In the selected fields to the left, I have a selected field by name source_address and it looks like below:
Top 10 values Count %
192.168.0.155 14103 15.78%
192.168.0.1 138324 15.47%
I would like to know what does Count and % indicate? Whether Count is count of IP address occurred for a given time/date range?
Please guide me.
Yes. The count is occurrence of field value and % shows field appears in over % of events.