turbot/tailpipe-mod-aws-vpc-flow-log-detections

Query: Top 10 ENIs by Traffic

Description

List the top 10 ENIs generating the most traffic.

Usage

powerpipe query aws_vpc_flow_log_detections.query.activity_dashboard_top_enis_by_traffic

Tailpipe Tables

SQL

select
interface_id as "ENI",
vpc_id as "VPC",
subnet_id as "Subnet",
account_id as "Account",
region as "Region",
count(*) as "Records",
coalesce(sum(bytes), 0) as "Total Bytes",
coalesce(sum(packets), 0) as "Total Packets",
max(start_time) as "Last Seen"
from
aws_vpc_flow_log
where
interface_id is not null
group by
interface_id,
vpc_id,
subnet_id,
account_id,
region
order by
"Records" desc
limit 10;

Dashboards

The query is used in the dashboards: