metron-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Nick Allen <n...@nickallen.org>
Subject [Discuss] Situational Awareness Zeppelin Dashboard
Date Tue, 24 Jan 2017 15:09:33 GMT
I would like to create a Zeppelin dashboard that provides some level of
situational awareness for each of the data sources.  What do you guys think
that should look-like?  A few thoughts on what could be included.

   - Top external hosts with geo-location
   - Number of total flows per hour
   - Geo-location of flows
   - Number of internal flows per hour
   - Number of internal-external flows per hour
   - Average flow length per hour
   - Centrality and betweenness measures

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message