I'm searching for how frequently an IP address comes up in our network traffic during a 30, 30-60-60-90- and 90-120 day period. My search looks like the one below:
index=networkTraffic | stats count(Dst_IP) by Dst_IP
↧