From 328216c74b40cde715ac03804d401b807cdb582f Mon Sep 17 00:00:00 2001
From: rfaircloth-splunk <rfaircloth@splunk.com>
Date: Fri, 15 Oct 2021 18:03:13 -0400
Subject: [PATCH] Update sc4s_source_activity.xml

---
 package/default/data/ui/views/sc4s_source_activity.xml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/package/default/data/ui/views/sc4s_source_activity.xml b/package/default/data/ui/views/sc4s_source_activity.xml
index df76db2..ef3f911 100644
--- a/package/default/data/ui/views/sc4s_source_activity.xml
+++ b/package/default/data/ui/views/sc4s_source_activity.xml
@@ -195,7 +195,7 @@
   <row>
     <panel>
       <table>
-        <title>SC4S Instances</title>
+        <title>Data Path</title>
         <search>
           <query>| tstats count where index=* sc4s_vendor_product=* 
     [| rest splunk_server=local /servicesNS/nobody/SA-ITOA/itoa_interface/entity report_as=text
@@ -207,8 +207,7 @@
     | fields + host 
     | format
         ]
-    by sourcetype,_time 
-by sc4s_container</query>
+    by sc4s_container,sc4s_destport,sc4s_proto,sc4s_syslog_format</query>
           <earliest>-24h@h</earliest>
           <latest>now</latest>
         </search>