Report for EPS by Collector and Device
I have a graph setup for average eps by hour. Its easy to tell if there are abnormalities or spikes. Table: NIC System Fields: average(count) X-axis: DateFormat (userpref) SQL: MessageID=400023 Limit 1200 rows (fits nicely) Hope that helps!
I schedule a daily report (emailed to me) showing all devices sorted by their events per day. EPS is less important to me because many of my devices syslog events, and therefore EPS can fluctuate greatly. To me this is an easy way to track and identify my chatty devices. Table - Category Counts Fields - ((DeviceAddress, DeviceHostName, sum(Count1)) SQL filter - CategoryType=200