Thanks for your suggestions. I've included the timecharts for spanning tree and MAC flapping in the dashboard in my development repository which means this will be included in the next public release of the app. I will also look into the mnemonic timechart for WLC. Looks like the only way I can know for sure that a host is a WLC is to do a search based on filename=* (a field that is only extracted from WLC events) ... View more