https://community.splunk.com/t5/Getting-Data-In/Visualize-netflow-in-splunk/m-p/237885#M46209 <P>Hello guys I get network traffic logs in splunk the structure is: </P> <P>2016-11-24 10:59:50,2016-11-24 10:59:50,0.000,xxx.xx.xx.4,xx.xx.xxx.xx3,65499,389,UDP,......,0,0,0,0,0,0,13,17,0,0,0,0,0,0,0.0.0.0,0.0.0.0,0,0,00:00:00:00:00:00,00:00:00:00:00:00,00:00:00:00:00:00,00:00:00:00:00:00,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0, 0.000, 0.000, 0.000,xxx.xx.xx.x7,0/0,1,2016-11-24 10:59:50.402</P> <P>How can I visualize how much traffic we have everyday?</P> Thu, 24 Nov 2016 14:01:05 GMT nickbijmoer 2016-11-24T14:01:05Z https://community.splunk.com/t5/Getting-Data-In/Visualize-netflow-in-splunk/m-p/237885#M46209 <P>Hello guys I get network traffic logs in splunk the structure is: </P> <P>2016-11-24 10:59:50,2016-11-24 10:59:50,0.000,xxx.xx.xx.4,xx.xx.xxx.xx3,65499,389,UDP,......,0,0,0,0,0,0,13,17,0,0,0,0,0,0,0.0.0.0,0.0.0.0,0,0,00:00:00:00:00:00,00:00:00:00:00:00,00:00:00:00:00:00,00:00:00:00:00:00,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0,0-0-0, 0.000, 0.000, 0.000,xxx.xx.xx.x7,0/0,1,2016-11-24 10:59:50.402</P> <P>How can I visualize how much traffic we have everyday?</P> Thu, 24 Nov 2016 14:01:05 GMT https://community.splunk.com/t5/Getting-Data-In/Visualize-netflow-in-splunk/m-p/237885#M46209 nickbijmoer 2016-11-24T14:01:05Z https://community.splunk.com/t5/Getting-Data-In/Visualize-netflow-in-splunk/m-p/237886#M46210 <OL> <LI>Extract field with data size per session, for example "trafic_size" </LI> <LI>Extract other fields (ip, port, e.t.c.)</LI> <LI>Select the time period for which you want to count traffic </LI> <LI>Calculate your traffic:<BR /> your search | stats sum (trafic_size) OR calculate your traffic by ip: your search | stats sum (trafic_size) by ip</LI> </OL> Tue, 29 Sep 2020 11:56:57 GMT https://community.splunk.com/t5/Getting-Data-In/Visualize-netflow-in-splunk/m-p/237886#M46210 kalianov 2020-09-29T11:56:57Z