Report on Hosts

This tool allows you to generate a report on the breakdown of a value present on the Hosts returned by your query. For example, to generate a report on ports seen on Hosts with HTTP services, you could query for services.service_name: HTTP and then generate a report on the breakdown of the field services.port


Report for Hosts


operating_system.vendor hosts
Microsoft 439,363 0.97%
Ubuntu 188,888 0.42%
Linux 86,991 0.19%
Debian 37,360 0.08%
CentOS 13,085 0.03%
Red Hat 11,476 0.03%
Amazon 1,249 0.0%
Palo Alto Networks 766 0.0%
Cisco 734 0.0%
KACE 612 0.0%
Akamai 532 0.0%
microsoft 483 0.0%
Fedora Project 439 0.0%
Fortinet 247 0.0%
pfSense 231 0.0%
Check Point 186 0.0%
FreeBSD 169 0.0%
Bomgar 130 0.0%
Citrix 66 0.0%
WatchGuard 52 0.0%
freebsd 48 0.0%
AXIS 32 0.0%
HP 32 0.0%
SonicWall 31 0.0%
MikroTik 29 0.0%
Duo 27 0.0%
Data Domain 20 0.0%
OPNsense 20 0.0%
Juniper 15 0.0%
Raspbian 14 0.0%
Hikvision 12 0.0%
H3C 11 0.0%
Device42 10 0.0%
Wildix 10 0.0%
ARRIS 9 0.0%
Apple 7 0.0%
Synology 7 0.0%
Wind River 7 0.0%
Proxmox 6 0.0%
Adtran 5 0.0%
Crestron 5 0.0%
Eltex 5 0.0%
HipServ 5 0.0%
Huawei 5 0.0%
NetApp 5 0.0%
SuSE 5 0.0%
Mandriva 4 0.0%
NetBSD 4 0.0%
Blue Coat 3 0.0%
IBM 3 0.0%
LANCOM Systems 3 0.0%
Linksys 3 0.0%
Sun 3 0.0%
Ubiquiti 3 0.0%
Xerox 3 0.0%
Eaton 2 0.0%
HeiTel 2 0.0%
HiSilicon 2 0.0%
Microplex 2 0.0%
Riverbed 2 0.0%
Savin 2 0.0%
Seagate 2 0.0%
Super Micro 2 0.0%
TP-LINK 2 0.0%
Zyxel 2 0.0%
DD-WRT 1 0.0%
EFI 1 0.0%
Lexmark 1 0.0%
NAGRA 1 0.0%
Netgear 1 0.0%
Plixer 1 0.0%
Ricoh 1 0.0%
Symantec 1 0.0%
TRENDnet 1 0.0%
Total 45,389,821 100.0%

JSON Report


{
  "query": "ip: 3.128.0.0/9",
  "field": "operating_system.vendor",
  "total": 45389821,
  "duration": 735,
  "total_omitted": 0,
  "potential_deviation": 0,
  "buckets": [
    {
      "key": "Microsoft",
      "count": 439363
    },
    {
      "key": "Ubuntu",
      "count": 188888
    },
    {
      "key": "Linux",
      "count": 86991
    },
    {
      "key": "Debian",
      "count": 37360
    },
    {
      "key": "CentOS",
      "count": 13085
    },
    {
      "key": "Red Hat",
      "count": 11476
    },
    {
      "key": "Amazon",
      "count": 1249
    },
    {
      "key": "Palo Alto Networks",
      "count": 766
    },
    {
      "key": "Cisco",
      "count": 734
    },
    {
      "key": "KACE",
      "count": 612
    },
    {
      "key": "Akamai",
      "count": 532
    },
    {
      "key": "microsoft",
      "count": 483
    },
    {
      "key": "Fedora Project",
      "count": 439
    },
    {
      "key": "Fortinet",
      "count": 247
    },
    {
      "key": "pfSense",
      "count": 231
    },
    {
      "key": "Check Point",
      "count": 186
    },
    {
      "key": "FreeBSD",
      "count": 169
    },
    {
      "key": "Bomgar",
      "count": 130
    },
    {
      "key": "Citrix",
      "count": 66
    },
    {
      "key": "WatchGuard",
      "count": 52
    },
    {
      "key": "freebsd",
      "count": 48
    },
    {
      "key": "AXIS",
      "count": 32
    },
    {
      "key": "HP",
      "count": 32
    },
    {
      "key": "SonicWall",
      "count": 31
    },
    {
      "key": "MikroTik",
      "count": 29
    },
    {
      "key": "Duo",
      "count": 27
    },
    {
      "key": "Data Domain",
      "count": 20
    },
    {
      "key": "OPNsense",
      "count": 20
    },
    {
      "key": "Juniper",
      "count": 15
    },
    {
      "key": "Raspbian",
      "count": 14
    },
    {
      "key": "Hikvision",
      "count": 12
    },
    {
      "key": "H3C",
      "count": 11
    },
    {
      "key": "Device42",
      "count": 10
    },
    {
      "key": "Wildix",
      "count": 10
    },
    {
      "key": "ARRIS",
      "count": 9
    },
    {
      "key": "Apple",
      "count": 7
    },
    {
      "key": "Synology",
      "count": 7
    },
    {
      "key": "Wind River",
      "count": 7
    },
    {
      "key": "Proxmox",
      "count": 6
    },
    {
      "key": "Adtran",
      "count": 5
    },
    {
      "key": "Crestron",
      "count": 5
    },
    {
      "key": "Eltex",
      "count": 5
    },
    {
      "key": "HipServ",
      "count": 5
    },
    {
      "key": "Huawei",
      "count": 5
    },
    {
      "key": "NetApp",
      "count": 5
    },
    {
      "key": "SuSE",
      "count": 5
    },
    {
      "key": "Mandriva",
      "count": 4
    },
    {
      "key": "NetBSD",
      "count": 4
    },
    {
      "key": "Blue Coat",
      "count": 3
    },
    {
      "key": "IBM",
      "count": 3
    },
    {
      "key": "LANCOM Systems",
      "count": 3
    },
    {
      "key": "Linksys",
      "count": 3
    },
    {
      "key": "Sun",
      "count": 3
    },
    {
      "key": "Ubiquiti",
      "count": 3
    },
    {
      "key": "Xerox",
      "count": 3
    },
    {
      "key": "Eaton",
      "count": 2
    },
    {
      "key": "HeiTel",
      "count": 2
    },
    {
      "key": "HiSilicon",
      "count": 2
    },
    {
      "key": "Microplex",
      "count": 2
    },
    {
      "key": "Riverbed",
      "count": 2
    },
    {
      "key": "Savin",
      "count": 2
    },
    {
      "key": "Seagate",
      "count": 2
    },
    {
      "key": "Super Micro",
      "count": 2
    },
    {
      "key": "TP-LINK",
      "count": 2
    },
    {
      "key": "Zyxel",
      "count": 2
    },
    {
      "key": "DD-WRT",
      "count": 1
    },
    {
      "key": "EFI",
      "count": 1
    },
    {
      "key": "Lexmark",
      "count": 1
    },
    {
      "key": "NAGRA",
      "count": 1
    },
    {
      "key": "Netgear",
      "count": 1
    },
    {
      "key": "Plixer",
      "count": 1
    },
    {
      "key": "Ricoh",
      "count": 1
    },
    {
      "key": "Symantec",
      "count": 1
    },
    {
      "key": "TRENDnet",
      "count": 1
    }
  ]
}