Display different message in the Dashboard

Hello all,
I am trying to get different type of messages to be displayed in my cisco dashboard.
So say I have 3 types of messages
Teardown TCP
Deny TCP
Built Inbound UDP
and so on.
How can I get a visualization of the initial message that would display those item listed?
Currently, I have a saved search and adding that to the dashboard. I'd like to get lets say a Piechart showing the percentage of each message type displayed.


You can create a pie chart with terms aggregation on your message field if it can lend to it?

For example - this is my visualization on system processes.

I am getting the top 3 values in my agg.

Does this help?


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.