{ "name" : "Top Clients Contacts", "i18n_name" : "db_search.top_clients_contacts", "data_source" : "flows", "show_in_page" : "overview", "hourly": false, "visualization_type" : "table", "select" : { "sql": "IPv4NumToString(IPV4_SRC_ADDR) IPV4_SRC_ADDR_FORMATTED, IPv6NumToString(IPV6_SRC_ADDR) IPV6_SRC_ADDR_FORMATTED, COUNT(DISTINCT(IPV4_DST_ADDR)) AS count4, COUNT(DISTINCT(IPV6_DST_ADDR)) AS count6, (count4 + count6) AS server_count, COUNT(DISTINCT(IP_DST_PORT)) AS port_count", "items" : [ { "name" : "IPV4_SRC_ADDR" }, { "name" : "IPV6_SRC_ADDR" }, { "name" : "server_count", "func" : "", "value_type" : "number" }, { "name" : "port_count", "func" : "", "value_type" : "number" } ] }, "groupby" : { "items" : [ { "name" : "IPV4_SRC_ADDR" }, { "name" : "IPV6_SRC_ADDR" } ] }, "sortby" : { "items" : [ { "name" : "server_count", "order" : "DESC" } ] } }