Top Remote IP Addresses
`msgtrack-outbound-clientip`|top limit=10 showperc=t showcount=t cs_ip|rename cs_ip as "IPAddress"
msgtrack_byipaddress?autoRun=true&earliest=-60m&latest=now&form.ipaddress=$row.IPAddress$
Top Recipient Domains
`msgtrack-outbound-messages`|eval recipient=split(recipients,";")|rex field=recipient "[^@]*@(?<recipient_domain>.*)"|top limit=10 showperc=t showcount=t recipient_domain|rename recipient_domain as "Domain"
msgtrack_bydomain?autoRun=true&earliest=-60m&latest=now&form.domain=$row.Domain$
Top Senders by Message Count
`msgtrack-outbound-messages`|top showperc=t showcount=t sender|rename sender as "Username"
msgtrack_byusername?autoRun=true&earliest=-60m&latest=now&form.username=$row.Username$
Top Senders by Volume
`msgtrack-outbound-messages`|eval total_kb=total_bytes/1024|stats sum(total_kb) as "kB Received" by sender|sort -"kB Received"|head 10|rename sender as "Username"
msgtrack_byusername?autoRun=true&earliest=-60m&latest=now&form.username=$row.Username$