elastiflow-*

elastiflow-*


ElastiFlow: Traffic Locality Count

ElastiFlow: Traffic Locality Count


ElastiFlow: Sankey Src AS/Dst AS (flow records) - vega

nodes

!groupSelector || groupSelector.stk1 == datum.stk1 || groupSelector.stk2 == datum.stk2

datum.stack == 'stk1' ? datum.stk1+datum.stk2 : datum.stk2+datum.stk1

edgeMark

!groupSelector && (groupHover.stk1 == datum.stk1 || groupHover.stk2 == datum.stk2) ? 0.8 : 0.4

!groupSelector && (groupHover.stk1 == datum.stk1 || groupHover.stk2 == datum.stk2) ? 1 : 0

datum.stk1 + ' �� ' + datum.stk2 + '    ' + format(datum.size, ',.0f') + ' flows (' + format(datum.percentage, '.1%') + ')'

groupMark

datum.grpId + '   ' + format(datum.total, ',.0f') + ' flows (' + format(datum.percentage, '.1%') + ')'

scale('x', datum.stack) + (datum.rightLabel ? bandwidth('x') + 8 : -8)

abs(datum.scaledY0-datum.scaledY1) > 10 ? datum.grpId : ''

groupHover

{stk1:datum.stack=='stk1' && datum.grpId, stk2:datum.stack=='stk2' && datum.grpId}

groupSelector

{stack:datum.stack, stk1:datum.stack=='stk1' && datum.grpId, stk2:datum.stack=='stk2' && datum.grpId}


ElastiFlow: VLANs (bits/s) - TSVB (stacked area)

(params.bytes * 8) / (params._interval / 1000)


ElastiFlow: Servers (bytes) - TSVB (stacked area)


ElastiFlow: Top Source Ports - table

ElastiFlow: Top Source Ports - table


ElastiFlow: Ingress/Egress Interfaces - input list


ElastiFlow: Egress Interfaces (bits/s) - TSVB (stacked area)


ElastiFlow: Ingress Interfaces (bits/s) - TSVB (stacked area)


ElastiFlow: Ingress Interfaces (pkts/s) - TSVB (stacked area)

params.packets / (params._interval / 1000)


ElastiFlow: Egress Interfaces (pkts/s) - TSVB (stacked area)


ElastiFlow: NAV: Exporters

ElastiFlow: NAV: Exporters

p{color:#aaaaaa;margin-top:0;margin-bottom:12px} p a{color:#888888;font-size:14px;font-weight:bold;text-decoration:none} p a strong{color:#1ba9f5;font-weight:bold} hr{background-color:#aaaaaa;margin:0;height:1px} a:hover{opacity:.7}

[Overview](#/dashboard/653cf1e0-2fd2-11e7-99ed-49759aed30f5) | [Top-N](#/dashboard/AWFgr4DaugC1WJLdy9iE) | [Threats](#/dashboard/8e383000-3309-11e9-aec0-c1d93190f676) | [Flows](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Geo IP](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [AS Traffic](#/dashboard/d7e31d40-6589-11e7-bfc3-d74b7bb89482) | [**Exporters**](#/dashboard/04157d70-6591-11e7-bfc3-d74b7bb89482) | [Traffic Details](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22) | [Flow Records](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5)
***


Egress Interfaces (bits/s)

Ingress Interfaces (bits/s)

Ingress Interfaces (pkts/s)

Egress Interfaces (pkts/s)

ElastiFlow: Flow Exporters


ElastiFlow: Egress Interfaces (packets) - donut


ElastiFlow: IP Protocols (bytes) - TSVB (stacked area)


ElastiFlow: Traffic Locality (bits/s) - TSVB (stacked area)


ElastiFlow: Source Autonomous Systems (packets) - donut


ElastiFlow: Top Services - table

ElastiFlow: Top Services - table


ElastiFlow: Services (bits/s) - TSVB (stacked area)


ElastiFlow: Flow Types, Exporters & Services - input list


ElastiFlow: Top IP Protocols - table

ElastiFlow: Top IP Protocols - table


ElastiFlow: NAV: Top-N

ElastiFlow: NAV: Top-N

[Overview](#/dashboard/653cf1e0-2fd2-11e7-99ed-49759aed30f5) | [**Top-N**](#/dashboard/AWFgr4DaugC1WJLdy9iE) | [Threats](#/dashboard/8e383000-3309-11e9-aec0-c1d93190f676) | [Flows](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Geo IP](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [AS Traffic](#/dashboard/d7e31d40-6589-11e7-bfc3-d74b7bb89482) | [Exporters](#/dashboard/04157d70-6591-11e7-bfc3-d74b7bb89482) | [Traffic Details](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22) | [Flow Records](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5)
***


ElastiFlow: NAV: Top-N (services)

ElastiFlow: NAV: Top-N (services)

[Talkers](#/dashboard/AWFgr4DaugC1WJLdy9iE) |  [**Services**](#/dashboard/0809c1f0-6719-11e7-b5b8-29fbded8e37c)
 | [Conversations](#/dashboard/AWFgw02HugC1WJLdzCFZ) | [Apps](#/dashboard/44d6d8c0-560b-11e8-b711-83a5f93b17f3)
***


Services (bits/s)

ElastiFlow: Top Services


ElastiFlow: Flow Records (src/dst) - search


Question: flow.traffic_locality.keyword: "public"

Question: flow.traffic_locality.keyword : "public"

Question: flow.traffic_locality.keyword : "public"

ElastiFlow: Client/Server Flows


ElastiFlow: Client Autonomous Systems (bytes) - donut


ElastiFlow: Services (packets) - donut

ElastiFlow: Services (packets) - donut


ElastiFlow: IP Version (flow records) - donut


ElastiFlow: Client Count

ElastiFlow: Client Count


ElastiFlow: Server Count

ElastiFlow: Server Count


ElastiFlow: Service Count

ElastiFlow: Service Count


ElastiFlow: Clients (bits/s) - TSVB (stacked area)


ElastiFlow: Servers (bits/s) - TSVB (stacked area)


ElastiFlow: Application Count

ElastiFlow: Application Count


ElastiFlow: Applications (bits/s) - TSVB (stacked area)


ElastiFlow: Applications (pkts/s) - TSVB (stacked area)


ElastiFlow: Clients (pkts/s) - TSVB (stacked area)


ElastiFlow: Servers (pkts/s) - TSVB (stacked area)


ElastiFlow: Services (pkts/s) - TSVB (stacked area)


ElastiFlow: Traffic Types - input list

ElastiFlow: Traffic Types - input list


ElastiFlow: Applications (flow records) - donut


ElastiFlow: Clients (flow records) - donut


ElastiFlow: Servers (flow records) - donut


ElastiFlow: Services (flow records) - donut


ElastiFlow: NAV: Traffic Details

ElastiFlow: NAV: Traffic Details

[Overview](#/dashboard/653cf1e0-2fd2-11e7-99ed-49759aed30f5) | [Top-N](#/dashboard/AWFgr4DaugC1WJLdy9iE) | [Threats](#/dashboard/8e383000-3309-11e9-aec0-c1d93190f676) | [Flows](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Geo IP](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [AS Traffic](#/dashboard/d7e31d40-6589-11e7-bfc3-d74b7bb89482) | [Exporters](#/dashboard/04157d70-6591-11e7-bfc3-d74b7bb89482) | [**Traffic Details**](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22) | [Flow Records](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5)
***


ElastiFlow: NAV: Traffic Details (types)

[**Types**](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22)
 | [Attributes](#/dashboard/64c19720-5619-11e8-b711-83a5f93b17f3) | [Locality](#/dashboard/95ccacb0-5619-11e8-b711-83a5f93b17f3)
***


Clients (bits/s)

Servers (bits/s)

Services (bits/s)

Applications (bits/s)

Applications (pkts/s)

Clients (pkts/s)

Servers (pkts/s)

Services (pkts/s)

Applications (flow records)

Clients (flow records)

Servers (flow records)

Services (flow records)

ElastiFlow: Traffic Details (types)


ElastiFlow: NAV: Flows

ElastiFlow: NAV: Flows

[Overview](#/dashboard/653cf1e0-2fd2-11e7-99ed-49759aed30f5) | [Top-N](#/dashboard/AWFgr4DaugC1WJLdy9iE) | [Threats](#/dashboard/8e383000-3309-11e9-aec0-c1d93190f676) | [**Flows**](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Geo IP](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [AS Traffic](#/dashboard/d7e31d40-6589-11e7-bfc3-d74b7bb89482) | [Exporters](#/dashboard/04157d70-6591-11e7-bfc3-d74b7bb89482) | [Traffic Details](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22) | [Flow Records](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5)
***


ElastiFlow: IP Protocols (bits/s) - TSVB (stacked area)


ElastiFlow: ZFlow - Platforms (bits/s) - TSVB (stacked area)

Question: ipfix.ziften_agent_guid: *


ElastiFlow: Servers (flow records) - TSVB (stacked area)


ElastiFlow: Egress Interfaces (bytes) - donut


ElastiFlow: Applications (bytes) - donut


ElastiFlow: ZFlow - Commands (bytes) - donut


ElastiFlow: ZFlow - Users (bytes) - donut


ElastiFlow: ZFlow - Platforms (bytes) - donut


ElastiFlow: ZFlow - Commands (bits/s) - TSVB (stacked area)

Question: ipfix.ziften_agent_guid: *


ElastiFlow: ZFlow - Users (bits/s) - TSVB (stacked area)

Question: ipfix.ziften_agent_guid: *


ElastiFlow: ZFlow - input list

ElastiFlow: ZFlow - input list


Commands (bytes)

Users (bytes)

Platforms (bytes)

ElastiFlow: Ziften ZFlow


ElastiFlow: Direction (flow records) - donut


Blog


ElastiFlow: Traffic Locality (flow records) - donut


ElastiFlow: Src/Dst - input list

ElastiFlow: Src/Dst - input list


ElastiFlow: Flow Records (client/server) - search


ElastiFlow: Source Autonomous Systems (bytes) - donut


ElastiFlow: Client Autonomous Systems (flow records) - donut


ElastiFlow: Autonomous Systems (flow records) - TSVB (stacked area)


ElastiFlow: Servers (bytes) - donut

ElastiFlow: Servers (bytes) - donut


ElastiFlow: Servers (packets) - TSVB (stacked area)


ElastiFlow: Flow Record Count - TSVB (metric)


ElastiFlow: NAV: Top-N (talkers)

ElastiFlow: NAV: Top-N (talkers)

[**Talkers**](#/dashboard/AWFgr4DaugC1WJLdy9iE) |  [Services](#/dashboard/0809c1f0-6719-11e7-b5b8-29fbded8e37c)
 | [Conversations](#/dashboard/AWFgw02HugC1WJLdzCFZ) | [Apps](#/dashboard/44d6d8c0-560b-11e8-b711-83a5f93b17f3)
***


ElastiFlow: Sources (flow records) - donut


ElastiFlow: Egress Interfaces (flow records) - donut


ElastiFlow: Source Ports (bits/s) - TSVB (stacked area)


ElastiFlow: IP Reputations (flows) - table


ElastiFlow: Countries (packets) - donut

ElastiFlow: Countries (packets) - donut


ElastiFlow: Destinations and Ports (bytes) - donut


ElastiFlow: Cities (bytes) - donut

ElastiFlow: Cities (bytes) - donut


ElastiFlow: Egress Interfaces (bytes) - TSVB (stacked area)


ElastiFlow: Destination and Source Ports (flow records) - donut


ElastiFlow: Destination Ports (packets) - TSVB (stacked area)


ElastiFlow: NAV: Threats

ElastiFlow: NAV: Threats

[Overview](#/dashboard/653cf1e0-2fd2-11e7-99ed-49759aed30f5) | [Top-N](#/dashboard/AWFgr4DaugC1WJLdy9iE) | [**Threats**](#/dashboard/8e383000-3309-11e9-aec0-c1d93190f676) | [Flows](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Geo IP](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [AS Traffic](#/dashboard/d7e31d40-6589-11e7-bfc3-d74b7bb89482) | [Exporters](#/dashboard/04157d70-6591-11e7-bfc3-d74b7bb89482) | [Traffic Details](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22) | [Flow Records](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5)
***


ElastiFlow: Types of Service (bits/s) - TSVB (stacked area)


ElastiFlow: Source Autonomous Systems (bits/s) - TSVB (stacked area)


ElastiFlow: Traffic Locality (packets) - donut


ElastiFlow: Source Ports (bytes) - TSVB (stacked area)


ElastiFlow: Source Autonomous Systems (bytes) - TSVB (stacked area)


ElastiFlow: Egress Interfaces (flow records) - TSVB (stacked area)


ElastiFlow: ZFlow - Users (flow records) - donut


ElastiFlow: Flow Types (bytes) - donut

ElastiFlow: Flow Types (bytes) - donut


ElastiFlow: Destinations and Ports (packets) - donut


Question: _exists_: flow.client_rep_tags.keyword AND server.as.organization.name.keyword: private

Question: _exists_: flow.client_rep_tags.keyword AND server.as.organization.name.keyword: private

ElastiFlow: At-Risk Servers (flows) - table


ElastiFlow: Source Autonomous Systems (flow records) - TSVB (stacked area)


ElastiFlow: Source Count

ElastiFlow: Source Count


ElastiFlow: Autonomous Systems (packets) - donut


ElastiFlow: Services (bytes) - donut

ElastiFlow: Services (bytes) - donut


ElastiFlow: Clients (bytes) - donut

ElastiFlow: Clients (bytes) - donut


ElastiFlow: Egress Interfaces (packets) - TSVB (stacked area)


ElastiFlow: Source Autonomous Systems (packets) - TSVB (stacked area)


ElastiFlow: Countries (bits/s) - TSVB (stacked area)


ElastiFlow: Types of Service (bytes) - TSVB (stacked area)


ElastiFlow: Sankey Client/Server (packets) - vega

edgeMark

datum.stk1 + ' �� ' + datum.stk2 + '    ' + format(datum.size, '.2s') + ' packets (' + format(datum.percentage, '.1%') + ')'

groupMark

datum.grpId + '   ' + format(datum.total, '.2s') + ' packets (' + format(datum.percentage, '.1%') + ')'


ElastiFlow: Autonomous Systems (packets) - TSVB (stacked area)


ElastiFlow: ZFlow - Platforms (flow records) - donut


ElastiFlow: Flow Types (packets) - donut


ElastiFlow: Destinations and Sources (bytes) - donut


ElastiFlow: Countries (bytes) - TSVB (stacked area)


ElastiFlow: Destinations and Ports (flow records) - donut


ElastiFlow: Top Clients - table

ElastiFlow: Top Clients - table


ElastiFlow: Flow Types, Exporters & Apps - input list


ElastiFlow: Top Applications - table

ElastiFlow: Top Applications - table


ElastiFlow: NAV: Top-N (apps)

ElastiFlow: NAV: Top-N (apps)

[Talkers](#/dashboard/AWFgr4DaugC1WJLdy9iE) |  [Services](#/dashboard/0809c1f0-6719-11e7-b5b8-29fbded8e37c)
 | [Conversations](#/dashboard/AWFgw02HugC1WJLdzCFZ) | [**Apps**](#/dashboard/44d6d8c0-560b-11e8-b711-83a5f93b17f3)
***


Applications (bits/s)

ElastiFlow: Top Applications


ElastiFlow: Clients (packets) - donut

ElastiFlow: Clients (packets) - donut


ElastiFlow: Destination Ports (bytes) - donut


ElastiFlow: NAV: Top-N (conversations)

ElastiFlow: NAV: Top-N (conversations)

[Talkers](#/dashboard/AWFgr4DaugC1WJLdy9iE) |  [Services](#/dashboard/0809c1f0-6719-11e7-b5b8-29fbded8e37c)
 | [**Conversations**](#/dashboard/AWFgw02HugC1WJLdzCFZ) | [Apps](#/dashboard/44d6d8c0-560b-11e8-b711-83a5f93b17f3)
***


ElastiFlow: Destination and Source Ports (bytes) - donut


ElastiFlow: Source Ports (flow records) - TSVB (stacked area)


ElastiFlow: Autonomous Systems (flow records) - donut


ElastiFlow: TCP Flags (flow records) - tag cloud


ElastiFlow: Destinations (flow records) - donut


ElastiFlow: NAV: Flows (src/dst)

ElastiFlow: NAV: Flows (src/dst)

[Client/Server](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [**Src/Dst**](#/dashboard/4b86b4c0-5628-11e8-b711-83a5f93b17f3) | [AS](#/dashboard/757d59f0-5628-11e8-b711-83a5f93b17f3)
***


ElastiFlow: Destinations (bytes) - donut


ElastiFlow: Sources (bytes) - donut

ElastiFlow: Sources (bytes) - donut


ElastiFlow: Sources (packets) - donut

ElastiFlow: Sources (packets) - donut


ElastiFlow: Destinations (packets) - donut


ElastiFlow: Sankey Src/Dst (bytes) - vega

edgeMark

!groupSelector && (groupHover.stk1 == datum.stk1 || groupHover.stk2 == datum.stk2) ? 0.80 : 0.40

datum.stk1 + ' to ' + datum.stk2 + ' ' + format(datum.size, '.2s') + 'B (' + format(datum.percentage, '.1%') + ')'

groupMark

datum.grpId + '   ' + format(datum.total, '.2s') + 'B (' + format(datum.percentage, '.1%') + ')'


Destinations (flow records)

Sources (flow records)

Destinations (bytes)

Sources (bytes)

Sources (packets)

Destinations (packets)

ElastiFlow: Flows (src/dst)


ElastiFlow: IP Reputations (flow records) - tag cloud


ElastiFlow: Source Autonomous Systems (flow records) - donut


ElastiFlow: ZFlow - Commands (flow records) - donut


ElastiFlow: Types of Service (flow records) - donut


ElastiFlow: Flow Types (flow records) - donut


ElastiFlow: Types of Service (flow records) - TSVB (stacked area)


ElastiFlow: Flow Types & Exporters - input list


ElastiFlow: Sankey Client/Server (bytes) - vega

edgeMark

datum.stk1 + ' to ' + datum.stk2 + '    ' + format(datum.size, '.2s') + 'B (' + format(datum.percentage, '.1%') + ')'


ElastiFlow: Countries (bytes) - donut

ElastiFlow: Countries (bytes) - donut


ElastiFlow: Destination Count

ElastiFlow: Destination Count


ElastiFlow: Destinations and Sources (packets) - donut


ElastiFlow: Countries (flow records) - TSVB (stacked area)


ElastiFlow: Applications (flow records) - TSVB (stacked area)


ElastiFlow: Flow Types (flow records) - TSVB (stacked bar)


ElastiFlow: NAV: Flow Records

ElastiFlow: NAV: Flow Records

[Overview](#/dashboard/653cf1e0-2fd2-11e7-99ed-49759aed30f5) | [Top-N](#/dashboard/AWFgr4DaugC1WJLdy9iE) | [Threats](#/dashboard/8e383000-3309-11e9-aec0-c1d93190f676) | [Flows](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Geo IP](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [AS Traffic](#/dashboard/d7e31d40-6589-11e7-bfc3-d74b7bb89482) | [Exporters](#/dashboard/04157d70-6591-11e7-bfc3-d74b7bb89482) | [Traffic Details](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22) | [**Flow Records**](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5)
***


ElastiFlow: NAV: Flow Records (src/dst)

ElastiFlow: NAV: Flow Records (src/dst)

[Client/Server](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5) | [**Src/Dst**](#/dashboard/58858cb0-55e1-11e8-b711-83a5f93b17f3)
***


ElastiFlow: Flow Records (src/dst)


ElastiFlow: Server Autonomous Systems (flow records) - donut


ElastiFlow: VLANs (pkts/s) - TSVB (stacked area)


ElastiFlow: Destination and Source Ports (packets) - donut


ElastiFlow: Types of Service (packets) - TSVB (stacked area)


ElastiFlow: IP Reputations (flows) - TSVB (stacked bar)

Question: flow.rep_tags.keyword: *


ElastiFlow: Types of Service (pkts/s) - TSVB (stacked area)


ElastiFlow: Traffic Attributes - input list


ElastiFlow: Destination Ports (flow records) - TSVB (stacked area)


ElastiFlow: Flow Exporters (bytes) - donut


ElastiFlow: ToS Count

ElastiFlow: ToS Count


ElastiFlow: VLAN Count

ElastiFlow: VLAN Count


ElastiFlow: TCP Flags (bits/s) - TSVB (stacked area)


ElastiFlow: IP Protocol Count

ElastiFlow: IP Protocol Count


ElastiFlow: TCP Flag Count

ElastiFlow: TCP Flag Count


ElastiFlow: IP Protocols (pkts/s) - TSVB (stacked area)


ElastiFlow: TCP Flags (pkts/s) - TSVB (stacked area)


ElastiFlow: VLANs (flow records) - donut


ElastiFlow: TCP Flags (flow records) - donut


ElastiFlow: IP Protocols (flow records) - donut


ElastiFlow: NAV: Traffic Details (attributes)

[Types](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22)
 | [**Attributes**](#/dashboard/64c19720-5619-11e8-b711-83a5f93b17f3) | [Locality](#/dashboard/95ccacb0-5619-11e8-b711-83a5f93b17f3)
***


IP Protocols (bits/s)

TCP Flags (bits/s)

Types of Service (bits/s)

VLANs (bits/s)

IP Protocols (pkts/s)

TCP Flags (pkts/s)

Types of Service (pkts/s)

VLANs (pkts/s)

VLANs (flow records)

Types of Service (flow records)

TCP Flags (flow records)

IP Protocols (flow records)

ElastiFlow: Traffic Details (attributes)


ElastiFlow: Sources (bits/s) - TSVB (stacked area)


ElastiFlow: Countries (flow records) - donut


ElastiFlow: Traffic Locality (pkts/s) - TSVB (stacked area)


ElastiFlow: Client/Server - input list

ElastiFlow: Client/Server - input list


ElastiFlow: Blank

ElastiFlow: Blank


ElastiFlow: NAV: Overview

ElastiFlow: NAV: Overview

[**Overview**](#/dashboard/653cf1e0-2fd2-11e7-99ed-49759aed30f5) | [Top-N](#/dashboard/AWFgr4DaugC1WJLdy9iE) | [Threats](#/dashboard/8e383000-3309-11e9-aec0-c1d93190f676) | [Flows](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Geo IP](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [AS Traffic](#/dashboard/d7e31d40-6589-11e7-bfc3-d74b7bb89482) | [Exporters](#/dashboard/04157d70-6591-11e7-bfc3-d74b7bb89482) | [Traffic Details](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22) | [Flow Records](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5)
***


ElastiFlow: Services (bytes) - donut（已转换）

ElastiFlow: Autonomous Systems (bytes) - donut（已转换）

ElastiFlow: IP Versions and Protocols (bytes) - donut（已转换）

ElastiFlow: Servers and Clients (bytes) - donut（已转换）

ElastiFlow: TCP Flags (flow records) - tag cloud（已转换）

ElastiFlow: IP Reputations (flow records) - tag cloud（已转换）

个人博客

ElastiFlow: Overview


ElastiFlow: Sankey Src/Dst (packets) - vega


ElastiFlow: Types of Service (bytes) - donut


ElastiFlow: Top Conversations - table

ElastiFlow: Top Conversations - table


ElastiFlow: Sources (bytes) - TSVB (stacked area)


ElastiFlow: Destination Ports (flow records) - donut


ElastiFlow: Destination Ports (bytes) - TSVB (stacked area)


ElastiFlow: Sources (pkts/s) - TSVB (stacked area)


ElastiFlow: Source Port Count

ElastiFlow: Source Port Count


ElastiFlow: Countries (packets) - TSVB (stacked area)


Question: NOT server.as.organization.name.keyword: private

ElastiFlow: Server Autonomous Systems (bytes) - donut


ElastiFlow: Sankey Src AS/Dst AS (packets) - vega


ElastiFlow: Flow Exporters (packets) - donut


ElastiFlow: Cities (packets) - donut

ElastiFlow: Cities (packets) - donut


ElastiFlow: Src/Dst Autonomous Systems - input list


ElastiFlow: Destination Autonomous Systems (flow records) - donut


ElastiFlow: NAV: Flows (AS)

ElastiFlow: NAV: Flows (AS)

[Client/Server](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Src/Dst](#/dashboard/4b86b4c0-5628-11e8-b711-83a5f93b17f3) | [**AS**](#/dashboard/757d59f0-5628-11e8-b711-83a5f93b17f3)
***


ElastiFlow: Destination Autonomous Systems (bytes) - donut


ElastiFlow: Destination Autonomous Systems (packets) - donut


ElastiFlow: Sankey Src AS/Dst AS (bytes) - vega


Question: private

Question: private

Question: private

Question: private

Destination Autonomous Systems (flow records)

Source Autonomous Systems (flow records)

Source Autonomous Systems (packets)

Source Autonomous Systems (bytes)

Destination Autonomous Systems (bytes)

Destination Autonomous Systems (packets)

ElastiFlow: Flows (AS)


ElastiFlow: Destination Ports (bits/s) - TSVB (stacked area)


ElastiFlow: Destinations and Sources (flow records) - donut


ElastiFlow: Source Ports (pkts/s) - TSVB (stacked area)


ElastiFlow: IP Versions and Protocols (bytes) - donut


ElastiFlow: Sources (flow records) - TSVB (stacked area)


ElastiFlow: Destination Ports (packets) - donut


ElastiFlow: Clients (packets) - TSVB (stacked area)


ElastiFlow: Source Ports (packets) - TSVB (stacked area)


ElastiFlow: Cities (flow records) - donut


ElastiFlow: Types of Service (packets) - donut


ElastiFlow: Destination Port Count

ElastiFlow: Destination Port Count


ElastiFlow: Source Autonomous Systems (pkts/s) - TSVB (stacked area)


ElastiFlow: NAV: Flows (client/server)

ElastiFlow: NAV: Flows (client/server)

[**Client/Server**](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Src/Dst](#/dashboard/4b86b4c0-5628-11e8-b711-83a5f93b17f3) | [AS](#/dashboard/757d59f0-5628-11e8-b711-83a5f93b17f3)
***


ElastiFlow: Server Autonomous Systems (packets) - donut


ElastiFlow: Sources and Ports (bytes) - donut


ElastiFlow: Clients (flow records) - TSVB (stacked area)


ElastiFlow: High-Risk Clients (flows) - table


ElastiFlow: Public Threats (flows) - table


ElastiFlow: At-Risk Servers (flows) - table（已转换）

Question: _exists_: flow.client_rep_tags.keyword AND server.as.organization.name.keyword: private

Question: _exists_: flow.client_rep_tags.keyword AND server.as.organization.name.keyword: private

ElastiFlow: IP Reputations (flows) - TSVB (stacked bar)（已转换）

elastiflow-*

elastiflow-*

ElastiFlow: Threats


ElastiFlow: Ingress Interfaces (bytes) - TSVB (stacked area)


ElastiFlow: Sources (packets) - TSVB (stacked area)


ElastiFlow: TCP Flags (bytes) - donut

ElastiFlow: TCP Flags (bytes) - donut


ElastiFlow: Destination Autonomous Systems (bits/s) - TSVB (stacked area)


ElastiFlow: Client Autonomous Systems (bits/s) - TSVB (stacked area)


ElastiFlow: Countries and Cities (flow records) - donut


ElastiFlow: TCP Flags (bytes) - TSVB (stacked area)


ElastiFlow: Clients (bytes) - TSVB (stacked area)


ElastiFlow: Autonomous Systems (bits/s) - TSVB (stacked area)


ElastiFlow: Autonomous System Count

ElastiFlow: Autonomous System Count


ElastiFlow: City Count

ElastiFlow: City Count


ElastiFlow: Country Count

ElastiFlow: Country Count


ElastiFlow: Cities (bits/s) - TSVB (stacked area)


ElastiFlow: Autonomous Systems (pkts/s) - TSVB (stacked area)


ElastiFlow: Cities (pkts/s) - TSVB (stacked area)


ElastiFlow: Countries (pkts/s) - TSVB (stacked area)


ElastiFlow: Traffic Locality - input list


ElastiFlow: NAV: Traffic Details (locality)

[Types](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22)
 | [Attributes](#/dashboard/64c19720-5619-11e8-b711-83a5f93b17f3) | [**Locality**](#/dashboard/95ccacb0-5619-11e8-b711-83a5f93b17f3)
***


Autonomous Systems (bits/s)

Traffic Locality (bits/s)

Countries (bits/s)

Cities (bits/s)

Autonomous Systems (pkts/s)

Cities (pkts/s)

Countries (pkts/s)

Traffic Locality (pkts/s)

Autonomous Systems (flow records)

Cities (flow records)

Countries (flow records)

Traffic Locality (flow records)

ElastiFlow: Traffic Details (locality)


ElastiFlow: Ingress Interfaces (flow records) - TSVB (stacked area)


ElastiFlow: Applications (bytes) - TSVB (stacked area)


ElastiFlow: Destination Autonomous Systems (bytes) - TSVB (stacked area)


ElastiFlow: Autonomous Systems (bytes) - donut


ElastiFlow: Client Autonomous Systems (bytes) - TSVB (stacked area)


ElastiFlow: Ingress Interfaces (packets) - TSVB (stacked area)


ElastiFlow: Top Destinations - table

ElastiFlow: Top Destinations - table


ElastiFlow: TCP Flags (packets) - donut

ElastiFlow: TCP Flags (packets) - donut


ElastiFlow: Sources and Ports (packets) - donut


ElastiFlow: Top Clients - table（已转换）

ElastiFlow: Top Servers - table（已转换）

Services (bits/s)

ElastiFlow: Top Talkers


Services (bits/s)

ElastiFlow: Top Conversations


ElastiFlow: Flow Exporters

ElastiFlow: Flow Exporters


ElastiFlow: NAV: Geo IP

ElastiFlow: NAV: Geo IP

[Overview](#/dashboard/653cf1e0-2fd2-11e7-99ed-49759aed30f5) | [Top-N](#/dashboard/AWFgr4DaugC1WJLdy9iE) | [Threats](#/dashboard/8e383000-3309-11e9-aec0-c1d93190f676) | [Flows](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [**Geo IP**](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [AS Traffic](#/dashboard/d7e31d40-6589-11e7-bfc3-d74b7bb89482) | [Exporters](#/dashboard/04157d70-6591-11e7-bfc3-d74b7bb89482) | [Traffic Details](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22) | [Flow Records](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5)
***


ElastiFlow: NAV: Geo IP (src/dst)

ElastiFlow: NAV: Geo IP (src/dst)

[Client/Server](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [**Src/Dst**](#/dashboard/AWFhE8NZugC1WJLdzYri)
***


Question: flow.traffic_locality.keyword : "public"

Question: flow.traffic_locality.keyword : "public"

Question: flow.traffic_locality.keyword : "public"

ElastiFlow: Source/Destination Flows


Question: public

Question: public

Destinations and Sources (bytes)

Destination and Source Ports (bytes)

ElastiFlow: Countries and Cities (bytes) - donut（已转换）

ElastiFlow: Geo Location (src/dst)


ElastiFlow: TCP Flags (flow records) - TSVB (stacked area)


ElastiFlow: Destination Autonomous Systems (flow records) - TSVB (stacked area)


ElastiFlow: NAV: Autonomous Systems

ElastiFlow: NAV: Autonomous Systems

[Overview](#/dashboard/653cf1e0-2fd2-11e7-99ed-49759aed30f5) | [Top-N](#/dashboard/AWFgr4DaugC1WJLdy9iE) | [Threats](#/dashboard/8e383000-3309-11e9-aec0-c1d93190f676) | [Flows](#/dashboard/d7124e80-5625-11e8-b711-83a5f93b17f3) | [Geo IP](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [**AS Traffic**](#/dashboard/d7e31d40-6589-11e7-bfc3-d74b7bb89482) | [Exporters](#/dashboard/04157d70-6591-11e7-bfc3-d74b7bb89482) | [Traffic Details](#/dashboard/10584050-6234-11e7-8236-19b4b4941e22) | [Flow Records](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5)
***


ElastiFlow: Direction (bytes) - donut

ElastiFlow: Direction (bytes) - donut


ElastiFlow: Countries and Cities (bytes) - donut


ElastiFlow: Applications (packets) - donut


ElastiFlow: Conversation Partners

ElastiFlow: Conversation Partners


ElastiFlow: Client Autonomous Systems (flow records) - TSVB (stacked area)


ElastiFlow: Server Autonomous Systems (pkts/s) - TSVB (stacked area)


ElastiFlow: Source Ports (bytes) - donut


ElastiFlow: NAV: Geo IP (client/server)

ElastiFlow: NAV: Geo IP (client/server)

[**Client/Server**](#/dashboard/a932b600-2fd2-11e7-99ed-49759aed30f5) | [Src/Dst](#/dashboard/AWFhE8NZugC1WJLdzYri)
***


ElastiFlow: Servers and Clients (bytes) - donut


Question: public

Question: public

Servers and Clients (bytes)

Services (bytes)

ElastiFlow: Geo Location (client/server)


ElastiFlow: Destination Autonomous Systems (packets) - TSVB (stacked area)


ElastiFlow: TCP Flags (packets) - TSVB (stacked area)


ElastiFlow: IP Version (pkts/s) - TSVB (stacked area)


ElastiFlow: IP Version (bytes) - donut

ElastiFlow: IP Version (bytes) - donut


ElastiFlow: Direction (packets) - donut

ElastiFlow: Direction (packets) - donut


ElastiFlow: IP Versions and Protocols (packets) - donut


ElastiFlow: Flow Exporters (bits/s) - TSVB (stacked area)


ElastiFlow: IP Protocols (bytes) - donut


ElastiFlow: Top Sources - table

ElastiFlow: Top Sources - table


ElastiFlow: IP Version (packets) - donut


ElastiFlow: Sources and Ports (flow records) - donut


ElastiFlow: VLANs (bytes) - donut

ElastiFlow: VLANs (bytes) - donut


ElastiFlow: Countries and Cities (packets) - donut


ElastiFlow: Services (bytes) - TSVB (stacked area)


ElastiFlow: Flow Exporters (pkts/s) - TSVB (stacked area)


ElastiFlow: IP Version (bits/s) - TSVB (stacked area)


ElastiFlow: IP Versions and Protocols (flow records) - donut


ElastiFlow: Client Autonomous Systems (packets) - TSVB (stacked area)


ElastiFlow: IP Protocols (packets) - donut


ElastiFlow: Source Ports (flow records) - donut


ElastiFlow: Flow Exporters (bytes) - TSVB (stacked area)


ElastiFlow: Sankey Client/Server (flow records) - vega


ElastiFlow: Destinations (pkts/s) - TSVB (stacked area)


ElastiFlow: NAV: Flow Records (client/server)

[**Client/Server**](#/dashboard/ca480720-2fdf-11e7-9d02-3f49bde5c1d5) | [Src/Dst](#/dashboard/58858cb0-55e1-11e8-b711-83a5f93b17f3)
***


ElastiFlow: Flow Records (client/server)


ElastiFlow: Ingress Interfaces (flow records) - donut


ElastiFlow: Sankey Src/Dst (flow records) - vega


ElastiFlow: Traffic Locality (packets) - TSVB (stacked area)


ElastiFlow: Destination Ports (pkts/s) - TSVB (stacked area)


ElastiFlow: Applications (packets) - TSVB (stacked area)


ElastiFlow: Top Servers - table

ElastiFlow: Top Servers - table


ElastiFlow: Services (flow records) - TSVB (stacked area)


ElastiFlow: IP Version (bytes) - TSVB (stacked area)


ElastiFlow: Flow Exporters (flow records) - TSVB (stacked area)


ElastiFlow: Cities (bytes) - TSVB (stacked area)


ElastiFlow: Destination Autonomous Systems (pkts/s) - TSVB (stacked area)

Question: NOT destination.as.organization.name.keyword: private


ElastiFlow: Traffic Locality (flow records) - TSVB (stacked area)


ElastiFlow: Servers (packets) - donut

ElastiFlow: Servers (packets) - donut


Clients (flow records)

Servers (flow records)

Clients (bytes)

Clients (packets)

Servers (bytes)

Servers (packets)

ElastiFlow: Flows (client/server)


Question: private

Question: private

Destination Autonomous Systems (bits/s)

Source Autonomous Systems (bits/s)

Destination Autonomous Systems (pkts/s)

Source Autonomous Systems (pkts/s)

ElastiFlow: AS Traffic


ElastiFlow: Client Autonomous Systems (packets) - donut


ElastiFlow: IP Version (flow records) - TSVB (stacked area)


ElastiFlow: Services (packets) - TSVB (stacked area)


ElastiFlow: Destinations (bits/s) - TSVB (stacked area)


ElastiFlow: ZFlow - Commands (packets) - donut


ElastiFlow: Source Ports (packets) - donut


ElastiFlow: Flow Exporters (packets) - TSVB (stacked area)


ElastiFlow: Servers and Clients (packets) - donut


ElastiFlow: Logo

ElastiFlow: Logo


ElastiFlow: VLANs (packets) - TSVB (stacked area)


ElastiFlow: Server Autonomous Systems (bits/s) - TSVB (stacked area)


ElastiFlow: IP Version (packets) - TSVB (stacked area)


ElastiFlow: Ingress Interfaces (bytes) - donut


ElastiFlow: Destinations (bytes) - TSVB (stacked area)


ElastiFlow: Client Autonomous Systems (pkts/s) - TSVB (stacked area)


ElastiFlow: VLANs (packets) - donut

ElastiFlow: VLANs (packets) - donut


ElastiFlow: VLANs (flow records) - TSVB (stacked area)


ElastiFlow: Autonomous Systems (bytes) - TSVB (stacked area)


ElastiFlow: Servers and Clients (flow records) - donut


ElastiFlow: Server Autonomous Systems (bytes) - TSVB (stacked area)


ElastiFlow: ZFlow - Platforms (packets) - donut


ElastiFlow: Top Destination Ports - table


ElastiFlow: Destinations (flow records) - TSVB (stacked area)


ElastiFlow: Ingress Interfaces (packets) - donut


ElastiFlow: Cities (flow records) - TSVB (stacked area)


ElastiFlow: Server Autonomous Systems (flow records) - TSVB (stacked area)


ElastiFlow: IP Protocols (packets) - TSVB (stacked area)


ElastiFlow: Traffic Locality (bytes) - TSVB (stacked area)


ElastiFlow: VLANs (bytes) - TSVB (stacked area)


ElastiFlow: Traffic Locality (bytes) - donut


ElastiFlow: Flow Exporters (flow records) - donut


ElastiFlow: Destinations (packets) - TSVB (stacked area)


ElastiFlow: Server Autonomous Systems (packets) - TSVB (stacked area)


ElastiFlow: Cities (packets) - TSVB (stacked area)


ElastiFlow: IP Protocols (flow records) - TSVB (stacked area)


ElastiFlow: ZFlow - Users (packets) - donut