Report on Hosts

This tool allows you to generate a report on the breakdown of a value present on the Hosts returned by your query. For example, to generate a report on ports seen on Hosts with HTTP services, you could query for services.service_name: HTTP and then generate a report on the breakdown of the field services.port

Report for Hosts

---

operating_system.vendor	hosts
Microsoft	705,585	0.96%
Ubuntu	225,824	0.31%
Linux	88,659	0.12%
Debian	55,430	0.08%
CentOS	10,311	0.01%
Amazon	6,376	0.01%
Red Hat	5,056	0.01%
microsoft	1,903	0.0%
Palo Alto Networks	1,431	0.0%
Cisco	1,409	0.0%
Akamai	872	0.0%
KACE	838	0.0%
Fedora Project	444	0.0%
Fortinet	434	0.0%
freebsd	419	0.0%
FreeBSD	345	0.0%
pfSense	252	0.0%
Check Point	190	0.0%
WatchGuard	190	0.0%
Ubiquiti	106	0.0%
Wildix	93	0.0%
MikroTik	92	0.0%
Citrix	65	0.0%
SonicWall	48	0.0%
AXIS	41	0.0%
HP	41	0.0%
OPNsense	35	0.0%
Raspbian	26	0.0%
Juniper	25	0.0%
Bomgar	16	0.0%
Duo	15	0.0%
Proxmox	14	0.0%
NetBSD	12	0.0%
Apple	11	0.0%
ARRIS	10	0.0%
Synology	9	0.0%
Device42	8	0.0%
Huawei	7	0.0%
Hikvision	6	0.0%
Hubitat	6	0.0%
LANCOM Systems	6	0.0%
SuSE	6	0.0%
Tomato	6	0.0%
Data Domain	5	0.0%
TP-LINK	5	0.0%
CloudLinux	4	0.0%
H3C	4	0.0%
Mandriva	4	0.0%
Microplex	4	0.0%
NetApp	4	0.0%
Wind River	4	0.0%
Xerox	4	0.0%
Zyxel	4	0.0%
Adtran	3	0.0%
Blue Coat	3	0.0%
Eltex	3	0.0%
HipServ	3	0.0%
Netgear	3	0.0%
Pulse Secure	3	0.0%
Seagate	3	0.0%
AVM	2	0.0%
Barco	2	0.0%
Crestron	2	0.0%
Eaton	2	0.0%
HeiTel	2	0.0%
IBM	2	0.0%
Siemens	2	0.0%
VMware	2	0.0%
Bosch	1	0.0%
DD-WRT	1	0.0%
Dell	1	0.0%
EC2AMAZ-SSBSD	1	0.0%
EFI	1	0.0%
Ingate	1	0.0%
Lexmark	1	0.0%
Linksys	1	0.0%
NAGRA	1	0.0%
Savin	1	0.0%
Sun	1	0.0%
Super Micro	1	0.0%
TRENDnet	1	0.0%
Total	73,673,626	100.0%

JSON Report

---

{
  "query": "ip: 3.128.0.0/9",
  "field": "operating_system.vendor",
  "total": 73673626,
  "duration": 300,
  "total_omitted": 0,
  "potential_deviation": 0,
  "buckets": [
    {
      "key": "Microsoft",
      "count": 705585
    },
    {
      "key": "Ubuntu",
      "count": 225824
    },
    {
      "key": "Linux",
      "count": 88659
    },
    {
      "key": "Debian",
      "count": 55430
    },
    {
      "key": "CentOS",
      "count": 10311
    },
    {
      "key": "Amazon",
      "count": 6376
    },
    {
      "key": "Red Hat",
      "count": 5056
    },
    {
      "key": "microsoft",
      "count": 1903
    },
    {
      "key": "Palo Alto Networks",
      "count": 1431
    },
    {
      "key": "Cisco",
      "count": 1409
    },
    {
      "key": "Akamai",
      "count": 872
    },
    {
      "key": "KACE",
      "count": 838
    },
    {
      "key": "Fedora Project",
      "count": 444
    },
    {
      "key": "Fortinet",
      "count": 434
    },
    {
      "key": "freebsd",
      "count": 419
    },
    {
      "key": "FreeBSD",
      "count": 345
    },
    {
      "key": "pfSense",
      "count": 252
    },
    {
      "key": "Check Point",
      "count": 190
    },
    {
      "key": "WatchGuard",
      "count": 190
    },
    {
      "key": "Ubiquiti",
      "count": 106
    },
    {
      "key": "Wildix",
      "count": 93
    },
    {
      "key": "MikroTik",
      "count": 92
    },
    {
      "key": "Citrix",
      "count": 65
    },
    {
      "key": "SonicWall",
      "count": 48
    },
    {
      "key": "AXIS",
      "count": 41
    },
    {
      "key": "HP",
      "count": 41
    },
    {
      "key": "OPNsense",
      "count": 35
    },
    {
      "key": "Raspbian",
      "count": 26
    },
    {
      "key": "Juniper",
      "count": 25
    },
    {
      "key": "Bomgar",
      "count": 16
    },
    {
      "key": "Duo",
      "count": 15
    },
    {
      "key": "Proxmox",
      "count": 14
    },
    {
      "key": "NetBSD",
      "count": 12
    },
    {
      "key": "Apple",
      "count": 11
    },
    {
      "key": "ARRIS",
      "count": 10
    },
    {
      "key": "Synology",
      "count": 9
    },
    {
      "key": "Device42",
      "count": 8
    },
    {
      "key": "Huawei",
      "count": 7
    },
    {
      "key": "Hikvision",
      "count": 6
    },
    {
      "key": "Hubitat",
      "count": 6
    },
    {
      "key": "LANCOM Systems",
      "count": 6
    },
    {
      "key": "SuSE",
      "count": 6
    },
    {
      "key": "Tomato",
      "count": 6
    },
    {
      "key": "Data Domain",
      "count": 5
    },
    {
      "key": "TP-LINK",
      "count": 5
    },
    {
      "key": "CloudLinux",
      "count": 4
    },
    {
      "key": "H3C",
      "count": 4
    },
    {
      "key": "Mandriva",
      "count": 4
    },
    {
      "key": "Microplex",
      "count": 4
    },
    {
      "key": "NetApp",
      "count": 4
    },
    {
      "key": "Wind River",
      "count": 4
    },
    {
      "key": "Xerox",
      "count": 4
    },
    {
      "key": "Zyxel",
      "count": 4
    },
    {
      "key": "Adtran",
      "count": 3
    },
    {
      "key": "Blue Coat",
      "count": 3
    },
    {
      "key": "Eltex",
      "count": 3
    },
    {
      "key": "HipServ",
      "count": 3
    },
    {
      "key": "Netgear",
      "count": 3
    },
    {
      "key": "Pulse Secure",
      "count": 3
    },
    {
      "key": "Seagate",
      "count": 3
    },
    {
      "key": "AVM",
      "count": 2
    },
    {
      "key": "Barco",
      "count": 2
    },
    {
      "key": "Crestron",
      "count": 2
    },
    {
      "key": "Eaton",
      "count": 2
    },
    {
      "key": "HeiTel",
      "count": 2
    },
    {
      "key": "IBM",
      "count": 2
    },
    {
      "key": "Siemens",
      "count": 2
    },
    {
      "key": "VMware",
      "count": 2
    },
    {
      "key": "Bosch",
      "count": 1
    },
    {
      "key": "DD-WRT",
      "count": 1
    },
    {
      "key": "Dell",
      "count": 1
    },
    {
      "key": "EC2AMAZ-SSBSD",
      "count": 1
    },
    {
      "key": "EFI",
      "count": 1
    },
    {
      "key": "Ingate",
      "count": 1
    },
    {
      "key": "Lexmark",
      "count": 1
    },
    {
      "key": "Linksys",
      "count": 1
    },
    {
      "key": "NAGRA",
      "count": 1
    },
    {
      "key": "Savin",
      "count": 1
    },
    {
      "key": "Sun",
      "count": 1
    },
    {
      "key": "Super Micro",
      "count": 1
    },
    {
      "key": "TRENDnet",
      "count": 1
    }
  ]
}