Dashboard [Filebeat Apache] Access and error logs ECS

Hi Everyone, Can you please tell me the meaning of the unique count of source.address range in this dashboard?

The map is aggregating documents (requests) by their location based on the IP. The aggregation depends on the zoom level, so if you zoom-out the points "merge" and if you zoom-in they "split".

The legend is just showing the count of records aggregated on your map, changing the color and size of the points.

Hello Jorge,
Thanks for your answer.
Another question: How can the count of records be 57.25? Should I understand that for the yellow color there is one up to 19.75 records or client IP addresses?

Best regards

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.