2018-06-14 09:45 AM
I would like to export my event count either from the GUI or via a report.
Ideally, I would like to be able to drill into the data a bit, for example
1) Events per time period (where time period could be second, hour, day)
2) Events per time period per device.type (where device.type is my various event sources like firewalls, proxies, etc)
As a first use case, if I could simple get an export of the data for events per day totals, that would be a start. For example, this chart from "Investigate - Event Count"