Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Avivanco
Explorer

Smart Event - Top Resource

Hello, 

I'm trying to get a table with the "Resource" that have been seen the most in a day.

top-resources-se.png

In my table, I see that the logs are counted from "Malware Action" and not by "Resource". I've tried setting the log count to go according to "Resource", but then the search fails.


Is there any chance of getting the table?

 

Thank you.

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

I believe the Resource field is not indexed thus cannot be used in reports.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events