Archive
Highlighted

Question on Selected fields in fields side bar

Explorer

Hi,

In the selected fields to the left, I have a selected field by name source_address and it looks like below:

Top 10 values Count %
192.168.0.155 14103 15.78%
192.168.0.1 138324 15.47%

I would like to know what does Count and % indicate? Whether Count is count of IP address occurred for a given time/date range?

Please guide me.

Regards,
Sushma.

Tags (1)
0 Karma
Highlighted

Re: Question on Selected fields in fields side bar

Champion

Yes. The count is occurrence of field value and % shows field appears in over % of events.

0 Karma