Splunk Search

Bandwidth Report

rhelie
Engager

Hello,

I am new to Splunk and I set it up and configured my Sonicwall TZ200 to send syslog information to it. That works fine I have data going into splunk but I would like to run a report on total bandwidth usage for that unit based on a period of time.

I tried running a search but there is no "usage" field (as described in the video). Did I do something wrong? Is it a model specific problem? Is there a work around?

Thanks

Robert

Tags (2)

lukejadamec
Super Champion

I think you need to be searching for bytesRx for bytes received, bytesTx for bytes transmitted, rcvd for bytes received within a connection, and sent for bytes sent within a connection from the syslog.

0 Karma

rhelie
Engager

I do not seem to have an option for bytes Received or Sent. I see RCVD and Sent but that does not seem to be bytes.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...