Report on Hosts

This tool allows you to generate a report on the breakdown of a value present on the Hosts returned by your query. For example, to generate a report on ports seen on Hosts with HTTP services, you could query for services.service_name: HTTP and then generate a report on the breakdown of the field services.port

Report for Hosts

---

location.city	hosts
Shanghai	68,864	21.34%
Beijing	32,239	9.99%
Shenzhen	9,226	2.86%
Qingdao	4,904	1.52%
Istanbul	4,880	1.51%
Seoul	3,485	1.08%
Jiaxing	3,359	1.04%
Wuhan	3,336	1.03%
San Jose	2,906	0.9%
Paris	2,812	0.87%
Remaining Results	186,614	57.84%
Total	322,625	100.0%

JSON Report

---

{
  "query": "not services.truncated: true and services.service_name: {ATG, BACNET, CITRIX, CODESYS, DIGI, DNP3, EIP, FINS, FOX, GE_SRTP, IEC61850_5_104, MODBUS, PCWORX, PRO_CON_OS, S7, WDRPC}",
  "field": "location.city",
  "total": 322625,
  "duration": 217,
  "total_omitted": 186614,
  "potential_deviation": 2067,
  "buckets": [
    {
      "key": "Shanghai",
      "count": 68864
    },
    {
      "key": "Beijing",
      "count": 32239
    },
    {
      "key": "Shenzhen",
      "count": 9226
    },
    {
      "key": "Qingdao",
      "count": 4904
    },
    {
      "key": "Istanbul",
      "count": 4880
    },
    {
      "key": "Seoul",
      "count": 3485
    },
    {
      "key": "Jiaxing",
      "count": 3359
    },
    {
      "key": "Wuhan",
      "count": 3336
    },
    {
      "key": "San Jose",
      "count": 2906
    },
    {
      "key": "Paris",
      "count": 2812
    }
  ]
}