Display different message in the Dashboard


(Marcos Felix) #1

Hello all,
I am trying to get different type of messages to be displayed in my cisco dashboard.
So say I have 3 types of messages
Teardown TCP
Deny TCP
Built Inbound UDP
and so on.
How can I get a visualization of the initial message that would display those item listed?
Currently, I have a saved search and adding that to the dashboard. I'd like to get lets say a Piechart showing the percentage of each message type displayed.
Thanks


(Bhavya R M) #2

Hello,

You can create a pie chart with terms aggregation on your message field if it can lend to it?

For example - this is my visualization on system processes.

I am getting the top 3 values in my agg.

Does this help?

Thanks,
Bhavya