@cryptotaxi247 / CoPilot / commits / 69d5dc81

precommit fixes final

Taylor committed Apr 16, 2024 at 13:55 UTC 69d5dc81cfe97284b47fe75b80cdd4a7b8a13e66
1 file changed +1862 -1889
backend/app/connectors/grafana/dashboards/CarbonBlack/summary.json
+1862 -1889
@@ -1,1891 +1,1864 @@
1 {
2 - "annotations": {
3 - "list": [
4 - {
5 - "builtIn": 1,
6 - "datasource": {
7 - "type": "grafana",
8 - "uid": "-- Grafana --"
9 - },
10 - "enable": true,
11 - "hide": true,
12 - "iconColor": "rgba(0, 211, 255, 1)",
13 - "name": "Annotations & Alerts",
14 - "type": "dashboard"
15 - }
16 - ]
17 - },
18 - "editable": false,
19 - "fiscalYearStartMonth": 0,
20 - "graphTooltip": 0,
21 - "id": null,
22 - "links": [],
23 - "panels": [
24 - {
25 - "datasource": {
26 - "type": "grafana-opensearch-datasource",
27 - "uid": "replace_datasource_uid"
28 - },
29 - "fieldConfig": {
30 - "defaults": {
31 - "mappings": [
32 - {
33 - "options": {
34 - "match": "null",
35 - "result": {
36 - "text": "N/A"
37 - }
38 - },
39 - "type": "special"
40 - }
41 - ],
42 - "thresholds": {
43 - "mode": "absolute",
44 - "steps": [
45 - {
46 - "color": "red",
47 - "value": null
48 - }
49 - ]
50 - },
51 - "unit": "locale"
52 - },
53 - "overrides": []
54 - },
55 - "gridPos": {
56 - "h": 6,
57 - "w": 3,
58 - "x": 0,
59 - "y": 0
60 - },
61 - "id": 3,
62 - "options": {
63 - "colorMode": "value",
64 - "graphMode": "area",
65 - "justifyMode": "auto",
66 - "orientation": "horizontal",
67 - "reduceOptions": {
68 - "calcs": [
69 - "sum"
70 - ],
71 - "fields": "",
72 - "values": false
73 - },
74 - "showPercentChange": false,
75 - "text": {},
76 - "textMode": "auto",
77 - "wideLayout": true
78 - },
79 - "pluginVersion": "10.4.1",
80 - "targets": [
81 - {
82 - "bucketAggs": [
83 - {
84 - "$$hashKey": "object:331",
85 - "field": "timestamp",
86 - "id": "2",
87 - "settings": {
88 - "interval": "auto",
89 - "min_doc_count": 0,
90 - "trimEdges": 0
91 - },
92 - "type": "date_histogram"
93 - }
94 - ],
95 - "datasource": {
96 - "type": "grafana-opensearch-datasource",
97 - "uid": "replace_datasource_uid"
98 - },
99 - "metrics": [
100 - {
101 - "$$hashKey": "object:329",
102 - "field": "select field",
103 - "id": "1",
104 - "type": "count"
105 - }
106 - ],
107 - "query": "device_name:$device AND severity:$severity AND mdr_alert:true",
108 - "refId": "A",
109 - "timeField": "timestamp"
110 - }
111 - ],
112 - "title": "MDR ALERTS (TOTAL)",
113 - "type": "stat"
114 - },
115 - {
116 - "datasource": {
117 - "type": "grafana-opensearch-datasource",
118 - "uid": "replace_datasource_uid"
119 - },
120 - "fieldConfig": {
121 - "defaults": {
122 - "color": {
123 - "mode": "palette-classic"
124 - },
125 - "custom": {
126 - "hideFrom": {
127 - "legend": false,
128 - "tooltip": false,
129 - "viz": false
130 - }
131 - },
132 - "decimals": 0,
133 - "mappings": [],
134 - "unit": "short"
135 - },
136 - "overrides": [
137 - {
138 - "matcher": {
139 - "id": "byName",
140 - "options": "1"
141 - },
142 - "properties": [
143 - {
144 - "id": "color",
145 - "value": {
146 - "fixedColor": "#C8F2C2",
147 - "mode": "fixed"
148 - }
149 - }
150 - ]
151 - },
152 - {
153 - "matcher": {
154 - "id": "byName",
155 - "options": "2"
156 - },
157 - "properties": [
158 - {
159 - "id": "color",
160 - "value": {
161 - "fixedColor": "#96D98D",
162 - "mode": "fixed"
163 - }
164 - }
165 - ]
166 - },
167 - {
168 - "matcher": {
169 - "id": "byName",
170 - "options": "3"
171 - },
172 - "properties": [
173 - {
174 - "id": "color",
175 - "value": {
176 - "fixedColor": "#56A64B",
177 - "mode": "fixed"
178 - }
179 - }
180 - ]
181 - },
182 - {
183 - "matcher": {
184 - "id": "byName",
185 - "options": "4"
186 - },
187 - "properties": [
188 - {
189 - "id": "color",
190 - "value": {
191 - "fixedColor": "#37872D",
192 - "mode": "fixed"
193 - }
194 - }
195 - ]
196 - },
197 - {
198 - "matcher": {
199 - "id": "byName",
200 - "options": "5"
201 - },
202 - "properties": [
203 - {
204 - "id": "color",
205 - "value": {
206 - "fixedColor": "#FFF899",
207 - "mode": "fixed"
208 - }
209 - }
210 - ]
211 - },
212 - {
213 - "matcher": {
214 - "id": "byName",
215 - "options": "7"
216 - },
217 - "properties": [
218 - {
219 - "id": "color",
220 - "value": {
221 - "fixedColor": "#F2CC0C",
222 - "mode": "fixed"
223 - }
224 - }
225 - ]
226 - },
227 - {
228 - "matcher": {
229 - "id": "byName",
230 - "options": "9"
231 - },
232 - "properties": [
233 - {
234 - "id": "color",
235 - "value": {
236 - "fixedColor": "#FF9830",
237 - "mode": "fixed"
238 - }
239 - }
240 - ]
241 - },
242 - {
243 - "matcher": {
244 - "id": "byName",
245 - "options": "10"
246 - },
247 - "properties": [
248 - {
249 - "id": "color",
250 - "value": {
251 - "fixedColor": "#FF9830",
252 - "mode": "fixed"
253 - }
254 - }
255 - ]
256 - },
257 - {
258 - "matcher": {
259 - "id": "byName",
260 - "options": "12"
261 - },
262 - "properties": [
263 - {
264 - "id": "color",
265 - "value": {
266 - "fixedColor": "#F2495C",
267 - "mode": "fixed"
268 - }
269 - }
270 - ]
271 - },
272 - {
273 - "matcher": {
274 - "id": "byName",
275 - "options": "13"
276 - },
277 - "properties": [
278 - {
279 - "id": "color",
280 - "value": {
281 - "fixedColor": "#FF7383",
282 - "mode": "fixed"
283 - }
284 - }
285 - ]
286 - }
287 - ]
288 - },
289 - "gridPos": {
290 - "h": 12,
291 - "w": 4,
292 - "x": 3,
293 - "y": 0
294 - },
295 - "id": 7,
296 - "maxDataPoints": 3,
297 - "options": {
298 - "displayLabels": [],
299 - "legend": {
300 - "calcs": [],
301 - "displayMode": "table",
302 - "placement": "right",
303 - "showLegend": true,
304 - "values": [
305 - "value",
306 - "percent"
307 - ]
308 - },
309 - "pieType": "donut",
310 - "reduceOptions": {
311 - "calcs": [
312 - "sum"
313 - ],
314 - "fields": "",
315 - "values": false
316 - },
317 - "text": {},
318 - "tooltip": {
319 - "mode": "single",
320 - "sort": "none"
321 - }
322 - },
323 - "targets": [
324 - {
325 - "bucketAggs": [
326 - {
327 - "$$hashKey": "object:235",
328 - "fake": true,
329 - "field": "severity",
330 - "id": "3",
331 - "settings": {
332 - "min_doc_count": 1,
333 - "order": "desc",
334 - "orderBy": "_count",
335 - "size": "10"
336 - },
337 - "type": "terms"
338 - },
339 - {
340 - "$$hashKey": "object:236",
341 - "field": "timestamp",
342 - "id": "2",
343 - "settings": {
344 - "interval": "auto",
345 - "min_doc_count": 0,
346 - "trimEdges": 0
347 - },
348 - "type": "date_histogram"
349 - }
350 - ],
351 - "datasource": {
352 - "type": "grafana-opensearch-datasource",
353 - "uid": "replace_datasource_uid"
354 - },
355 - "metrics": [
356 - {
357 - "$$hashKey": "object:233",
358 - "field": "select field",
359 - "id": "1",
360 - "meta": {},
361 - "settings": {},
362 - "type": "count"
363 - }
364 - ],
365 - "query": "device_name:$device AND severity:$severity",
366 - "refId": "A",
367 - "timeField": "timestamp"
368 - }
369 - ],
370 - "title": "SECURITY EVENTS BY SEVERITY",
371 - "type": "piechart"
372 - },
373 - {
374 - "datasource": {
375 - "type": "grafana-opensearch-datasource",
376 - "uid": "replace_datasource_uid"
377 - },
378 - "fieldConfig": {
379 - "defaults": {
380 - "color": {
381 - "mode": "palette-classic"
382 - },
383 - "custom": {
384 - "hideFrom": {
385 - "legend": false,
386 - "tooltip": false,
387 - "viz": false
388 - }
389 - },
390 - "decimals": 0,
391 - "mappings": [],
392 - "unit": "short"
393 - },
394 - "overrides": [
395 - {
396 - "matcher": {
397 - "id": "byName",
398 - "options": "1"
399 - },
400 - "properties": [
401 - {
402 - "id": "color",
403 - "value": {
404 - "fixedColor": "#C8F2C2",
405 - "mode": "fixed"
406 - }
407 - }
408 - ]
409 - },
410 - {
411 - "matcher": {
412 - "id": "byName",
413 - "options": "2"
414 - },
415 - "properties": [
416 - {
417 - "id": "color",
418 - "value": {
419 - "fixedColor": "#96D98D",
420 - "mode": "fixed"
421 - }
422 - }
423 - ]
424 - },
425 - {
426 - "matcher": {
427 - "id": "byName",
428 - "options": "3"
429 - },
430 - "properties": [
431 - {
432 - "id": "color",
433 - "value": {
434 - "fixedColor": "#56A64B",
435 - "mode": "fixed"
436 - }
437 - }
438 - ]
439 - },
440 - {
441 - "matcher": {
442 - "id": "byName",
443 - "options": "4"
444 - },
445 - "properties": [
446 - {
447 - "id": "color",
448 - "value": {
449 - "fixedColor": "#37872D",
450 - "mode": "fixed"
451 - }
452 - }
453 - ]
454 - },
455 - {
456 - "matcher": {
457 - "id": "byName",
458 - "options": "5"
459 - },
460 - "properties": [
461 - {
462 - "id": "color",
463 - "value": {
464 - "fixedColor": "#FFF899",
465 - "mode": "fixed"
466 - }
467 - }
468 - ]
469 - },
470 - {
471 - "matcher": {
472 - "id": "byName",
473 - "options": "7"
474 - },
475 - "properties": [
476 - {
477 - "id": "color",
478 - "value": {
479 - "fixedColor": "#F2CC0C",
480 - "mode": "fixed"
481 - }
482 - }
483 - ]
484 - },
485 - {
486 - "matcher": {
487 - "id": "byName",
488 - "options": "9"
489 - },
490 - "properties": [
491 - {
492 - "id": "color",
493 - "value": {
494 - "fixedColor": "#FF9830",
495 - "mode": "fixed"
496 - }
497 - }
498 - ]
499 - },
500 - {
501 - "matcher": {
502 - "id": "byName",
503 - "options": "10"
504 - },
505 - "properties": [
506 - {
507 - "id": "color",
508 - "value": {
509 - "fixedColor": "#FF9830",
510 - "mode": "fixed"
511 - }
512 - }
513 - ]
514 - },
515 - {
516 - "matcher": {
517 - "id": "byName",
518 - "options": "12"
519 - },
520 - "properties": [
521 - {
522 - "id": "color",
523 - "value": {
524 - "fixedColor": "#F2495C",
525 - "mode": "fixed"
526 - }
527 - }
528 - ]
529 - },
530 - {
531 - "matcher": {
532 - "id": "byName",
533 - "options": "13"
534 - },
535 - "properties": [
536 - {
537 - "id": "color",
538 - "value": {
539 - "fixedColor": "#FF7383",
540 - "mode": "fixed"
541 - }
542 - }
543 - ]
544 - }
545 - ]
546 - },
547 - "gridPos": {
548 - "h": 12,
549 - "w": 4,
550 - "x": 7,
551 - "y": 0
552 - },
553 - "id": 8,
554 - "maxDataPoints": 3,
555 - "options": {
556 - "displayLabels": [],
557 - "legend": {
558 - "calcs": [],
559 - "displayMode": "table",
560 - "placement": "right",
561 - "showLegend": true,
562 - "values": [
563 - "value",
564 - "percent"
565 - ]
566 - },
567 - "pieType": "donut",
568 - "reduceOptions": {
569 - "calcs": [
570 - "sum"
571 - ],
572 - "fields": "",
573 - "values": false
574 - },
575 - "text": {},
576 - "tooltip": {
577 - "mode": "single",
578 - "sort": "none"
579 - }
580 - },
581 - "targets": [
582 - {
583 - "bucketAggs": [
584 - {
585 - "$$hashKey": "object:235",
586 - "fake": true,
587 - "field": "attack_tactic",
588 - "id": "3",
589 - "settings": {
590 - "min_doc_count": 1,
591 - "order": "desc",
592 - "orderBy": "_count",
593 - "size": "10"
594 - },
595 - "type": "terms"
596 - },
597 - {
598 - "$$hashKey": "object:236",
599 - "field": "timestamp",
600 - "id": "2",
601 - "settings": {
602 - "interval": "auto",
603 - "min_doc_count": 0,
604 - "trimEdges": 0
605 - },
606 - "type": "date_histogram"
607 - }
608 - ],
609 - "datasource": {
610 - "type": "grafana-opensearch-datasource",
611 - "uid": "replace_datasource_uid"
612 - },
613 - "metrics": [
614 - {
615 - "$$hashKey": "object:233",
616 - "field": "select field",
617 - "id": "1",
618 - "meta": {},
619 - "settings": {},
620 - "type": "count"
621 - }
622 - ],
623 - "query": "device_name:$device AND severity:$severity",
624 - "refId": "A",
625 - "timeField": "timestamp"
626 - }
627 - ],
628 - "title": "SECURITY EVENTS BY MITRE ID",
629 - "type": "piechart"
630 - },
631 - {
632 - "datasource": {
633 - "type": "grafana-opensearch-datasource",
634 - "uid": "replace_datasource_uid"
635 - },
636 - "fieldConfig": {
637 - "defaults": {
638 - "color": {
639 - "mode": "palette-classic"
640 - },
641 - "custom": {
642 - "hideFrom": {
643 - "legend": false,
644 - "tooltip": false,
645 - "viz": false
646 - }
647 - },
648 - "decimals": 0,
649 - "mappings": [],
650 - "unit": "short"
651 - },
652 - "overrides": [
653 - {
654 - "matcher": {
655 - "id": "byName",
656 - "options": "1"
657 - },
658 - "properties": [
659 - {
660 - "id": "color",
661 - "value": {
662 - "fixedColor": "#C8F2C2",
663 - "mode": "fixed"
664 - }
665 - }
666 - ]
667 - },
668 - {
669 - "matcher": {
670 - "id": "byName",
671 - "options": "2"
672 - },
673 - "properties": [
674 - {
675 - "id": "color",
676 - "value": {
677 - "fixedColor": "#96D98D",
678 - "mode": "fixed"
679 - }
680 - }
681 - ]
682 - },
683 - {
684 - "matcher": {
685 - "id": "byName",
686 - "options": "3"
687 - },
688 - "properties": [
689 - {
690 - "id": "color",
691 - "value": {
692 - "fixedColor": "#56A64B",
693 - "mode": "fixed"
694 - }
695 - }
696 - ]
697 - },
698 - {
699 - "matcher": {
700 - "id": "byName",
701 - "options": "4"
702 - },
703 - "properties": [
704 - {
705 - "id": "color",
706 - "value": {
707 - "fixedColor": "#37872D",
708 - "mode": "fixed"
709 - }
710 - }
711 - ]
712 - },
713 - {
714 - "matcher": {
715 - "id": "byName",
716 - "options": "5"
717 - },
718 - "properties": [
719 - {
720 - "id": "color",
721 - "value": {
722 - "fixedColor": "#FFF899",
723 - "mode": "fixed"
724 - }
725 - }
726 - ]
727 - },
728 - {
729 - "matcher": {
730 - "id": "byName",
731 - "options": "7"
732 - },
733 - "properties": [
734 - {
735 - "id": "color",
736 - "value": {
737 - "fixedColor": "#F2CC0C",
738 - "mode": "fixed"
739 - }
740 - }
741 - ]
742 - },
743 - {
744 - "matcher": {
745 - "id": "byName",
746 - "options": "9"
747 - },
748 - "properties": [
749 - {
750 - "id": "color",
751 - "value": {
752 - "fixedColor": "#FF9830",
753 - "mode": "fixed"
754 - }
755 - }
756 - ]
757 - },
758 - {
759 - "matcher": {
760 - "id": "byName",
761 - "options": "10"
762 - },
763 - "properties": [
764 - {
765 - "id": "color",
766 - "value": {
767 - "fixedColor": "#FF9830",
768 - "mode": "fixed"
769 - }
770 - }
771 - ]
772 - },
773 - {
774 - "matcher": {
775 - "id": "byName",
776 - "options": "12"
777 - },
778 - "properties": [
779 - {
780 - "id": "color",
781 - "value": {
782 - "fixedColor": "#F2495C",
783 - "mode": "fixed"
784 - }
785 - }
786 - ]
787 - },
788 - {
789 - "matcher": {
790 - "id": "byName",
791 - "options": "13"
792 - },
793 - "properties": [
794 - {
795 - "id": "color",
796 - "value": {
797 - "fixedColor": "#FF7383",
798 - "mode": "fixed"
799 - }
800 - }
801 - ]
802 - },
803 - {
804 - "matcher": {
805 - "id": "byName",
806 - "options": "ALLOW"
807 - },
808 - "properties": [
809 - {
810 - "id": "color",
811 - "value": {
812 - "fixedColor": "super-light-red",
813 - "mode": "fixed"
814 - }
815 - }
816 - ]
817 - },
818 - {
819 - "matcher": {
820 - "id": "byName",
821 - "options": "DENY"
822 - },
823 - "properties": [
824 - {
825 - "id": "color",
826 - "value": {
827 - "fixedColor": "green",
828 - "mode": "fixed"
829 - }
830 - }
831 - ]
832 - }
833 - ]
834 - },
835 - "gridPos": {
836 - "h": 12,
837 - "w": 4,
838 - "x": 11,
839 - "y": 0
840 - },
841 - "id": 12,
842 - "maxDataPoints": 3,
843 - "options": {
844 - "displayLabels": [],
845 - "legend": {
846 - "calcs": [],
847 - "displayMode": "table",
848 - "placement": "right",
849 - "showLegend": true,
850 - "values": [
851 - "value",
852 - "percent"
853 - ]
854 - },
855 - "pieType": "donut",
856 - "reduceOptions": {
857 - "calcs": [
858 - "sum"
859 - ],
860 - "fields": "",
861 - "values": false
862 - },
863 - "text": {},
864 - "tooltip": {
865 - "mode": "single",
866 - "sort": "none"
867 - }
868 - },
869 - "targets": [
870 - {
871 - "bucketAggs": [
872 - {
873 - "$$hashKey": "object:235",
874 - "fake": true,
875 - "field": "sensor_action",
876 - "id": "3",
877 - "settings": {
878 - "min_doc_count": 1,
879 - "order": "desc",
880 - "orderBy": "_count",
881 - "size": "10"
882 - },
883 - "type": "terms"
884 - },
885 - {
886 - "$$hashKey": "object:236",
887 - "field": "timestamp",
888 - "id": "2",
889 - "settings": {
890 - "interval": "auto",
891 - "min_doc_count": 0,
892 - "trimEdges": 0
893 - },
894 - "type": "date_histogram"
895 - }
896 - ],
897 - "datasource": {
898 - "type": "grafana-opensearch-datasource",
899 - "uid": "replace_datasource_uid"
900 - },
901 - "metrics": [
902 - {
903 - "$$hashKey": "object:233",
904 - "field": "select field",
905 - "id": "1",
906 - "meta": {},
907 - "settings": {},
908 - "type": "count"
909 - }
910 - ],
911 - "query": "device_name:$device AND severity:$severity",
912 - "refId": "A",
913 - "timeField": "timestamp"
914 - }
915 - ],
916 - "title": "SECURITY EVENTS BY SENSOR ACTION",
917 - "type": "piechart"
918 - },
919 - {
920 - "datasource": {
921 - "type": "grafana-opensearch-datasource",
922 - "uid": "replace_datasource_uid"
923 - },
924 - "fieldConfig": {
925 - "defaults": {
926 - "mappings": [],
927 - "thresholds": {
928 - "mode": "absolute",
929 - "steps": [
930 - {
931 - "color": "green",
932 - "value": null
933 - },
934 - {
935 - "color": "red",
936 - "value": 80
937 - }
938 - ]
939 - }
940 - },
941 - "overrides": []
942 - },
943 - "gridPos": {
944 - "h": 12,
945 - "w": 9,
946 - "x": 15,
947 - "y": 0
948 - },
949 - "id": 9,
950 - "options": {
951 - "displayMode": "gradient",
952 - "maxVizHeight": 300,
953 - "minVizHeight": 10,
954 - "minVizWidth": 0,
955 - "namePlacement": "auto",
956 - "orientation": "horizontal",
957 - "reduceOptions": {
958 - "calcs": [
959 - "sum"
960 - ],
961 - "fields": "",
962 - "values": false
963 - },
964 - "showUnfilled": true,
965 - "sizing": "auto",
966 - "text": {},
967 - "valueMode": "color"
968 - },
969 - "pluginVersion": "10.4.1",
970 - "targets": [
971 - {
972 - "bucketAggs": [
973 - {
974 - "fake": true,
975 - "field": "reason",
976 - "id": "6",
977 - "settings": {
978 - "min_doc_count": 1,
979 - "order": "desc",
980 - "orderBy": "_count",
981 - "size": "10"
982 - },
983 - "type": "terms"
984 - },
985 - {
986 - "fake": true,
987 - "field": "timestamp",
988 - "id": "5",
989 - "settings": {
990 - "interval": "auto",
991 - "min_doc_count": 0,
992 - "trimEdges": 0
993 - },
994 - "type": "date_histogram"
995 - }
996 - ],
997 - "datasource": {
998 - "type": "grafana-opensearch-datasource",
999 - "uid": "replace_datasource_uid"
1000 - },
1001 - "metrics": [
1002 - {
1003 - "field": "type",
1004 - "id": "1",
1005 - "meta": {},
1006 - "settings": {},
1007 - "type": "count"
1008 - }
1009 - ],
1010 - "query": "device_name:$device AND severity:$severity",
1011 - "refId": "A",
1012 - "timeField": "timestamp"
1013 - }
1014 - ],
1015 - "title": "TOP 10 DETECTIONS",
1016 - "type": "bargauge"
1017 - },
1018 - {
1019 - "datasource": {
1020 - "type": "grafana-opensearch-datasource",
1021 - "uid": "replace_datasource_uid"
1022 - },
1023 - "fieldConfig": {
1024 - "defaults": {
1025 - "mappings": [
1026 - {
1027 - "options": {
1028 - "match": "null",
1029 - "result": {
1030 - "text": "N/A"
1031 - }
1032 - },
1033 - "type": "special"
1034 - }
1035 - ],
1036 - "thresholds": {
1037 - "mode": "absolute",
1038 - "steps": [
1039 - {
1040 - "color": "orange",
1041 - "value": null
1042 - }
1043 - ]
1044 - },
1045 - "unit": "locale"
1046 - },
1047 - "overrides": []
1048 - },
1049 - "gridPos": {
1050 - "h": 6,
1051 - "w": 3,
1052 - "x": 0,
1053 - "y": 6
1054 - },
1055 - "id": 2,
1056 - "options": {
1057 - "colorMode": "value",
1058 - "graphMode": "area",
1059 - "justifyMode": "auto",
1060 - "orientation": "horizontal",
1061 - "reduceOptions": {
1062 - "calcs": [
1063 - "sum"
1064 - ],
1065 - "fields": "",
1066 - "values": false
1067 - },
1068 - "showPercentChange": false,
1069 - "text": {},
1070 - "textMode": "auto",
1071 - "wideLayout": true
1072 - },
1073 - "pluginVersion": "10.4.1",
1074 - "targets": [
1075 - {
1076 - "bucketAggs": [
1077 - {
1078 - "$$hashKey": "object:331",
1079 - "field": "timestamp",
1080 - "id": "2",
1081 - "settings": {
1082 - "interval": "auto",
1083 - "min_doc_count": 0,
1084 - "trimEdges": 0
1085 - },
1086 - "type": "date_histogram"
1087 - }
1088 - ],
1089 - "datasource": {
1090 - "type": "grafana-opensearch-datasource",
1091 - "uid": "replace_datasource_uid"
1092 - },
1093 - "metrics": [
1094 - {
1095 - "$$hashKey": "object:329",
1096 - "field": "select field",
1097 - "id": "1",
1098 - "type": "count"
1099 - }
1100 - ],
1101 - "query": "device_name:$device AND severity:$severity",
1102 - "refId": "A",
1103 - "timeField": "timestamp"
1104 - }
1105 - ],
1106 - "title": "EVENTS (TOTAL)",
1107 - "type": "stat"
1108 - },
1109 - {
1110 - "datasource": {
1111 - "type": "grafana-opensearch-datasource",
1112 - "uid": "replace_datasource_uid"
1113 - },
1114 - "fieldConfig": {
1115 - "defaults": {
1116 - "color": {
1117 - "mode": "thresholds"
1118 - },
1119 - "custom": {
1120 - "align": "auto",
1121 - "cellOptions": {
1122 - "type": "auto"
1123 - },
1124 - "inspect": false
1125 - },
1126 - "mappings": [],
1127 - "thresholds": {
1128 - "mode": "absolute",
1129 - "steps": [
1130 - {
1131 - "color": "green",
1132 - "value": null
1133 - },
1134 - {
1135 - "color": "red",
1136 - "value": 80
1137 - }
1138 - ]
1139 - }
1140 - },
1141 - "overrides": [
1142 - {
1143 - "matcher": {
1144 - "id": "byName",
1145 - "options": "process_image"
1146 - },
1147 - "properties": [
1148 - {
1149 - "id": "custom.width",
1150 - "value": 657
1151 - }
1152 - ]
1153 - }
1154 - ]
1155 - },
1156 - "gridPos": {
1157 - "h": 14,
1158 - "w": 6,
1159 - "x": 0,
1160 - "y": 12
1161 - },
1162 - "id": 10,
1163 - "options": {
1164 - "cellHeight": "sm",
1165 - "footer": {
1166 - "countRows": false,
1167 - "fields": "",
1168 - "reducer": [
1169 - "sum"
1170 - ],
1171 - "show": false
1172 - },
1173 - "showHeader": true,
1174 - "sortBy": []
1175 - },
1176 - "pluginVersion": "10.4.1",
1177 - "targets": [
1178 - {
1179 - "bucketAggs": [
1180 - {
1181 - "fake": true,
1182 - "field": "device_name",
1183 - "id": "6",
1184 - "settings": {
1185 - "min_doc_count": 1,
1186 - "order": "desc",
1187 - "orderBy": "_count",
1188 - "size": "0"
1189 - },
1190 - "type": "terms"
1191 - }
1192 - ],
1193 - "datasource": {
1194 - "type": "grafana-opensearch-datasource",
1195 - "uid": "replace_datasource_uid"
1196 - },
1197 - "metrics": [
1198 - {
1199 - "field": "type",
1200 - "id": "1",
1201 - "meta": {},
1202 - "settings": {},
1203 - "type": "count"
1204 - }
1205 - ],
1206 - "query": "device_name:$device AND severity:$severity",
1207 - "refId": "A",
1208 - "timeField": "timestamp"
1209 - }
1210 - ],
1211 - "title": "DEVICES",
1212 - "type": "table"
1213 - },
1214 - {
1215 - "datasource": {
1216 - "type": "grafana-opensearch-datasource",
1217 - "uid": "replace_datasource_uid"
1218 - },
1219 - "fieldConfig": {
1220 - "defaults": {
1221 - "color": {
1222 - "mode": "palette-classic"
1223 - },
1224 - "custom": {
1225 - "axisBorderShow": false,
1226 - "axisCenteredZero": false,
1227 - "axisColorMode": "text",
1228 - "axisLabel": "",
1229 - "axisPlacement": "auto",
1230 - "barAlignment": 0,
1231 - "drawStyle": "bars",
1232 - "fillOpacity": 0,
1233 - "gradientMode": "none",
1234 - "hideFrom": {
1235 - "legend": false,
1236 - "tooltip": false,
1237 - "viz": false
1238 - },
1239 - "insertNulls": false,
1240 - "lineInterpolation": "linear",
1241 - "lineWidth": 1,
1242 - "pointSize": 5,
1243 - "scaleDistribution": {
1244 - "type": "linear"
1245 - },
1246 - "showPoints": "auto",
1247 - "spanNulls": false,
1248 - "stacking": {
1249 - "group": "A",
1250 - "mode": "normal"
1251 - },
1252 - "thresholdsStyle": {
1253 - "mode": "off"
1254 - }
1255 - },
1256 - "mappings": [],
1257 - "thresholds": {
1258 - "mode": "absolute",
1259 - "steps": [
1260 - {
1261 - "color": "green",
1262 - "value": null
1263 - },
1264 - {
1265 - "color": "red",
1266 - "value": 80
1267 - }
1268 - ]
1269 - }
1270 - },
1271 - "overrides": []
1272 - },
1273 - "gridPos": {
1274 - "h": 14,
1275 - "w": 18,
1276 - "x": 6,
1277 - "y": 12
1278 - },
1279 - "id": 5,
1280 - "options": {
1281 - "legend": {
1282 - "calcs": [],
1283 - "displayMode": "table",
1284 - "placement": "right",
1285 - "showLegend": true
1286 - },
1287 - "tooltip": {
1288 - "mode": "single",
1289 - "sort": "none"
1290 - }
1291 - },
1292 - "targets": [
1293 - {
1294 - "alias": "",
1295 - "bucketAggs": [
1296 - {
1297 - "field": "device_name",
1298 - "id": "3",
1299 - "settings": {
1300 - "min_doc_count": "1",
1301 - "order": "desc",
1302 - "orderBy": "_count",
1303 - "size": "10"
1304 - },
1305 - "type": "terms"
1306 - },
1307 - {
1308 - "field": "timestamp",
1309 - "id": "2",
1310 - "settings": {
1311 - "interval": "5m"
1312 - },
1313 - "type": "date_histogram"
1314 - }
1315 - ],
1316 - "datasource": {
1317 - "type": "grafana-opensearch-datasource",
1318 - "uid": "replace_datasource_uid"
1319 - },
1320 - "metrics": [
1321 - {
1322 - "id": "1",
1323 - "type": "count"
1324 - }
1325 - ],
1326 - "query": "device_name:$device AND severity:$severity",
1327 - "refId": "A",
1328 - "timeField": "timestamp"
1329 - }
1330 - ],
1331 - "title": "EVENTS BY DEVICE (TOP 10) - HISTOGRAM",
1332 - "transparent": true,
1333 - "type": "timeseries"
1334 - },
1335 - {
1336 - "datasource": {
1337 - "type": "grafana-opensearch-datasource",
1338 - "uid": "replace_datasource_uid"
1339 - },
1340 - "fieldConfig": {
1341 - "defaults": {
1342 - "color": {
1343 - "mode": "thresholds"
1344 - },
1345 - "custom": {
1346 - "align": "auto",
1347 - "cellOptions": {
1348 - "type": "auto"
1349 - },
1350 - "inspect": false
1351 - },
1352 - "mappings": [],
1353 - "thresholds": {
1354 - "mode": "absolute",
1355 - "steps": [
1356 - {
1357 - "color": "green",
1358 - "value": null
1359 - },
1360 - {
1361 - "color": "red",
1362 - "value": 80
1363 - }
1364 - ]
1365 - }
1366 - },
1367 - "overrides": [
1368 - {
1369 - "matcher": {
1370 - "id": "byName",
1371 - "options": "process_image"
1372 - },
1373 - "properties": [
1374 - {
1375 - "id": "custom.width",
1376 - "value": 657
1377 - }
1378 - ]
1379 - }
1380 - ]
1381 - },
1382 - "gridPos": {
1383 - "h": 12,
1384 - "w": 6,
1385 - "x": 0,
1386 - "y": 26
1387 - },
1388 - "id": 11,
1389 - "options": {
1390 - "cellHeight": "sm",
1391 - "footer": {
1392 - "countRows": false,
1393 - "fields": "",
1394 - "reducer": [
1395 - "sum"
1396 - ],
1397 - "show": false
1398 - },
1399 - "showHeader": true,
1400 - "sortBy": []
1401 - },
1402 - "pluginVersion": "10.4.1",
1403 - "targets": [
1404 - {
1405 - "bucketAggs": [
1406 - {
1407 - "fake": true,
1408 - "field": "device_username",
1409 - "id": "6",
1410 - "settings": {
1411 - "min_doc_count": 1,
1412 - "order": "desc",
1413 - "orderBy": "_count",
1414 - "size": "0"
1415 - },
1416 - "type": "terms"
1417 - }
1418 - ],
1419 - "datasource": {
1420 - "type": "grafana-opensearch-datasource",
1421 - "uid": "replace_datasource_uid"
1422 - },
1423 - "metrics": [
1424 - {
1425 - "field": "type",
1426 - "id": "1",
1427 - "meta": {},
1428 - "settings": {},
1429 - "type": "count"
1430 - }
1431 - ],
1432 - "query": "device_name:$device AND severity:$severity",
1433 - "refId": "A",
1434 - "timeField": "timestamp"
1435 - }
1436 - ],
1437 - "title": "USER ACCOUNTS",
1438 - "transparent": true,
1439 - "type": "table"
1440 - },
1441 - {
1442 - "datasource": {
1443 - "type": "grafana-opensearch-datasource",
1444 - "uid": "replace_datasource_uid"
1445 - },
1446 - "fieldConfig": {
1447 - "defaults": {
1448 - "color": {
1449 - "mode": "palette-classic"
1450 - },
1451 - "custom": {
1452 - "axisBorderShow": false,
1453 - "axisCenteredZero": false,
1454 - "axisColorMode": "text",
1455 - "axisLabel": "",
1456 - "axisPlacement": "auto",
1457 - "barAlignment": 0,
1458 - "drawStyle": "bars",
1459 - "fillOpacity": 0,
1460 - "gradientMode": "none",
1461 - "hideFrom": {
1462 - "legend": false,
1463 - "tooltip": false,
1464 - "viz": false
1465 - },
1466 - "insertNulls": false,
1467 - "lineInterpolation": "linear",
1468 - "lineWidth": 1,
1469 - "pointSize": 5,
1470 - "scaleDistribution": {
1471 - "type": "linear"
1472 - },
1473 - "showPoints": "auto",
1474 - "spanNulls": false,
1475 - "stacking": {
1476 - "group": "A",
1477 - "mode": "normal"
1478 - },
1479 - "thresholdsStyle": {
1480 - "mode": "off"
1481 - }
1482 - },
1483 - "mappings": [],
1484 - "thresholds": {
1485 - "mode": "absolute",
1486 - "steps": [
1487 - {
1488 - "color": "green",
1489 - "value": null
1490 - },
1491 - {
1492 - "color": "red",
1493 - "value": 80
1494 - }
1495 - ]
1496 - }
1497 - },
1498 - "overrides": []
1499 - },
1500 - "gridPos": {
1501 - "h": 12,
1502 - "w": 18,
1503 - "x": 6,
1504 - "y": 26
1505 - },
1506 - "id": 4,
1507 - "options": {
1508 - "legend": {
1509 - "calcs": [],
1510 - "displayMode": "table",
1511 - "placement": "right",
1512 - "showLegend": true
1513 - },
1514 - "tooltip": {
1515 - "mode": "single",
1516 - "sort": "none"
1517 - }
1518 - },
1519 - "targets": [
1520 - {
1521 - "alias": "",
1522 - "bucketAggs": [
1523 - {
1524 - "field": "severity",
1525 - "id": "3",
1526 - "settings": {
1527 - "min_doc_count": "1",
1528 - "order": "desc",
1529 - "orderBy": "_count",
1530 - "size": "10"
1531 - },
1532 - "type": "terms"
1533 - },
1534 - {
1535 - "field": "timestamp",
1536 - "id": "2",
1537 - "settings": {
1538 - "interval": "5m"
1539 - },
1540 - "type": "date_histogram"
1541 - }
1542 - ],
1543 - "datasource": {
1544 - "type": "grafana-opensearch-datasource",
1545 - "uid": "replace_datasource_uid"
1546 - },
1547 - "metrics": [
1548 - {
1549 - "id": "1",
1550 - "type": "count"
1551 - }
1552 - ],
1553 - "query": "device_name:$device AND severity:$severity",
1554 - "refId": "A",
1555 - "timeField": "timestamp"
1556 - }
1557 - ],
1558 - "title": "EVENTS SEVERITY - HISTOGRAM",
1559 - "type": "timeseries"
1560 - },
1561 - {
1562 - "datasource": {
1563 - "type": "grafana-opensearch-datasource",
1564 - "uid": "replace_datasource_uid"
1565 - },
1566 - "fieldConfig": {
1567 - "defaults": {
1568 - "color": {
1569 - "mode": "thresholds"
1570 - },
1571 - "custom": {
1572 - "align": "auto",
1573 - "cellOptions": {
1574 - "type": "auto"
1575 - },
1576 - "filterable": true,
1577 - "inspect": false
1578 - },
1579 - "mappings": [],
1580 - "thresholds": {
1581 - "mode": "absolute",
1582 - "steps": [
1583 - {
1584 - "color": "green",
1585 - "value": null
1586 - },
1587 - {
1588 - "color": "red",
1589 - "value": 80
1590 - }
1591 - ]
1592 - }
1593 - },
1594 - "overrides": [
1595 - {
1596 - "matcher": {
1597 - "id": "byName",
1598 - "options": "EVENT ID"
1599 - },
1600 - "properties": [
1601 - {
1602 - "id": "links",
1603 - "value": [
1604 - {
1605 - "targetBlank": true,
1606 - "title": "EVENT DETAILS",
1607 - "url": "https://grafana.company.local/explore?left=%7B%22datasource%22:%22CARBONBLACK%22,%22queries%22:%5B%7B%22refId%22:%22A%22,%22query%22:%22_id:${__value.text}%22,%22alias%22:%22%22,%22metrics%22:%5B%7B%22id%22:%221%22,%22type%22:%22logs%22,%22settings%22:%7B%22limit%22:%22500%22%7D%7D%5D,%22bucketAggs%22:%5B%5D,%22timeField%22:%22timestamp%22%7D%5D,%22range%22:%7B%22from%22:%22now-6h%22,%22to%22:%22now%22%7D%7D"
1608 - }
1609 - ]
1610 - }
1611 - ]
1612 - },
1613 - {
1614 - "matcher": {
1615 - "id": "byName",
1616 - "options": "MDR ALERT"
1617 - },
1618 - "properties": [
1619 - {
1620 - "id": "custom.width",
1621 - "value": 126
1622 - }
1623 - ]
1624 - },
1625 - {
1626 - "matcher": {
1627 - "id": "byName",
1628 - "options": "EXT IP COUNTRY"
1629 - },
1630 - "properties": [
1631 - {
1632 - "id": "custom.width",
1633 - "value": 156
1634 - }
1635 - ]
1636 - },
1637 - {
1638 - "matcher": {
1639 - "id": "byName",
1640 - "options": "DEVICE EXT IP"
1641 - },
1642 - "properties": [
1643 - {
1644 - "id": "custom.width",
1645 - "value": 159
1646 - }
1647 - ]
1648 - },
1649 - {
1650 - "matcher": {
1651 - "id": "byName",
1652 - "options": "EVENT TYPE"
1653 - },
1654 - "properties": [
1655 - {
1656 - "id": "custom.width",
1657 - "value": 152
1658 - }
1659 - ]
1660 - },
1661 - {
1662 - "matcher": {
1663 - "id": "byName",
1664 - "options": "MITRE"
1665 - },
1666 - "properties": [
1667 - {
1668 - "id": "custom.width",
1669 - "value": 110
1670 - }
1671 - ]
1672 - },
1673 - {
1674 - "matcher": {
1675 - "id": "byName",
1676 - "options": "SENSOR ACTION"
1677 - },
1678 - "properties": [
1679 - {
1680 - "id": "custom.width",
1681 - "value": 159
1682 - }
1683 - ]
1684 - },
1685 - {
1686 - "matcher": {
1687 - "id": "byName",
1688 - "options": "REASON"
1689 - },
1690 - "properties": [
1691 - {
1692 - "id": "custom.width",
1693 - "value": 403
1694 - }
1695 - ]
1696 - }
1697 - ]
1698 - },
1699 - "gridPos": {
1700 - "h": 17,
1701 - "w": 24,
1702 - "x": 0,
1703 - "y": 38
1704 - },
1705 - "id": 6,
1706 - "options": {
1707 - "cellHeight": "sm",
1708 - "footer": {
1709 - "countRows": false,
1710 - "enablePagination": true,
1711 - "fields": "",
1712 - "reducer": [
1713 - "sum"
1714 - ],
1715 - "show": false
1716 - },
1717 - "showHeader": true,
1718 - "sortBy": []
1719 - },
1720 - "pluginVersion": "10.4.1",
1721 - "targets": [
1722 - {
1723 - "alias": "",
1724 - "bucketAggs": [],
1725 - "datasource": {
1726 - "type": "grafana-opensearch-datasource",
1727 - "uid": "replace_datasource_uid"
1728 - },
1729 - "format": "table",
1730 - "metrics": [
1731 - {
1732 - "id": "1",
1733 - "settings": {
1734 - "order": "desc",
1735 - "size": "500",
1736 - "useTimeRange": true
1737 - },
1738 - "type": "raw_data"
1739 - }
1740 - ],
1741 - "query": "device_name:$device AND severity:$severity",
1742 - "queryType": "lucene",
1743 - "refId": "A",
1744 - "timeField": "timestamp"
1745 - }
1746 - ],
1747 - "title": "CB EVENTS",
1748 - "transformations": [
1749 - {
1750 - "id": "filterFieldsByName",
1751 - "options": {
1752 - "include": {
1753 - "names": [
1754 - "timestamp",
1755 - "_id",
1756 - "attack_tactic",
1757 - "customer_code",
1758 - "device_external_ip",
1759 - "device_external_ip_country_code",
1760 - "device_internal_ip",
1761 - "device_name",
1762 - "device_username",
1763 - "mdr_alert",
1764 - "reason",
1765 - "sensor_action",
1766 - "severity",
1767 - "type"
1768 - ]
1769 - }
1770 - }
1771 - },
1772 - {
1773 - "id": "organize",
1774 - "options": {
1775 - "excludeByName": {},
1776 - "includeByName": {},
1777 - "indexByName": {
1778 - "_id": 1,
1779 - "attack_tactic": 8,
1780 - "customer_code": 9,
1781 - "device_external_ip": 5,
1782 - "device_external_ip_country_code": 6,
1783 - "device_internal_ip": 7,
1784 - "device_name": 3,
1785 - "device_username": 4,
1786 - "mdr_alert": 10,
1787 - "reason": 11,
1788 - "sensor_action": 12,
1789 - "severity": 13,
1790 - "timestamp": 0,
1791 - "type": 2
1792 - },
1793 - "renameByName": {
1794 - "_id": "EVENT ID",
1795 - "attack_tactic": "MITRE",
1796 - "customer_code": "CUSTOMER",
1797 - "device_external_ip": "DEVICE EXT IP",
1798 - "device_external_ip_country_code": "EXT IP COUNTRY",
1799 - "device_internal_ip": "DEVICE INTERNAL IP",
1800 - "device_name": "DEVICE",
1801 - "device_username": "USER",
1802 - "mdr_alert": "MDR ALERT",
1803 - "reason": "REASON",
1804 - "sensor_action": "SENSOR ACTION",
1805 - "severity": "SEVERITY",
1806 - "timestamp": "DATE/TIME",
1807 - "type": "EVENT TYPE"
1808 - }
1809 - }
1810 - }
1811 - ],
1812 - "transparent": true,
1813 - "type": "table"
1814 - }
1815 - ],
1816 - "schemaVersion": 39,
1817 - "tags": [],
1818 - "templating": {
1819 - "list": [
1820 - {
1821 - "datasource": {
1822 - "type": "grafana-opensearch-datasource",
1823 - "uid": "replace_datasource_uid"
1824 - },
1825 - "filters": [],
1826 - "hide": 0,
1827 - "label": "Filters",
1828 - "name": "query0",
1829 - "skipUrlSync": false,
1830 - "type": "adhoc"
1831 - },
1832 - {
1833 - "current": {
1834 - "selected": false,
1835 - "text": "All",
1836 - "value": "$__all"
1837 - },
1838 - "datasource": {
1839 - "type": "grafana-opensearch-datasource",
1840 - "uid": "replace_datasource_uid"
1841 - },
1842 - "definition": "{ \"find\": \"terms\", \"field\": \"severity\", \"query\": \"\"}",
1843 - "hide": 0,
1844 - "includeAll": true,
1845 - "label": "Severity",
1846 - "multi": false,
1847 - "name": "severity",
1848 - "options": [],
1849 - "query": "{ \"find\": \"terms\", \"field\": \"severity\", \"query\": \"\"}",
1850 - "refresh": 1,
1851 - "regex": "",
1852 - "skipUrlSync": false,
1853 - "sort": 0,
1854 - "type": "query"
1855 - },
1856 - {
1857 - "current": {
1858 - "selected": false,
1859 - "text": "All",
1860 - "value": "$__all"
1861 - },
1862 - "datasource": {
1863 - "type": "grafana-opensearch-datasource",
1864 - "uid": "replace_datasource_uid"
1865 - },
1866 - "definition": "{ \"find\": \"terms\", \"field\": \"device_name\", \"query\": \"\"}",
1867 - "hide": 0,
1868 - "includeAll": true,
1869 - "label": "Device",
1870 - "multi": false,
1871 - "name": "device",
1872 - "options": [],
1873 - "query": "{ \"find\": \"terms\", \"field\": \"device_name\", \"query\": \"\"}",
1874 - "refresh": 1,
1875 - "regex": "",
1876 - "skipUrlSync": false,
1877 - "sort": 0,
1878 - "type": "query"
1879 - }
1880 - ]
1881 - },
1882 - "time": {
1883 - "from": "now-24h",
1884 - "to": "now"
1885 - },
1886 - "timepicker": {},
1887 - "timezone": "browser",
1888 - "title": "CARBON BLACK - _SUMMARY",
1889 - "version": 8,
1890 - "weekStart": ""
2 + "annotations": {
3 + "list": [
4 + {
5 + "builtIn": 1,
6 + "datasource": {
7 + "type": "grafana",
8 + "uid": "-- Grafana --"
9 + },
10 + "enable": true,
11 + "hide": true,
12 + "iconColor": "rgba(0, 211, 255, 1)",
13 + "name": "Annotations & Alerts",
14 + "type": "dashboard"
15 + }
16 + ]
17 + },
18 + "editable": false,
19 + "fiscalYearStartMonth": 0,
20 + "graphTooltip": 0,
21 + "id": null,
22 + "links": [],
23 + "panels": [
24 + {
25 + "datasource": {
26 + "type": "grafana-opensearch-datasource",
27 + "uid": "replace_datasource_uid"
28 + },
29 + "fieldConfig": {
30 + "defaults": {
31 + "mappings": [
32 + {
33 + "options": {
34 + "match": "null",
35 + "result": {
36 + "text": "N/A"
37 + }
38 + },
39 + "type": "special"
40 + }
41 + ],
42 + "thresholds": {
43 + "mode": "absolute",
44 + "steps": [
45 + {
46 + "color": "red",
47 + "value": null
48 + }
49 + ]
50 + },
51 + "unit": "locale"
52 + },
53 + "overrides": []
54 + },
55 + "gridPos": {
56 + "h": 6,
57 + "w": 3,
58 + "x": 0,
59 + "y": 0
60 + },
61 + "id": 3,
62 + "options": {
63 + "colorMode": "value",
64 + "graphMode": "area",
65 + "justifyMode": "auto",
66 + "orientation": "horizontal",
67 + "reduceOptions": {
68 + "calcs": ["sum"],
69 + "fields": "",
70 + "values": false
71 + },
72 + "showPercentChange": false,
73 + "text": {},
74 + "textMode": "auto",
75 + "wideLayout": true
76 + },
77 + "pluginVersion": "10.4.1",
78 + "targets": [
79 + {
80 + "bucketAggs": [
81 + {
82 + "$$hashKey": "object:331",
83 + "field": "timestamp",
84 + "id": "2",
85 + "settings": {
86 + "interval": "auto",
87 + "min_doc_count": 0,
88 + "trimEdges": 0
89 + },
90 + "type": "date_histogram"
91 + }
92 + ],
93 + "datasource": {
94 + "type": "grafana-opensearch-datasource",
95 + "uid": "replace_datasource_uid"
96 + },
97 + "metrics": [
98 + {
99 + "$$hashKey": "object:329",
100 + "field": "select field",
101 + "id": "1",
102 + "type": "count"
103 + }
104 + ],
105 + "query": "device_name:$device AND severity:$severity AND mdr_alert:true",
106 + "refId": "A",
107 + "timeField": "timestamp"
108 + }
109 + ],
110 + "title": "MDR ALERTS (TOTAL)",
111 + "type": "stat"
112 + },
113 + {
114 + "datasource": {
115 + "type": "grafana-opensearch-datasource",
116 + "uid": "replace_datasource_uid"
117 + },
118 + "fieldConfig": {
119 + "defaults": {
120 + "color": {
121 + "mode": "palette-classic"
122 + },
123 + "custom": {
124 + "hideFrom": {
125 + "legend": false,
126 + "tooltip": false,
127 + "viz": false
128 + }
129 + },
130 + "decimals": 0,
131 + "mappings": [],
132 + "unit": "short"
133 + },
134 + "overrides": [
135 + {
136 + "matcher": {
137 + "id": "byName",
138 + "options": "1"
139 + },
140 + "properties": [
141 + {
142 + "id": "color",
143 + "value": {
144 + "fixedColor": "#C8F2C2",
145 + "mode": "fixed"
146 + }
147 + }
148 + ]
149 + },
150 + {
151 + "matcher": {
152 + "id": "byName",
153 + "options": "2"
154 + },
155 + "properties": [
156 + {
157 + "id": "color",
158 + "value": {
159 + "fixedColor": "#96D98D",
160 + "mode": "fixed"
161 + }
162 + }
163 + ]
164 + },
165 + {
166 + "matcher": {
167 + "id": "byName",
168 + "options": "3"
169 + },
170 + "properties": [
171 + {
172 + "id": "color",
173 + "value": {
174 + "fixedColor": "#56A64B",
175 + "mode": "fixed"
176 + }
177 + }
178 + ]
179 + },
180 + {
181 + "matcher": {
182 + "id": "byName",
183 + "options": "4"
184 + },
185 + "properties": [
186 + {
187 + "id": "color",
188 + "value": {
189 + "fixedColor": "#37872D",
190 + "mode": "fixed"
191 + }
192 + }
193 + ]
194 + },
195 + {
196 + "matcher": {
197 + "id": "byName",
198 + "options": "5"
199 + },
200 + "properties": [
201 + {
202 + "id": "color",
203 + "value": {
204 + "fixedColor": "#FFF899",
205 + "mode": "fixed"
206 + }
207 + }
208 + ]
209 + },
210 + {
211 + "matcher": {
212 + "id": "byName",
213 + "options": "7"
214 + },
215 + "properties": [
216 + {
217 + "id": "color",
218 + "value": {
219 + "fixedColor": "#F2CC0C",
220 + "mode": "fixed"
221 + }
222 + }
223 + ]
224 + },
225 + {
226 + "matcher": {
227 + "id": "byName",
228 + "options": "9"
229 + },
230 + "properties": [
231 + {
232 + "id": "color",
233 + "value": {
234 + "fixedColor": "#FF9830",
235 + "mode": "fixed"
236 + }
237 + }
238 + ]
239 + },
240 + {
241 + "matcher": {
242 + "id": "byName",
243 + "options": "10"
244 + },
245 + "properties": [
246 + {
247 + "id": "color",
248 + "value": {
249 + "fixedColor": "#FF9830",
250 + "mode": "fixed"
251 + }
252 + }
253 + ]
254 + },
255 + {
256 + "matcher": {
257 + "id": "byName",
258 + "options": "12"
259 + },
260 + "properties": [
261 + {
262 + "id": "color",
263 + "value": {
264 + "fixedColor": "#F2495C",
265 + "mode": "fixed"
266 + }
267 + }
268 + ]
269 + },
270 + {
271 + "matcher": {
272 + "id": "byName",
273 + "options": "13"
274 + },
275 + "properties": [
276 + {
277 + "id": "color",
278 + "value": {
279 + "fixedColor": "#FF7383",
280 + "mode": "fixed"
281 + }
282 + }
283 + ]
284 + }
285 + ]
286 + },
287 + "gridPos": {
288 + "h": 12,
289 + "w": 4,
290 + "x": 3,
291 + "y": 0
292 + },
293 + "id": 7,
294 + "maxDataPoints": 3,
295 + "options": {
296 + "displayLabels": [],
297 + "legend": {
298 + "calcs": [],
299 + "displayMode": "table",
300 + "placement": "right",
301 + "showLegend": true,
302 + "values": ["value", "percent"]
303 + },
304 + "pieType": "donut",
305 + "reduceOptions": {
306 + "calcs": ["sum"],
307 + "fields": "",
308 + "values": false
309 + },
310 + "text": {},
311 + "tooltip": {
312 + "mode": "single",
313 + "sort": "none"
314 + }
315 + },
316 + "targets": [
317 + {
318 + "bucketAggs": [
319 + {
320 + "$$hashKey": "object:235",
321 + "fake": true,
322 + "field": "severity",
323 + "id": "3",
324 + "settings": {
325 + "min_doc_count": 1,
326 + "order": "desc",
327 + "orderBy": "_count",
328 + "size": "10"
329 + },
330 + "type": "terms"
331 + },
332 + {
333 + "$$hashKey": "object:236",
334 + "field": "timestamp",
335 + "id": "2",
336 + "settings": {
337 + "interval": "auto",
338 + "min_doc_count": 0,
339 + "trimEdges": 0
340 + },
341 + "type": "date_histogram"
342 + }
343 + ],
344 + "datasource": {
345 + "type": "grafana-opensearch-datasource",
346 + "uid": "replace_datasource_uid"
347 + },
348 + "metrics": [
349 + {
350 + "$$hashKey": "object:233",
351 + "field": "select field",
352 + "id": "1",
353 + "meta": {},
354 + "settings": {},
355 + "type": "count"
356 + }
357 + ],
358 + "query": "device_name:$device AND severity:$severity",
359 + "refId": "A",
360 + "timeField": "timestamp"
361 + }
362 + ],
363 + "title": "SECURITY EVENTS BY SEVERITY",
364 + "type": "piechart"
365 + },
366 + {
367 + "datasource": {
368 + "type": "grafana-opensearch-datasource",
369 + "uid": "replace_datasource_uid"
370 + },
371 + "fieldConfig": {
372 + "defaults": {
373 + "color": {
374 + "mode": "palette-classic"
375 + },
376 + "custom": {
377 + "hideFrom": {
378 + "legend": false,
379 + "tooltip": false,
380 + "viz": false
381 + }
382 + },
383 + "decimals": 0,
384 + "mappings": [],
385 + "unit": "short"
386 + },
387 + "overrides": [
388 + {
389 + "matcher": {
390 + "id": "byName",
391 + "options": "1"
392 + },
393 + "properties": [
394 + {
395 + "id": "color",
396 + "value": {
397 + "fixedColor": "#C8F2C2",
398 + "mode": "fixed"
399 + }
400 + }
401 + ]
402 + },
403 + {
404 + "matcher": {
405 + "id": "byName",
406 + "options": "2"
407 + },
408 + "properties": [
409 + {
410 + "id": "color",
411 + "value": {
412 + "fixedColor": "#96D98D",
413 + "mode": "fixed"
414 + }
415 + }
416 + ]
417 + },
418 + {
419 + "matcher": {
420 + "id": "byName",
421 + "options": "3"
422 + },
423 + "properties": [
424 + {
425 + "id": "color",
426 + "value": {
427 + "fixedColor": "#56A64B",
428 + "mode": "fixed"
429 + }
430 + }
431 + ]
432 + },
433 + {
434 + "matcher": {
435 + "id": "byName",
436 + "options": "4"
437 + },
438 + "properties": [
439 + {
440 + "id": "color",
441 + "value": {
442 + "fixedColor": "#37872D",
443 + "mode": "fixed"
444 + }
445 + }
446 + ]
447 + },
448 + {
449 + "matcher": {
450 + "id": "byName",
451 + "options": "5"
452 + },
453 + "properties": [
454 + {
455 + "id": "color",
456 + "value": {
457 + "fixedColor": "#FFF899",
458 + "mode": "fixed"
459 + }
460 + }
461 + ]
462 + },
463 + {
464 + "matcher": {
465 + "id": "byName",
466 + "options": "7"
467 + },
468 + "properties": [
469 + {
470 + "id": "color",
471 + "value": {
472 + "fixedColor": "#F2CC0C",
473 + "mode": "fixed"
474 + }
475 + }
476 + ]
477 + },
478 + {
479 + "matcher": {
480 + "id": "byName",
481 + "options": "9"
482 + },
483 + "properties": [
484 + {
485 + "id": "color",
486 + "value": {
487 + "fixedColor": "#FF9830",
488 + "mode": "fixed"
489 + }
490 + }
491 + ]
492 + },
493 + {
494 + "matcher": {
495 + "id": "byName",
496 + "options": "10"
497 + },
498 + "properties": [
499 + {
500 + "id": "color",
501 + "value": {
502 + "fixedColor": "#FF9830",
503 + "mode": "fixed"
504 + }
505 + }
506 + ]
507 + },
508 + {
509 + "matcher": {
510 + "id": "byName",
511 + "options": "12"
512 + },
513 + "properties": [
514 + {
515 + "id": "color",
516 + "value": {
517 + "fixedColor": "#F2495C",
518 + "mode": "fixed"
519 + }
520 + }
521 + ]
522 + },
523 + {
524 + "matcher": {
525 + "id": "byName",
526 + "options": "13"
527 + },
528 + "properties": [
529 + {
530 + "id": "color",
531 + "value": {
532 + "fixedColor": "#FF7383",
533 + "mode": "fixed"
534 + }
535 + }
536 + ]
537 + }
538 + ]
539 + },
540 + "gridPos": {
541 + "h": 12,
542 + "w": 4,
543 + "x": 7,
544 + "y": 0
545 + },
546 + "id": 8,
547 + "maxDataPoints": 3,
548 + "options": {
549 + "displayLabels": [],
550 + "legend": {
551 + "calcs": [],
552 + "displayMode": "table",
553 + "placement": "right",
554 + "showLegend": true,
555 + "values": ["value", "percent"]
556 + },
557 + "pieType": "donut",
558 + "reduceOptions": {
559 + "calcs": ["sum"],
560 + "fields": "",
561 + "values": false
562 + },
563 + "text": {},
564 + "tooltip": {
565 + "mode": "single",
566 + "sort": "none"
567 + }
568 + },
569 + "targets": [
570 + {
571 + "bucketAggs": [
572 + {
573 + "$$hashKey": "object:235",
574 + "fake": true,
575 + "field": "attack_tactic",
576 + "id": "3",
577 + "settings": {
578 + "min_doc_count": 1,
579 + "order": "desc",
580 + "orderBy": "_count",
581 + "size": "10"
582 + },
583 + "type": "terms"
584 + },
585 + {
586 + "$$hashKey": "object:236",
587 + "field": "timestamp",
588 + "id": "2",
589 + "settings": {
590 + "interval": "auto",
591 + "min_doc_count": 0,
592 + "trimEdges": 0
593 + },
594 + "type": "date_histogram"
595 + }
596 + ],
597 + "datasource": {
598 + "type": "grafana-opensearch-datasource",
599 + "uid": "replace_datasource_uid"
600 + },
601 + "metrics": [
602 + {
603 + "$$hashKey": "object:233",
604 + "field": "select field",
605 + "id": "1",
606 + "meta": {},
607 + "settings": {},
608 + "type": "count"
609 + }
610 + ],
611 + "query": "device_name:$device AND severity:$severity",
612 + "refId": "A",
613 + "timeField": "timestamp"
614 + }
615 + ],
616 + "title": "SECURITY EVENTS BY MITRE ID",
617 + "type": "piechart"
618 + },
619 + {
620 + "datasource": {
621 + "type": "grafana-opensearch-datasource",
622 + "uid": "replace_datasource_uid"
623 + },
624 + "fieldConfig": {
625 + "defaults": {
626 + "color": {
627 + "mode": "palette-classic"
628 + },
629 + "custom": {
630 + "hideFrom": {
631 + "legend": false,
632 + "tooltip": false,
633 + "viz": false
634 + }
635 + },
636 + "decimals": 0,
637 + "mappings": [],
638 + "unit": "short"
639 + },
640 + "overrides": [
641 + {
642 + "matcher": {
643 + "id": "byName",
644 + "options": "1"
645 + },
646 + "properties": [
647 + {
648 + "id": "color",
649 + "value": {
650 + "fixedColor": "#C8F2C2",
651 + "mode": "fixed"
652 + }
653 + }
654 + ]
655 + },
656 + {
657 + "matcher": {
658 + "id": "byName",
659 + "options": "2"
660 + },
661 + "properties": [
662 + {
663 + "id": "color",
664 + "value": {
665 + "fixedColor": "#96D98D",
666 + "mode": "fixed"
667 + }
668 + }
669 + ]
670 + },
671 + {
672 + "matcher": {
673 + "id": "byName",
674 + "options": "3"
675 + },
676 + "properties": [
677 + {
678 + "id": "color",
679 + "value": {
680 + "fixedColor": "#56A64B",
681 + "mode": "fixed"
682 + }
683 + }
684 + ]
685 + },
686 + {
687 + "matcher": {
688 + "id": "byName",
689 + "options": "4"
690 + },
691 + "properties": [
692 + {
693 + "id": "color",
694 + "value": {
695 + "fixedColor": "#37872D",
696 + "mode": "fixed"
697 + }
698 + }
699 + ]
700 + },
701 + {
702 + "matcher": {
703 + "id": "byName",
704 + "options": "5"
705 + },
706 + "properties": [
707 + {
708 + "id": "color",
709 + "value": {
710 + "fixedColor": "#FFF899",
711 + "mode": "fixed"
712 + }
713 + }
714 + ]
715 + },
716 + {
717 + "matcher": {
718 + "id": "byName",
719 + "options": "7"
720 + },
721 + "properties": [
722 + {
723 + "id": "color",
724 + "value": {
725 + "fixedColor": "#F2CC0C",
726 + "mode": "fixed"
727 + }
728 + }
729 + ]
730 + },
731 + {
732 + "matcher": {
733 + "id": "byName",
734 + "options": "9"
735 + },
736 + "properties": [
737 + {
738 + "id": "color",
739 + "value": {
740 + "fixedColor": "#FF9830",
741 + "mode": "fixed"
742 + }
743 + }
744 + ]
745 + },
746 + {
747 + "matcher": {
748 + "id": "byName",
749 + "options": "10"
750 + },
751 + "properties": [
752 + {
753 + "id": "color",
754 + "value": {
755 + "fixedColor": "#FF9830",
756 + "mode": "fixed"
757 + }
758 + }
759 + ]
760 + },
761 + {
762 + "matcher": {
763 + "id": "byName",
764 + "options": "12"
765 + },
766 + "properties": [
767 + {
768 + "id": "color",
769 + "value": {
770 + "fixedColor": "#F2495C",
771 + "mode": "fixed"
772 + }
773 + }
774 + ]
775 + },
776 + {
777 + "matcher": {
778 + "id": "byName",
779 + "options": "13"
780 + },
781 + "properties": [
782 + {
783 + "id": "color",
784 + "value": {
785 + "fixedColor": "#FF7383",
786 + "mode": "fixed"
787 + }
788 + }
789 + ]
790 + },
791 + {
792 + "matcher": {
793 + "id": "byName",
794 + "options": "ALLOW"
795 + },
796 + "properties": [
797 + {
798 + "id": "color",
799 + "value": {
800 + "fixedColor": "super-light-red",
801 + "mode": "fixed"
802 + }
803 + }
804 + ]
805 + },
806 + {
807 + "matcher": {
808 + "id": "byName",
809 + "options": "DENY"
810 + },
811 + "properties": [
812 + {
813 + "id": "color",
814 + "value": {
815 + "fixedColor": "green",
816 + "mode": "fixed"
817 + }
818 + }
819 + ]
820 + }
821 + ]
822 + },
823 + "gridPos": {
824 + "h": 12,
825 + "w": 4,
826 + "x": 11,
827 + "y": 0
828 + },
829 + "id": 12,
830 + "maxDataPoints": 3,
831 + "options": {
832 + "displayLabels": [],
833 + "legend": {
834 + "calcs": [],
835 + "displayMode": "table",
836 + "placement": "right",
837 + "showLegend": true,
838 + "values": ["value", "percent"]
839 + },
840 + "pieType": "donut",
841 + "reduceOptions": {
842 + "calcs": ["sum"],
843 + "fields": "",
844 + "values": false
845 + },
846 + "text": {},
847 + "tooltip": {
848 + "mode": "single",
849 + "sort": "none"
850 + }
851 + },
852 + "targets": [
853 + {
854 + "bucketAggs": [
855 + {
856 + "$$hashKey": "object:235",
857 + "fake": true,
858 + "field": "sensor_action",
859 + "id": "3",
860 + "settings": {
861 + "min_doc_count": 1,
862 + "order": "desc",
863 + "orderBy": "_count",
864 + "size": "10"
865 + },
866 + "type": "terms"
867 + },
868 + {
869 + "$$hashKey": "object:236",
870 + "field": "timestamp",
871 + "id": "2",
872 + "settings": {
873 + "interval": "auto",
874 + "min_doc_count": 0,
875 + "trimEdges": 0
876 + },
877 + "type": "date_histogram"
878 + }
879 + ],
880 + "datasource": {
881 + "type": "grafana-opensearch-datasource",
882 + "uid": "replace_datasource_uid"
883 + },
884 + "metrics": [
885 + {
886 + "$$hashKey": "object:233",
887 + "field": "select field",
888 + "id": "1",
889 + "meta": {},
890 + "settings": {},
891 + "type": "count"
892 + }
893 + ],
894 + "query": "device_name:$device AND severity:$severity",
895 + "refId": "A",
896 + "timeField": "timestamp"
897 + }
898 + ],
899 + "title": "SECURITY EVENTS BY SENSOR ACTION",
900 + "type": "piechart"
901 + },
902 + {
903 + "datasource": {
904 + "type": "grafana-opensearch-datasource",
905 + "uid": "replace_datasource_uid"
906 + },
907 + "fieldConfig": {
908 + "defaults": {
909 + "mappings": [],
910 + "thresholds": {
911 + "mode": "absolute",
912 + "steps": [
913 + {
914 + "color": "green",
915 + "value": null
916 + },
917 + {
918 + "color": "red",
919 + "value": 80
920 + }
921 + ]
922 + }
923 + },
924 + "overrides": []
925 + },
926 + "gridPos": {
927 + "h": 12,
928 + "w": 9,
929 + "x": 15,
930 + "y": 0
931 + },
932 + "id": 9,
933 + "options": {
934 + "displayMode": "gradient",
935 + "maxVizHeight": 300,
936 + "minVizHeight": 10,
937 + "minVizWidth": 0,
938 + "namePlacement": "auto",
939 + "orientation": "horizontal",
940 + "reduceOptions": {
941 + "calcs": ["sum"],
942 + "fields": "",
943 + "values": false
944 + },
945 + "showUnfilled": true,
946 + "sizing": "auto",
947 + "text": {},
948 + "valueMode": "color"
949 + },
950 + "pluginVersion": "10.4.1",
951 + "targets": [
952 + {
953 + "bucketAggs": [
954 + {
955 + "fake": true,
956 + "field": "reason",
957 + "id": "6",
958 + "settings": {
959 + "min_doc_count": 1,
960 + "order": "desc",
961 + "orderBy": "_count",
962 + "size": "10"
963 + },
964 + "type": "terms"
965 + },
966 + {
967 + "fake": true,
968 + "field": "timestamp",
969 + "id": "5",
970 + "settings": {
971 + "interval": "auto",
972 + "min_doc_count": 0,
973 + "trimEdges": 0
974 + },
975 + "type": "date_histogram"
976 + }
977 + ],
978 + "datasource": {
979 + "type": "grafana-opensearch-datasource",
980 + "uid": "replace_datasource_uid"
981 + },
982 + "metrics": [
983 + {
984 + "field": "type",
985 + "id": "1",
986 + "meta": {},
987 + "settings": {},
988 + "type": "count"
989 + }
990 + ],
991 + "query": "device_name:$device AND severity:$severity",
992 + "refId": "A",
993 + "timeField": "timestamp"
994 + }
995 + ],
996 + "title": "TOP 10 DETECTIONS",
997 + "type": "bargauge"
998 + },
999 + {
1000 + "datasource": {
1001 + "type": "grafana-opensearch-datasource",
1002 + "uid": "replace_datasource_uid"
1003 + },
1004 + "fieldConfig": {
1005 + "defaults": {
1006 + "mappings": [
1007 + {
1008 + "options": {
1009 + "match": "null",
1010 + "result": {
1011 + "text": "N/A"
1012 + }
1013 + },
1014 + "type": "special"
1015 + }
1016 + ],
1017 + "thresholds": {
1018 + "mode": "absolute",
1019 + "steps": [
1020 + {
1021 + "color": "orange",
1022 + "value": null
1023 + }
1024 + ]
1025 + },
1026 + "unit": "locale"
1027 + },
1028 + "overrides": []
1029 + },
1030 + "gridPos": {
1031 + "h": 6,
1032 + "w": 3,
1033 + "x": 0,
1034 + "y": 6
1035 + },
1036 + "id": 2,
1037 + "options": {
1038 + "colorMode": "value",
1039 + "graphMode": "area",
1040 + "justifyMode": "auto",
1041 + "orientation": "horizontal",
1042 + "reduceOptions": {
1043 + "calcs": ["sum"],
1044 + "fields": "",
1045 + "values": false
1046 + },
1047 + "showPercentChange": false,
1048 + "text": {},
1049 + "textMode": "auto",
1050 + "wideLayout": true
1051 + },
1052 + "pluginVersion": "10.4.1",
1053 + "targets": [
1054 + {
1055 + "bucketAggs": [
1056 + {
1057 + "$$hashKey": "object:331",
1058 + "field": "timestamp",
1059 + "id": "2",
1060 + "settings": {
1061 + "interval": "auto",
1062 + "min_doc_count": 0,
1063 + "trimEdges": 0
1064 + },
1065 + "type": "date_histogram"
1066 + }
1067 + ],
1068 + "datasource": {
1069 + "type": "grafana-opensearch-datasource",
1070 + "uid": "replace_datasource_uid"
1071 + },
1072 + "metrics": [
1073 + {
1074 + "$$hashKey": "object:329",
1075 + "field": "select field",
1076 + "id": "1",
1077 + "type": "count"
1078 + }
1079 + ],
1080 + "query": "device_name:$device AND severity:$severity",
1081 + "refId": "A",
1082 + "timeField": "timestamp"
1083 + }
1084 + ],
1085 + "title": "EVENTS (TOTAL)",
1086 + "type": "stat"
1087 + },
1088 + {
1089 + "datasource": {
1090 + "type": "grafana-opensearch-datasource",
1091 + "uid": "replace_datasource_uid"
1092 + },
1093 + "fieldConfig": {
1094 + "defaults": {
1095 + "color": {
1096 + "mode": "thresholds"
1097 + },
1098 + "custom": {
1099 + "align": "auto",
1100 + "cellOptions": {
1101 + "type": "auto"
1102 + },
1103 + "inspect": false
1104 + },
1105 + "mappings": [],
1106 + "thresholds": {
1107 + "mode": "absolute",
1108 + "steps": [
1109 + {
1110 + "color": "green",
1111 + "value": null
1112 + },
1113 + {
1114 + "color": "red",
1115 + "value": 80
1116 + }
1117 + ]
1118 + }
1119 + },
1120 + "overrides": [
1121 + {
1122 + "matcher": {
1123 + "id": "byName",
1124 + "options": "process_image"
1125 + },
1126 + "properties": [
1127 + {
1128 + "id": "custom.width",
1129 + "value": 657
1130 + }
1131 + ]
1132 + }
1133 + ]
1134 + },
1135 + "gridPos": {
1136 + "h": 14,
1137 + "w": 6,
1138 + "x": 0,
1139 + "y": 12
1140 + },
1141 + "id": 10,
1142 + "options": {
1143 + "cellHeight": "sm",
1144 + "footer": {
1145 + "countRows": false,
1146 + "fields": "",
1147 + "reducer": ["sum"],
1148 + "show": false
1149 + },
1150 + "showHeader": true,
1151 + "sortBy": []
1152 + },
1153 + "pluginVersion": "10.4.1",
1154 + "targets": [
1155 + {
1156 + "bucketAggs": [
1157 + {
1158 + "fake": true,
1159 + "field": "device_name",
1160 + "id": "6",
1161 + "settings": {
1162 + "min_doc_count": 1,
1163 + "order": "desc",
1164 + "orderBy": "_count",
1165 + "size": "0"
1166 + },
1167 + "type": "terms"
1168 + }
1169 + ],
1170 + "datasource": {
1171 + "type": "grafana-opensearch-datasource",
1172 + "uid": "replace_datasource_uid"
1173 + },
1174 + "metrics": [
1175 + {
1176 + "field": "type",
1177 + "id": "1",
1178 + "meta": {},
1179 + "settings": {},
1180 + "type": "count"
1181 + }
1182 + ],
1183 + "query": "device_name:$device AND severity:$severity",
1184 + "refId": "A",
1185 + "timeField": "timestamp"
1186 + }
1187 + ],
1188 + "title": "DEVICES",
1189 + "type": "table"
1190 + },
1191 + {
1192 + "datasource": {
1193 + "type": "grafana-opensearch-datasource",
1194 + "uid": "replace_datasource_uid"
1195 + },
1196 + "fieldConfig": {
1197 + "defaults": {
1198 + "color": {
1199 + "mode": "palette-classic"
1200 + },
1201 + "custom": {
1202 + "axisBorderShow": false,
1203 + "axisCenteredZero": false,
1204 + "axisColorMode": "text",
1205 + "axisLabel": "",
1206 + "axisPlacement": "auto",
1207 + "barAlignment": 0,
1208 + "drawStyle": "bars",
1209 + "fillOpacity": 0,
1210 + "gradientMode": "none",
1211 + "hideFrom": {
1212 + "legend": false,
1213 + "tooltip": false,
1214 + "viz": false
1215 + },
1216 + "insertNulls": false,
1217 + "lineInterpolation": "linear",
1218 + "lineWidth": 1,
1219 + "pointSize": 5,
1220 + "scaleDistribution": {
1221 + "type": "linear"
1222 + },
1223 + "showPoints": "auto",
1224 + "spanNulls": false,
1225 + "stacking": {
1226 + "group": "A",
1227 + "mode": "normal"
1228 + },
1229 + "thresholdsStyle": {
1230 + "mode": "off"
1231 + }
1232 + },
1233 + "mappings": [],
1234 + "thresholds": {
1235 + "mode": "absolute",
1236 + "steps": [
1237 + {
1238 + "color": "green",
1239 + "value": null
1240 + },
1241 + {
1242 + "color": "red",
1243 + "value": 80
1244 + }
1245 + ]
1246 + }
1247 + },
1248 + "overrides": []
1249 + },
1250 + "gridPos": {
1251 + "h": 14,
1252 + "w": 18,
1253 + "x": 6,
1254 + "y": 12
1255 + },
1256 + "id": 5,
1257 + "options": {
1258 + "legend": {
1259 + "calcs": [],
1260 + "displayMode": "table",
1261 + "placement": "right",
1262 + "showLegend": true
1263 + },
1264 + "tooltip": {
1265 + "mode": "single",
1266 + "sort": "none"
1267 + }
1268 + },
1269 + "targets": [
1270 + {
1271 + "alias": "",
1272 + "bucketAggs": [
1273 + {
1274 + "field": "device_name",
1275 + "id": "3",
1276 + "settings": {
1277 + "min_doc_count": "1",
1278 + "order": "desc",
1279 + "orderBy": "_count",
1280 + "size": "10"
1281 + },
1282 + "type": "terms"
1283 + },
1284 + {
1285 + "field": "timestamp",
1286 + "id": "2",
1287 + "settings": {
1288 + "interval": "5m"
1289 + },
1290 + "type": "date_histogram"
1291 + }
1292 + ],
1293 + "datasource": {
1294 + "type": "grafana-opensearch-datasource",
1295 + "uid": "replace_datasource_uid"
1296 + },
1297 + "metrics": [
1298 + {
1299 + "id": "1",
1300 + "type": "count"
1301 + }
1302 + ],
1303 + "query": "device_name:$device AND severity:$severity",
1304 + "refId": "A",
1305 + "timeField": "timestamp"
1306 + }
1307 + ],
1308 + "title": "EVENTS BY DEVICE (TOP 10) - HISTOGRAM",
1309 + "transparent": true,
1310 + "type": "timeseries"
1311 + },
1312 + {
1313 + "datasource": {
1314 + "type": "grafana-opensearch-datasource",
1315 + "uid": "replace_datasource_uid"
1316 + },
1317 + "fieldConfig": {
1318 + "defaults": {
1319 + "color": {
1320 + "mode": "thresholds"
1321 + },
1322 + "custom": {
1323 + "align": "auto",
1324 + "cellOptions": {
1325 + "type": "auto"
1326 + },
1327 + "inspect": false
1328 + },
1329 + "mappings": [],
1330 + "thresholds": {
1331 + "mode": "absolute",
1332 + "steps": [
1333 + {
1334 + "color": "green",
1335 + "value": null
1336 + },
1337 + {
1338 + "color": "red",
1339 + "value": 80
1340 + }
1341 + ]
1342 + }
1343 + },
1344 + "overrides": [
1345 + {
1346 + "matcher": {
1347 + "id": "byName",
1348 + "options": "process_image"
1349 + },
1350 + "properties": [
1351 + {
1352 + "id": "custom.width",
1353 + "value": 657
1354 + }
1355 + ]
1356 + }
1357 + ]
1358 + },
1359 + "gridPos": {
1360 + "h": 12,
1361 + "w": 6,
1362 + "x": 0,
1363 + "y": 26
1364 + },
1365 + "id": 11,
1366 + "options": {
1367 + "cellHeight": "sm",
1368 + "footer": {
1369 + "countRows": false,
1370 + "fields": "",
1371 + "reducer": ["sum"],
1372 + "show": false
1373 + },
1374 + "showHeader": true,
1375 + "sortBy": []
1376 + },
1377 + "pluginVersion": "10.4.1",
1378 + "targets": [
1379 + {
1380 + "bucketAggs": [
1381 + {
1382 + "fake": true,
1383 + "field": "device_username",
1384 + "id": "6",
1385 + "settings": {
1386 + "min_doc_count": 1,
1387 + "order": "desc",
1388 + "orderBy": "_count",
1389 + "size": "0"
1390 + },
1391 + "type": "terms"
1392 + }
1393 + ],
1394 + "datasource": {
1395 + "type": "grafana-opensearch-datasource",
1396 + "uid": "replace_datasource_uid"
1397 + },
1398 + "metrics": [
1399 + {
1400 + "field": "type",
1401 + "id": "1",
1402 + "meta": {},
1403 + "settings": {},
1404 + "type": "count"
1405 + }
1406 + ],
1407 + "query": "device_name:$device AND severity:$severity",
1408 + "refId": "A",
1409 + "timeField": "timestamp"
1410 + }
1411 + ],
1412 + "title": "USER ACCOUNTS",
1413 + "transparent": true,
1414 + "type": "table"
1415 + },
1416 + {
1417 + "datasource": {
1418 + "type": "grafana-opensearch-datasource",
1419 + "uid": "replace_datasource_uid"
1420 + },
1421 + "fieldConfig": {
1422 + "defaults": {
1423 + "color": {
1424 + "mode": "palette-classic"
1425 + },
1426 + "custom": {
1427 + "axisBorderShow": false,
1428 + "axisCenteredZero": false,
1429 + "axisColorMode": "text",
1430 + "axisLabel": "",
1431 + "axisPlacement": "auto",
1432 + "barAlignment": 0,
1433 + "drawStyle": "bars",
1434 + "fillOpacity": 0,
1435 + "gradientMode": "none",
1436 + "hideFrom": {
1437 + "legend": false,
1438 + "tooltip": false,
1439 + "viz": false
1440 + },
1441 + "insertNulls": false,
1442 + "lineInterpolation": "linear",
1443 + "lineWidth": 1,
1444 + "pointSize": 5,
1445 + "scaleDistribution": {
1446 + "type": "linear"
1447 + },
1448 + "showPoints": "auto",
1449 + "spanNulls": false,
1450 + "stacking": {
1451 + "group": "A",
1452 + "mode": "normal"
1453 + },
1454 + "thresholdsStyle": {
1455 + "mode": "off"
1456 + }
1457 + },
1458 + "mappings": [],
1459 + "thresholds": {
1460 + "mode": "absolute",
1461 + "steps": [
1462 + {
1463 + "color": "green",
1464 + "value": null
1465 + },
1466 + {
1467 + "color": "red",
1468 + "value": 80
1469 + }
1470 + ]
1471 + }
1472 + },
1473 + "overrides": []
1474 + },
1475 + "gridPos": {
1476 + "h": 12,
1477 + "w": 18,
1478 + "x": 6,
1479 + "y": 26
1480 + },
1481 + "id": 4,
1482 + "options": {
1483 + "legend": {
1484 + "calcs": [],
1485 + "displayMode": "table",
1486 + "placement": "right",
1487 + "showLegend": true
1488 + },
1489 + "tooltip": {
1490 + "mode": "single",
1491 + "sort": "none"
1492 + }
1493 + },
1494 + "targets": [
1495 + {
1496 + "alias": "",
1497 + "bucketAggs": [
1498 + {
1499 + "field": "severity",
1500 + "id": "3",
1501 + "settings": {
1502 + "min_doc_count": "1",
1503 + "order": "desc",
1504 + "orderBy": "_count",
1505 + "size": "10"
1506 + },
1507 + "type": "terms"
1508 + },
1509 + {
1510 + "field": "timestamp",
1511 + "id": "2",
1512 + "settings": {
1513 + "interval": "5m"
1514 + },
1515 + "type": "date_histogram"
1516 + }
1517 + ],
1518 + "datasource": {
1519 + "type": "grafana-opensearch-datasource",
1520 + "uid": "replace_datasource_uid"
1521 + },
1522 + "metrics": [
1523 + {
1524 + "id": "1",
1525 + "type": "count"
1526 + }
1527 + ],
1528 + "query": "device_name:$device AND severity:$severity",
1529 + "refId": "A",
1530 + "timeField": "timestamp"
1531 + }
1532 + ],
1533 + "title": "EVENTS SEVERITY - HISTOGRAM",
1534 + "type": "timeseries"
1535 + },
1536 + {
1537 + "datasource": {
1538 + "type": "grafana-opensearch-datasource",
1539 + "uid": "replace_datasource_uid"
1540 + },
1541 + "fieldConfig": {
1542 + "defaults": {
1543 + "color": {
1544 + "mode": "thresholds"
1545 + },
1546 + "custom": {
1547 + "align": "auto",
1548 + "cellOptions": {
1549 + "type": "auto"
1550 + },
1551 + "filterable": true,
1552 + "inspect": false
1553 + },
1554 + "mappings": [],
1555 + "thresholds": {
1556 + "mode": "absolute",
1557 + "steps": [
1558 + {
1559 + "color": "green",
1560 + "value": null
1561 + },
1562 + {
1563 + "color": "red",
1564 + "value": 80
1565 + }
1566 + ]
1567 + }
1568 + },
1569 + "overrides": [
1570 + {
1571 + "matcher": {
1572 + "id": "byName",
1573 + "options": "EVENT ID"
1574 + },
1575 + "properties": [
1576 + {
1577 + "id": "links",
1578 + "value": [
1579 + {
1580 + "targetBlank": true,
1581 + "title": "EVENT DETAILS",
1582 + "url": "https://grafana.company.local/explore?left=%7B%22datasource%22:%22CARBONBLACK%22,%22queries%22:%5B%7B%22refId%22:%22A%22,%22query%22:%22_id:${__value.text}%22,%22alias%22:%22%22,%22metrics%22:%5B%7B%22id%22:%221%22,%22type%22:%22logs%22,%22settings%22:%7B%22limit%22:%22500%22%7D%7D%5D,%22bucketAggs%22:%5B%5D,%22timeField%22:%22timestamp%22%7D%5D,%22range%22:%7B%22from%22:%22now-6h%22,%22to%22:%22now%22%7D%7D"
1583 + }
1584 + ]
1585 + }
1586 + ]
1587 + },
1588 + {
1589 + "matcher": {
1590 + "id": "byName",
1591 + "options": "MDR ALERT"
1592 + },
1593 + "properties": [
1594 + {
1595 + "id": "custom.width",
1596 + "value": 126
1597 + }
1598 + ]
1599 + },
1600 + {
1601 + "matcher": {
1602 + "id": "byName",
1603 + "options": "EXT IP COUNTRY"
1604 + },
1605 + "properties": [
1606 + {
1607 + "id": "custom.width",
1608 + "value": 156
1609 + }
1610 + ]
1611 + },
1612 + {
1613 + "matcher": {
1614 + "id": "byName",
1615 + "options": "DEVICE EXT IP"
1616 + },
1617 + "properties": [
1618 + {
1619 + "id": "custom.width",
1620 + "value": 159
1621 + }
1622 + ]
1623 + },
1624 + {
1625 + "matcher": {
1626 + "id": "byName",
1627 + "options": "EVENT TYPE"
1628 + },
1629 + "properties": [
1630 + {
1631 + "id": "custom.width",
1632 + "value": 152
1633 + }
1634 + ]
1635 + },
1636 + {
1637 + "matcher": {
1638 + "id": "byName",
1639 + "options": "MITRE"
1640 + },
1641 + "properties": [
1642 + {
1643 + "id": "custom.width",
1644 + "value": 110
1645 + }
1646 + ]
1647 + },
1648 + {
1649 + "matcher": {
1650 + "id": "byName",
1651 + "options": "SENSOR ACTION"
1652 + },
1653 + "properties": [
1654 + {
1655 + "id": "custom.width",
1656 + "value": 159
1657 + }
1658 + ]
1659 + },
1660 + {
1661 + "matcher": {
1662 + "id": "byName",
1663 + "options": "REASON"
1664 + },
1665 + "properties": [
1666 + {
1667 + "id": "custom.width",
1668 + "value": 403
1669 + }
1670 + ]
1671 + }
1672 + ]
1673 + },
1674 + "gridPos": {
1675 + "h": 17,
1676 + "w": 24,
1677 + "x": 0,
1678 + "y": 38
1679 + },
1680 + "id": 6,
1681 + "options": {
1682 + "cellHeight": "sm",
1683 + "footer": {
1684 + "countRows": false,
1685 + "enablePagination": true,
1686 + "fields": "",
1687 + "reducer": ["sum"],
1688 + "show": false
1689 + },
1690 + "showHeader": true,
1691 + "sortBy": []
1692 + },
1693 + "pluginVersion": "10.4.1",
1694 + "targets": [
1695 + {
1696 + "alias": "",
1697 + "bucketAggs": [],
1698 + "datasource": {
1699 + "type": "grafana-opensearch-datasource",
1700 + "uid": "replace_datasource_uid"
1701 + },
1702 + "format": "table",
1703 + "metrics": [
1704 + {
1705 + "id": "1",
1706 + "settings": {
1707 + "order": "desc",
1708 + "size": "500",
1709 + "useTimeRange": true
1710 + },
1711 + "type": "raw_data"
1712 + }
1713 + ],
1714 + "query": "device_name:$device AND severity:$severity",
1715 + "queryType": "lucene",
1716 + "refId": "A",
1717 + "timeField": "timestamp"
1718 + }
1719 + ],
1720 + "title": "CB EVENTS",
1721 + "transformations": [
1722 + {
1723 + "id": "filterFieldsByName",
1724 + "options": {
1725 + "include": {
1726 + "names": [
1727 + "timestamp",
1728 + "_id",
1729 + "attack_tactic",
1730 + "customer_code",
1731 + "device_external_ip",
1732 + "device_external_ip_country_code",
1733 + "device_internal_ip",
1734 + "device_name",
1735 + "device_username",
1736 + "mdr_alert",
1737 + "reason",
1738 + "sensor_action",
1739 + "severity",
1740 + "type"
1741 + ]
1742 + }
1743 + }
1744 + },
1745 + {
1746 + "id": "organize",
1747 + "options": {
1748 + "excludeByName": {},
1749 + "includeByName": {},
1750 + "indexByName": {
1751 + "_id": 1,
1752 + "attack_tactic": 8,
1753 + "customer_code": 9,
1754 + "device_external_ip": 5,
1755 + "device_external_ip_country_code": 6,
1756 + "device_internal_ip": 7,
1757 + "device_name": 3,
1758 + "device_username": 4,
1759 + "mdr_alert": 10,
1760 + "reason": 11,
1761 + "sensor_action": 12,
1762 + "severity": 13,
1763 + "timestamp": 0,
1764 + "type": 2
1765 + },
1766 + "renameByName": {
1767 + "_id": "EVENT ID",
1768 + "attack_tactic": "MITRE",
1769 + "customer_code": "CUSTOMER",
1770 + "device_external_ip": "DEVICE EXT IP",
1771 + "device_external_ip_country_code": "EXT IP COUNTRY",
1772 + "device_internal_ip": "DEVICE INTERNAL IP",
1773 + "device_name": "DEVICE",
1774 + "device_username": "USER",
1775 + "mdr_alert": "MDR ALERT",
1776 + "reason": "REASON",
1777 + "sensor_action": "SENSOR ACTION",
1778 + "severity": "SEVERITY",
1779 + "timestamp": "DATE/TIME",
1780 + "type": "EVENT TYPE"
1781 + }
1782 + }
1783 + }
1784 + ],
1785 + "transparent": true,
1786 + "type": "table"
1787 + }
1788 + ],
1789 + "schemaVersion": 39,
1790 + "tags": [],
1791 + "templating": {
1792 + "list": [
1793 + {
1794 + "datasource": {
1795 + "type": "grafana-opensearch-datasource",
1796 + "uid": "replace_datasource_uid"
1797 + },
1798 + "filters": [],
1799 + "hide": 0,
1800 + "label": "Filters",
1801 + "name": "query0",
1802 + "skipUrlSync": false,
1803 + "type": "adhoc"
1804 + },
1805 + {
1806 + "current": {
1807 + "selected": false,
1808 + "text": "All",
1809 + "value": "$__all"
1810 + },
1811 + "datasource": {
1812 + "type": "grafana-opensearch-datasource",
1813 + "uid": "replace_datasource_uid"
1814 + },
1815 + "definition": "{ \"find\": \"terms\", \"field\": \"severity\", \"query\": \"\"}",
1816 + "hide": 0,
1817 + "includeAll": true,
1818 + "label": "Severity",
1819 + "multi": false,
1820 + "name": "severity",
1821 + "options": [],
1822 + "query": "{ \"find\": \"terms\", \"field\": \"severity\", \"query\": \"\"}",
1823 + "refresh": 1,
1824 + "regex": "",
1825 + "skipUrlSync": false,
1826 + "sort": 0,
1827 + "type": "query"
1828 + },
1829 + {
1830 + "current": {
1831 + "selected": false,
1832 + "text": "All",
1833 + "value": "$__all"
1834 + },
1835 + "datasource": {
1836 + "type": "grafana-opensearch-datasource",
1837 + "uid": "replace_datasource_uid"
1838 + },
1839 + "definition": "{ \"find\": \"terms\", \"field\": \"device_name\", \"query\": \"\"}",
1840 + "hide": 0,
1841 + "includeAll": true,
1842 + "label": "Device",
1843 + "multi": false,
1844 + "name": "device",
1845 + "options": [],
1846 + "query": "{ \"find\": \"terms\", \"field\": \"device_name\", \"query\": \"\"}",
1847 + "refresh": 1,
1848 + "regex": "",
1849 + "skipUrlSync": false,
1850 + "sort": 0,
1851 + "type": "query"
1852 + }
1853 + ]
1854 + },
1855 + "time": {
1856 + "from": "now-24h",
1857 + "to": "now"
1858 + },
1859 + "timepicker": {},
1860 + "timezone": "browser",
1861 + "title": "CARBON BLACK - _SUMMARY",
1862 + "version": 8,
1863 + "weekStart": ""
1864 }