https://community.splunk.com/t5/Dashboards-Visualizations/Outbound-connection-Dashboard/m-p/488494#M31991 <P>Hello, Splunk newbie here. I've been researching this for several days trying several queries and I can't zero in on what I am looking for.</P> <P>I am trying to develop a dashboard that shows the top 20 internal IPs with,</P> <OL> <LI>highest # of connections</LI> <LI>longest connections</LI> <LI>sending the most data</LI> </OL> <P>Like I said, tried several different ways to get this but I can't seem to put all the pieces together.</P> <P>Thanks and much appreciated!</P> Fri, 20 Sep 2019 17:17:27 GMT grazingifre 2019-09-20T17:17:27Z https://community.splunk.com/t5/Dashboards-Visualizations/Outbound-connection-Dashboard/m-p/488494#M31991 <P>Hello, Splunk newbie here. I've been researching this for several days trying several queries and I can't zero in on what I am looking for.</P> <P>I am trying to develop a dashboard that shows the top 20 internal IPs with,</P> <OL> <LI>highest # of connections</LI> <LI>longest connections</LI> <LI>sending the most data</LI> </OL> <P>Like I said, tried several different ways to get this but I can't seem to put all the pieces together.</P> <P>Thanks and much appreciated!</P> Fri, 20 Sep 2019 17:17:27 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Outbound-connection-Dashboard/m-p/488494#M31991 grazingifre 2019-09-20T17:17:27Z https://community.splunk.com/t5/Dashboards-Visualizations/Outbound-connection-Dashboard/m-p/488495#M31992 <P>IIRC, the Splunk Security Essentials app has examples of all of those.</P> Fri, 20 Sep 2019 18:18:24 GMT https://community.splunk.com/t5/Dashboards-Visualizations/Outbound-connection-Dashboard/m-p/488495#M31992 richgalloway 2019-09-20T18:18:24Z