I am searching my Cisco ASA logs to count where an IP originates from by country.
It looks like this:
eventtype= | iplocation src_ip | stats count by Country
It works well to give me a count of all the countries, but I can't get it to give me the top 20 only. I have tried multiple combinations of the 'top' and 'head'
I don't want to just choose 20 results per page as I need to generate reports for this.
Can anyone help me out?