidth desc

     

    create a chart based on this dataset:

    chart type: table

    Table type: drilldown

    Column1: destination

    column2: user_src

    column3: bandwidth

     

    Regards,

    hz

    toperski
    toperskiAuthor
    New Member
    February 20, 2017

    Hi hz,

     

    Thanks for the reply and that helped a lot. What parameter should I change to get the top 5 users for each top destinations?

     

    TIA,

    toperski

    hzhao_FTNT
    Staff
    hzhao_FTNT
    Staff
    February 20, 2017

    Please set "Drilldown Top" to 5.

     

    Regards,

    hz

    Terms & ConditionsAccessibility statement