Question: A security operations manager wants to compare summary statistics for the size of requested objects (sc_bytes) and the threat score of the requested object (x_wbrs_score)
A security operations manager wants to compare summary statistics for the size of requested objects (sc_bytes) and the threat score of the requested object (x_wbrs_score) from the web security appliance data over the past 24 hours. Task 7: Use the fieldsummary command to generate summary statistics on 10 values from 2 fields. 60. From the menu, click Search. (The search box re-initializes and should now be empty.) 61. Pipe the results of this search to the fieldsummary command and run over the Last 24 hours. The resulting table will display information for every field returned by the search. index=network sourcetype=cisco_wsa_squid Modify the search to limit results to the top 10 values of sc_bytes and x_wbrs_score
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
