Inbound Messages - Microsoft Exchange

Last 60 minutes

`msgtrack-inbound-messages`|eval count=1|timechart fixedrange=t bins=120 per_minute(count) as "Msgs/min" 240 line none zero Time Msgs/minute `msgtrack-inbound-messages`|eval total_kb=total_bytes/1024|timechart fixedrange=t bins=120 per_second(total_kb) as "Bandwidth" 240 line none zero Time Kbps `msgtrack-inbound-senderip`|top limit=10 showperc=t showcount=t cs_ip|rename cs_ip as "IPAddress" 10truetrue msgtrack_byipaddress?autoRun=true&earliest=-60m&latest=now&form.ipaddress=$row.IPAddress$ `msgtrack-inbound-messages`|top limit=10 showperc=t showcount=t sender_domain|rename sender_domain as "Domain" 10truetrue msgtrack_bydomain?autoRun=true&earliest=-60m&latest=now&form.domain=$row.Domain$ `msgtrack-inbound-messages`|eval recipient=split(recipients,";")|top limit=10 showperc=t showcount=t recipient|rename recipient as "Username" 10truefalse msgtrack_byusername?autoRun=true&earliest=-60m&latest=now&form.username=$row.Username$ `msgtrack-inbound-messages`|eval recipient=split(recipients,";")|eval total_kb=total_bytes/1024|stats sum(total_kb) as "kB Received" by recipient|sort -"kB Received"|head 10|rename recipient as "Username" 10truefalse msgtrack_byusername?autoRun=true&earliest=-60m&latest=now&form.username=$row.Username$