Hello,
is it somehow possible to group all IPs, so I can see what happens here in my enviroment.
Below you can see a try but the ‘group by’-thing works differently than I thought
Although not helpful for graphing your current fields, it may make sense to standardize your source IP field names (and use a separate field to denote related data like apache or dovecot) to something like src_ip. Sorry I am not helpful otherwise… My graphing sucks. 
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.