Devices with higher hit counts

[AtulHon]

Hello Guys

Normally, EPS Dashboard shows the count when the events are increased. I would like to create a dashboard which will show any source IP or Destination IP having higher hit count so that I dont have to go through TCP ,UDP connections and drilling down into them to see the source IPs. 

Can you please advise how I can create a dashboard to see count based connections on it ?

[David1111]

Hi
Simply open a new TAB
add a new View set it as follow - Event Queries> Source IPs> Fields> Source IP, Count, Total Event Count.

Best regards.