That depends on the field in which you store information regarding source name. Let use example of field name "host".
In discover module you can simply click on "host" field and you will see top sources from last 500 documents.
if you click Visualize at the bottom you'll go to visualization,which shows you more detailed view.
In SIEM module just click on "Agents" tab and you'll see table:
