This is the screen where you can view the event statistics of each log source attached to Logsign Unified SecOps Platform. You can access the page from the Logsign Unified SecOps Platform web interface from the Settings > Maintenance > Source Stats menu. The menu item is visible only to users with the admin role.
Select the following on the page:
- Source: The log source whose statistics you want to view. The list is searchable.
- Select Type: EPS (events per second) or EPM (events per minute). The default is EPS.
- Date range: 30 Minutes, 1 Hour, 3 Hours, 6 Hours, 12 Hours, 1 Day, 2 Days, 3 Days or 7 Days. The chart interval is set automatically from the selected range (for example 1m for 30 Minutes and 1 Hour, 6h for 7 Days).
After a source and a date range are selected, the page shows the following charts:
- General Event Stats AVG
- Parser
- Index
- Filter
- Drop
Each chart title shows the active time interval, for example Parser - (Time Interval 1m).