Hi @Hassan989 ... troubleshooting this requires more details from your side.  1) when you run the first portion of that search query, do you get any results? | mstats avg("Network_Interface.Bytes_Received/sec") As Packets_Received stdev("Network_Interface.Bytes_Received/sec") as stdev WHERE index=dcn_nc01_os AND host = HIC026117 2) if yes, then we should troubleshoot the remaining SPL query.  3) if you dont get any results, then, pls suggest us.. if the apps, add-ons are installed or not.. how many UFs are sending network events.. many other questions will raise depending on above answers..  ... View more