We're evaluating Splunk v Logscape, got to say Splunk has some very nice features, but I'm loving Logscape at its far more effective on storage, ease of use and cost!
One feature I'd really like to request, is a few improvements to the Maps
Rather than city "hotspots", allow a pie chart to be shown. For example, at the moment, I'm showing destination of traffic from our Firewalls, the hotspots show the number of traffic entries for each city. Instead of the number of entries, I'd like to show a pie chart showing a breakdown of what that traffic is, so we need to add a pie chart for apptype.count(). If that makes any sense.
If that is not possible, then when I click a hotspot, it allow it to update a Pie Chart beside the map (is this possible?)
You could have a workspace containing a map and a table, using the table as a "Menu" of Sorts. You could use the menu to display aggregate data (Sum, Avg, Min, Max) and if you click the name it could link to a detailed Workspace, filtering on the city name.
This is a good use case; I like it .. we would need to link the events from the table to the map, not hard - but out of the box it wont work,
Regards,
Neil.