Update sc4s_source_activity.xml

splunk · Oct 15, 2021 · 328216c · 328216c
1 parent dfbe5e1
commit 328216c
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/package/default/data/ui/views/sc4s_source_activity.xml b/package/default/data/ui/views/sc4s_source_activity.xml
@@ -195,7 +195,7 @@
   <row>
     <panel>
       <table>
-        <title>SC4S Instances</title>
+        <title>Data Path</title>
         <search>
           <query>| tstats count where index=* sc4s_vendor_product=* 
     [| rest splunk_server=local /servicesNS/nobody/SA-ITOA/itoa_interface/entity report_as=text
@@ -207,8 +207,7 @@
     | fields + host 
     | format
         ]
-    by sourcetype,_time 
-by sc4s_container</query>
+    by sc4s_container,sc4s_destport,sc4s_proto,sc4s_syslog_format</query>
           <earliest>-24h@h</earliest>
           <latest>now</latest>
         </search>