You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

103 lines
3.4 KiB

<form version="1.1">
<label>Inbound Messages - Microsoft Exchange</label>
<fieldset autoRun="true">
<input type="time" searchWhenChanged="true">
<label></label>
<default>Last 60 minutes</default>
</input>
</fieldset>
<row>
<chart>
<title>Inbound Message Rate</title>
<search>
<query>
`msgtrack-inbound-messages`|eval count=1|timechart fixedrange=t bins=120 per_minute(count) as "Msgs/min"
</query>
</search>
<option name="height">240</option>
<option name="charting.chart">line</option>
<option name="charting.legend.placement">none</option>
<option name="charting.chart.nullValueMode">zero</option>
<option name="charting.axisTitleX.text">Time</option>
<option name="charting.axisTitleY.text">Msgs/minute</option>
</chart>
<chart>
<title>Inbound Message Volume (KB)</title>
<search>
<query>
`msgtrack-inbound-messages`|eval total_kb=total_bytes/1024|timechart fixedrange=t bins=120 per_second(total_kb) as "Bandwidth"
</query>
</search>
<option name="height">240</option>
<option name="charting.chart">line</option>
<option name="charting.legend.placement">none</option>
<option name="charting.chart.nullValueMode">zero</option>
<option name="charting.axisTitleX.text">Time</option>
<option name="charting.axisTitleY.text">Kbps</option>
</chart>
</row>
<row>
<table>
<title>Top Sending IP Addresses</title>
<search>
<query>
`msgtrack-inbound-senderip`|top limit=10 showperc=t showcount=t cs_ip|rename cs_ip as "IPAddress"
</query>
</search>
<option name="count">10</option>
<option name="rowNumbers">true</option>
<option name="showPager">true</option>
<drilldown>
<link>msgtrack_byipaddress?autoRun=true&amp;earliest=-60m&amp;latest=now&amp;form.ipaddress=$row.IPAddress$</link>
</drilldown>
</table>
<table>
<title>Top Sending Domains</title>
<search>
<query>
`msgtrack-inbound-messages`|top limit=10 showperc=t showcount=t sender_domain|rename sender_domain as "Domain"
</query>
</search>
<option name="count">10</option>
<option name="rowNumbers">true</option>
<option name="showPager">true</option>
<drilldown>
<link>msgtrack_bydomain?autoRun=true&amp;earliest=-60m&amp;latest=now&amp;form.domain=$row.Domain$</link>
</drilldown>
</table>
</row>
<row>
<table>
<title>Top Recipients by Message Count</title>
<search>
<query>
`msgtrack-inbound-messages`|eval recipient=split(recipients,";")|top limit=10 showperc=t showcount=t recipient|rename recipient as "Username"
</query>
</search>
<option name="count">10</option>
<option name="rowNumbers">true</option>
<option name="showPager">false</option>
<drilldown>
<link>msgtrack_byusername?autoRun=true&amp;earliest=-60m&amp;latest=now&amp;form.username=$row.Username$</link>
</drilldown>
</table>
<table>
<title>Top Recipients by Volume</title>
<search>
<query>
`msgtrack-inbound-messages`|eval recipient=split(recipients,";")|eval total_kb=total_bytes/1024|stats sum(total_kb) as "kB Received" by recipient|sort -"kB Received"|head 10|rename recipient as "Username"
</query>
</search>
<option name="count">10</option>
<option name="rowNumbers">true</option>
<option name="showPager">false</option>
<drilldown>
<link>msgtrack_byusername?autoRun=true&amp;earliest=-60m&amp;latest=now&amp;form.username=$row.Username$</link>
</drilldown>
</table>
</row>
</form>