macbre/data-flow-graph

Analyze bots traffic

macbre opened this issue · 0 comments

program: "elecena.bots" AND @message: "bot::send_http_request" AND severity: "info"

Sum transferred bytes (@context.stats.size_download: 26722) and number of HTTP requests grouped by @source_host.

"aggs": {
    "by_host": {
      "terms": {
        "field": "@source_host"
      },
      "aggs": {
        "total_requests": {
          "value_count": {
            "field": "@context.url"
          }
        },
        "total_bytes": {
          "sum": {
            "field": "@context.stats.size_download"
          }
        }
      }
    }
  }