I would like to create a Zeppelin dashboard that provides some level of situational awareness for each of the data sources. What do you guys think that should look-like? A few thoughts on what could be included.
- Top external hosts with geo-location - Number of total flows per hour - Geo-location of flows - Number of internal flows per hour - Number of internal-external flows per hour - Average flow length per hour - Centrality and betweenness measures
