Report on Hosts

This tool allows you to generate a report on the breakdown of a value present on the Hosts returned by your query. For example, to generate a report on ports seen on Hosts with HTTP services, you could query for services.service_name: HTTP and then generate a report on the breakdown of the field services.port

Report for Hosts

---

operating_system.vendor	hosts
Microsoft	559,862	0.83%
Ubuntu	245,716	0.36%
Linux	114,450	0.17%
Debian	50,625	0.07%
CentOS	14,119	0.02%
Red Hat	13,008	0.02%
Amazon	1,311	0.0%
Palo Alto Networks	1,074	0.0%
Cisco	785	0.0%
Akamai	659	0.0%
KACE	559	0.0%
Fedora Project	506	0.0%
Check Point	371	0.0%
Fortinet	346	0.0%
FreeBSD	321	0.0%
pfSense	271	0.0%
microsoft	216	0.0%
Ubiquiti	103	0.0%
Wildix	98	0.0%
MikroTik	88	0.0%
Duo	66	0.0%
WatchGuard	62	0.0%
Citrix	48	0.0%
AXIS	47	0.0%
SonicWall	40	0.0%
HP	38	0.0%
OPNsense	26	0.0%
Bomgar	18	0.0%
freebsd	17	0.0%
Raspbian	16	0.0%
Hikvision	14	0.0%
Juniper	13	0.0%
Proxmox	11	0.0%
CloudLinux	9	0.0%
Synology	9	0.0%
Device42	8	0.0%
NetBSD	7	0.0%
Data Domain	6	0.0%
SuSE	6	0.0%
ARRIS	5	0.0%
Apple	5	0.0%
LANCOM Systems	5	0.0%
Mandriva	5	0.0%
Huawei	4	0.0%
Hubitat	4	0.0%
Microplex	4	0.0%
Sun	4	0.0%
TP-LINK	4	0.0%
Xerox	4	0.0%
Blue Coat	3	0.0%
Crestron	3	0.0%
H3C	3	0.0%
Ricoh	3	0.0%
Wind River	3	0.0%
DrayTek	2	0.0%
HeiTel	2	0.0%
IBM	2	0.0%
Netgear	2	0.0%
Riverbed	2	0.0%
Siemens	2	0.0%
Tandberg	2	0.0%
Canon	1	0.0%
DD-WRT	1	0.0%
EC2AMAZ-GIQBSD	1	0.0%
EC2AMAZ-PBSD	1	0.0%
EC2AMAZ-SSBSD	1	0.0%
Eaton	1	0.0%
Eltex	1	0.0%
Freebox	1	0.0%
HipServ	1	0.0%
Ingate	1	0.0%
Lexmark	1	0.0%
Linksys	1	0.0%
NetApp	1	0.0%
Palm	1	0.0%
Polycom	1	0.0%
Symantec	1	0.0%
TRENDnet	1	0.0%
Xiongmai Technology	1	0.0%
Zyxel	1	0.0%
Total	67,809,037	100.0%

JSON Report

---

{
  "query": "ip: 3.128.0.0/9",
  "field": "operating_system.vendor",
  "total": 67809037,
  "duration": 230,
  "total_omitted": 0,
  "potential_deviation": 0,
  "buckets": [
    {
      "key": "Microsoft",
      "count": 559862
    },
    {
      "key": "Ubuntu",
      "count": 245716
    },
    {
      "key": "Linux",
      "count": 114450
    },
    {
      "key": "Debian",
      "count": 50625
    },
    {
      "key": "CentOS",
      "count": 14119
    },
    {
      "key": "Red Hat",
      "count": 13008
    },
    {
      "key": "Amazon",
      "count": 1311
    },
    {
      "key": "Palo Alto Networks",
      "count": 1074
    },
    {
      "key": "Cisco",
      "count": 785
    },
    {
      "key": "Akamai",
      "count": 659
    },
    {
      "key": "KACE",
      "count": 559
    },
    {
      "key": "Fedora Project",
      "count": 506
    },
    {
      "key": "Check Point",
      "count": 371
    },
    {
      "key": "Fortinet",
      "count": 346
    },
    {
      "key": "FreeBSD",
      "count": 321
    },
    {
      "key": "pfSense",
      "count": 271
    },
    {
      "key": "microsoft",
      "count": 216
    },
    {
      "key": "Ubiquiti",
      "count": 103
    },
    {
      "key": "Wildix",
      "count": 98
    },
    {
      "key": "MikroTik",
      "count": 88
    },
    {
      "key": "Duo",
      "count": 66
    },
    {
      "key": "WatchGuard",
      "count": 62
    },
    {
      "key": "Citrix",
      "count": 48
    },
    {
      "key": "AXIS",
      "count": 47
    },
    {
      "key": "SonicWall",
      "count": 40
    },
    {
      "key": "HP",
      "count": 38
    },
    {
      "key": "OPNsense",
      "count": 26
    },
    {
      "key": "Bomgar",
      "count": 18
    },
    {
      "key": "freebsd",
      "count": 17
    },
    {
      "key": "Raspbian",
      "count": 16
    },
    {
      "key": "Hikvision",
      "count": 14
    },
    {
      "key": "Juniper",
      "count": 13
    },
    {
      "key": "Proxmox",
      "count": 11
    },
    {
      "key": "CloudLinux",
      "count": 9
    },
    {
      "key": "Synology",
      "count": 9
    },
    {
      "key": "Device42",
      "count": 8
    },
    {
      "key": "NetBSD",
      "count": 7
    },
    {
      "key": "Data Domain",
      "count": 6
    },
    {
      "key": "SuSE",
      "count": 6
    },
    {
      "key": "ARRIS",
      "count": 5
    },
    {
      "key": "Apple",
      "count": 5
    },
    {
      "key": "LANCOM Systems",
      "count": 5
    },
    {
      "key": "Mandriva",
      "count": 5
    },
    {
      "key": "Huawei",
      "count": 4
    },
    {
      "key": "Hubitat",
      "count": 4
    },
    {
      "key": "Microplex",
      "count": 4
    },
    {
      "key": "Sun",
      "count": 4
    },
    {
      "key": "TP-LINK",
      "count": 4
    },
    {
      "key": "Xerox",
      "count": 4
    },
    {
      "key": "Blue Coat",
      "count": 3
    },
    {
      "key": "Crestron",
      "count": 3
    },
    {
      "key": "H3C",
      "count": 3
    },
    {
      "key": "Ricoh",
      "count": 3
    },
    {
      "key": "Wind River",
      "count": 3
    },
    {
      "key": "DrayTek",
      "count": 2
    },
    {
      "key": "HeiTel",
      "count": 2
    },
    {
      "key": "IBM",
      "count": 2
    },
    {
      "key": "Netgear",
      "count": 2
    },
    {
      "key": "Riverbed",
      "count": 2
    },
    {
      "key": "Siemens",
      "count": 2
    },
    {
      "key": "Tandberg",
      "count": 2
    },
    {
      "key": "Canon",
      "count": 1
    },
    {
      "key": "DD-WRT",
      "count": 1
    },
    {
      "key": "EC2AMAZ-GIQBSD",
      "count": 1
    },
    {
      "key": "EC2AMAZ-PBSD",
      "count": 1
    },
    {
      "key": "EC2AMAZ-SSBSD",
      "count": 1
    },
    {
      "key": "Eaton",
      "count": 1
    },
    {
      "key": "Eltex",
      "count": 1
    },
    {
      "key": "Freebox",
      "count": 1
    },
    {
      "key": "HipServ",
      "count": 1
    },
    {
      "key": "Ingate",
      "count": 1
    },
    {
      "key": "Lexmark",
      "count": 1
    },
    {
      "key": "Linksys",
      "count": 1
    },
    {
      "key": "NetApp",
      "count": 1
    },
    {
      "key": "Palm",
      "count": 1
    },
    {
      "key": "Polycom",
      "count": 1
    },
    {
      "key": "Symantec",
      "count": 1
    },
    {
      "key": "TRENDnet",
      "count": 1
    },
    {
      "key": "Xiongmai Technology",
      "count": 1
    },
    {
      "key": "Zyxel",
      "count": 1
    }
  ]
}