Hey! I was just wondering if anyone knows of a way to get the total download/upload to show in MB or GB rather than bytes through an XQL queries' output? XQL Query dataset = xdr_data // Using the xdr dataset | filter event_type = ENUM.NETWORK // Filtering by network activity | fields action_upload, action_remote_ip as remote_ip, action_external_hostname as remote_hostname, actor_process_image_name as process_name // Selecting the relevant fields | comp sum(action_upload) as total_upload by process_name, remote_ip, remote_hostname // Summing the total upload by process + ip + host | sort desc total_upload // Sorting by total upload | limit 10 // Limiting the results to only the top 10
... View more