Dashboard with grouped IPs

Hello,
is it somehow possible to group all IPs, so I can see what happens here in my enviroment.
Below you can see a try but the ‘group by’-thing works differently than I thought

Although not helpful for graphing your current fields, it may make sense to standardize your source IP field names (and use a separate field to denote related data like apache or dovecot) to something like src_ip. Sorry I am not helpful otherwise… My graphing sucks. :upside_down_face: