Question: How do I see data count totals by each host

[daniejstriata]

Hi.

I can see how much data goes into Graylog per day. If I have a sudden spike of input how do I identify which host is causing the spike? (Why is it called Outgoing traffic if that is the data I received into Graylog or am I misunderstanding?)

Can you not under Sidecars add a column with the total data the sidecar sent it over a period?

Unless there is a more obvious way I missed.

[ttsandrew]

Hey @daniejstriata,

You could set up a dashboard with a table that shows a count of messages received by source over the past whatever time period.

[tmacgbay]

It would look like this:

[ttsandrew]

And set the visualization type to message table to get a list. We sort ours by message count descending.

[daniejstriata]

Thank you! It works well!