Can anyone help me get the count for Top 5 plus an Others count for the following please? Thank you
sourcetype="cisco:asa" action=blocked | stats count by src_ip, dest_ip, dest_port | sort - by count | rename src_ip as Src, dest_ip as Dest, dest_port as Port | addcoltotals
↧
