Hey Everyone,
I have the data being sent into the defined index via Kenesis. When I load the dashboard nothing populates. Upon searching the query, it returns this:
`aws-vpc-flow-log-index` source="dest_port" vpcflow_action=ACCEPT protocol=* (interface_id="*") (aws_account_id="*")
| dedup _time interface_id aws_account_id protocol vpcflow_action
| stats sum(total_bytes) as total_bytes sum(total_packets) as total_packets by interface_id aws_account_id protocol vpcflow_action | stats dc(interface_id) as interfaces
which returns a value of 0, however if I remove source="dest_port" the query responds correctly and returns the correct variable. I must be doing something wrong here.
