Bandwidth Report

[rhelie]

Hello,

I am new to Splunk and I set it up and configured my Sonicwall TZ200 to send syslog information to it. That works fine I have data going into splunk but I would like to run a report on total bandwidth usage for that unit based on a period of time.

I tried running a search but there is no "usage" field (as described in the video). Did I do something wrong? Is it a model specific problem? Is there a work around?

Thanks

Robert

[lukejadamec]

I think you need to be searching for bytesRx for bytes received, bytesTx for bytes transmitted, rcvd for bytes received within a connection, and sent for bytes sent within a connection from the syslog.

[rhelie]

I do not seem to have an option for bytes Received or Sent. I see RCVD and Sent but that does not seem to be bytes.