Data Utilization Dashboard

[ravikanthbadugu]

Hello All,

How we can get the stats of Internet Data Utilization by multiple Users for Different time periods.

[HiroshiSatoh]

What do you specifically want to do?

For example, is this App helpful?
It can be used if the log supports the data model.
https://splunkbase.splunk.com/app/2699/

[ravikanthbadugu]

index=xyz Source=abc earliest=@d+09h latest=now |stats latest(PacketsReceived) as PacketsReceived,latest(PacketsSent) as PacketsSent by LoggedInUser | convert num(PacketsReceived) as PacketsReceived,num(PacketsSent) as PacketsSent| eval TotalB=PacketsReceived+PacketsSent |search LoggedInUser!=root|search LoggedInUser!=admin

using this query we want output for 3 different timelines. , one is fromyesterday 9:30 am to today 6:30 Pm and today 11:30 am to 6:30 pm and today 9:30 am to 11:30 am

[clara-fication]

Are timezones an issue for this search? You could just create an eval statement that says if _time is between certain hours to mark it as one time period, and so on.

[ravikanthbadugu]

We have users working remotely I want to know how much internet data each user is consuming for doing their work for different time periods.