diff --git a/package/default/data/ui/views/sc4s_source_activity.xml b/package/default/data/ui/views/sc4s_source_activity.xml index df76db2..ef3f911 100644 --- a/package/default/data/ui/views/sc4s_source_activity.xml +++ b/package/default/data/ui/views/sc4s_source_activity.xml @@ -195,7 +195,7 @@ - SC4S Instances + Data Path | tstats count where index=* sc4s_vendor_product=* [| rest splunk_server=local /servicesNS/nobody/SA-ITOA/itoa_interface/entity report_as=text @@ -207,8 +207,7 @@ | fields + host | format ] - by sourcetype,_time -by sc4s_container + by sc4s_container,sc4s_destport,sc4s_proto,sc4s_syslog_format -24h@h now