topic Re: Data Utilization Dashboard in Dashboards & Visualizations

Data Utilization Dashboard

ravikanthbadugu — Thu, 02 Apr 2020 09:09:16 GMT

Hello All,

How we can get the stats of Internet Data Utilization by multiple Users for Different time periods.

Re: Data Utilization Dashboard

HiroshiSatoh — Thu, 02 Apr 2020 09:29:57 GMT

What do you specifically want to do?

For example, is this App helpful?
It can be used if the log supports the data model.
https://splunkbase.splunk.com/app/2699/

Re: Data Utilization Dashboard

ravikanthbadugu — Thu, 02 Apr 2020 10:24:03 GMT

We have users working remotely I want to know how much internet data each user is consuming for doing their work for different time periods.

Re: Data Utilization Dashboard

ravikanthbadugu — Thu, 02 Apr 2020 11:58:05 GMT

index=xyz Source=abc earliest=@d+09h latest=now |stats latest(PacketsReceived) as PacketsReceived,latest(PacketsSent) as PacketsSent by LoggedInUser | convert num(PacketsReceived) as PacketsReceived,num(PacketsSent) as PacketsSent| eval TotalB=PacketsReceived+PacketsSent |search LoggedInUser!=root|search LoggedInUser!=admin

using this query we want output for 3 different timelines. , one is fromyesterday 9:30 am to today 6:30 Pm and today 11:30 am to 6:30 pm and today 9:30 am to 11:30 am

Re: Data Utilization Dashboard

cmerriman — Sat, 04 Apr 2020 01:36:13 GMT

Are timezones an issue for this search? You could just create an eval statement that says if _time is between certain hours to mark it as one time period, and so on.