1
+{
2
+ "annotations": {
3
+ "list": [
4
+ {
5
+ "builtIn": 1,
6
+ "datasource": {
7
+ "type": "datasource",
8
+ "uid": "grafana"
9
+ },
10
+ "enable": true,
11
+ "hide": true,
12
+ "iconColor": "rgba(0, 211, 255, 1)",
13
+ "name": "Annotations & Alerts",
14
+ "target": {
15
+ "limit": 100,
16
+ "matchAny": false,
17
+ "tags": [],
18
+ "type": "dashboard"
19
+ },
20
+ "type": "dashboard"
21
+ }
22
+ ]
23
+ },
24
+ "editable": false,
25
+ "fiscalYearStartMonth": 0,
26
+ "graphTooltip": 0,
27
+ "id": null,
28
+ "links": [
29
+ {
30
+ "asDropdown": true,
31
+ "icon": "external link",
32
+ "includeVars": true,
33
+ "keepTime": true,
34
+ "tags": ["EDR"],
35
+ "targetBlank": true,
36
+ "title": "",
37
+ "type": "dashboards"
38
+ }
39
+ ],
40
+ "liveNow": false,
41
+ "panels": [
42
+ {
43
+ "datasource": {
44
+ "type": "grafana-opensearch-datasource",
45
+ "uid": "replace_datasource_uid"
46
+ },
47
+ "gridPos": {
48
+ "h": 1,
49
+ "w": 24,
50
+ "x": 0,
51
+ "y": 0
52
+ },
53
+ "id": 58,
54
+ "title": "SYSTEM OS AND SOFTWARE VULNERABILITIES - SUMMARY",
55
+ "type": "row"
56
+ },
57
+ {
58
+ "datasource": {
59
+ "type": "grafana-opensearch-datasource",
60
+ "uid": "replace_datasource_uid"
61
+ },
62
+ "fieldConfig": {
63
+ "defaults": {
64
+ "mappings": [
65
+ {
66
+ "options": {
67
+ "match": "null",
68
+ "result": {
69
+ "text": "N/A"
70
+ }
71
+ },
72
+ "type": "special"
73
+ }
74
+ ],
75
+ "thresholds": {
76
+ "mode": "absolute",
77
+ "steps": [
78
+ {
79
+ "color": "dark-orange",
80
+ "value": null
81
+ }
82
+ ]
83
+ },
84
+ "unit": "short"
85
+ },
86
+ "overrides": []
87
+ },
88
+ "gridPos": {
89
+ "h": 7,
90
+ "w": 4,
91
+ "x": 0,
92
+ "y": 1
93
+ },
94
+ "id": 43,
95
+ "links": [],
96
+ "options": {
97
+ "colorMode": "value",
98
+ "graphMode": "area",
99
+ "justifyMode": "auto",
100
+ "orientation": "horizontal",
101
+ "reduceOptions": {
102
+ "calcs": ["sum"],
103
+ "fields": "",
104
+ "values": false
105
+ },
106
+ "text": {},
107
+ "textMode": "auto",
108
+ "wideLayout": true
109
+ },
110
+ "pluginVersion": "10.2.3",
111
+ "targets": [
112
+ {
113
+ "bucketAggs": [
114
+ {
115
+ "field": "timestamp",
116
+ "id": "2",
117
+ "settings": {
118
+ "interval": "auto",
119
+ "min_doc_count": 0,
120
+ "trimEdges": 0
121
+ },
122
+ "type": "date_histogram"
123
+ }
124
+ ],
125
+ "datasource": {
126
+ "type": "grafana-opensearch-datasource",
127
+ "uid": "replace_datasource_uid"
128
+ },
129
+ "metrics": [
130
+ {
131
+ "field": "select field",
132
+ "id": "1",
133
+ "type": "count"
134
+ }
135
+ ],
136
+ "query": "agent.name:$agent_name",
137
+ "refId": "A",
138
+ "timeField": "vulnerability.detected_at"
139
+ }
140
+ ],
141
+ "title": "VULNERABILITY EVENTS",
142
+ "type": "stat"
143
+ },
144
+ {
145
+ "columns": [],
146
+ "datasource": {
147
+ "type": "grafana-opensearch-datasource",
148
+ "uid": "replace_datasource_uid"
149
+ },
150
+ "fontSize": "100%",
151
+ "gridPos": {
152
+ "h": 7,
153
+ "w": 8,
154
+ "x": 4,
155
+ "y": 1
156
+ },
157
+ "id": 31,
158
+ "showHeader": true,
159
+ "sort": {
160
+ "col": 0,
161
+ "desc": true
162
+ },
163
+ "styles": [
164
+ {
165
+ "alias": "Time",
166
+ "align": "auto",
167
+ "dateFormat": "YYYY-MM-DD HH:mm:ss",
168
+ "pattern": "Time",
169
+ "type": "date"
170
+ },
171
+ {
172
+ "alias": "",
173
+ "align": "auto",
174
+ "colorMode": "row",
175
+ "colors": ["rgba(50, 172, 45, 0.97)", "rgba(237, 129, 40, 0.89)", "#FA6400"],
176
+ "dateFormat": "YYYY-MM-DD HH:mm:ss",
177
+ "decimals": -1,
178
+ "mappingType": 1,
179
+ "pattern": "Count",
180
+ "thresholds": ["0", "1"],
181
+ "type": "number",
182
+ "unit": "short"
183
+ },
184
+ {
185
+ "alias": "AGENT",
186
+ "align": "auto",
187
+ "colors": ["rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)"],
188
+ "dateFormat": "YYYY-MM-DD HH:mm:ss",
189
+ "decimals": 2,
190
+ "mappingType": 1,
191
+ "pattern": "agent_name",
192
+ "thresholds": [],
193
+ "type": "number",
194
+ "unit": "short"
195
+ }
196
+ ],
197
+ "targets": [
198
+ {
199
+ "bucketAggs": [
200
+ {
201
+ "fake": true,
202
+ "field": "agent.name",
203
+ "id": "4",
204
+ "settings": {
205
+ "min_doc_count": 1,
206
+ "order": "desc",
207
+ "orderBy": "_term",
208
+ "size": "0"
209
+ },
210
+ "type": "terms"
211
+ }
212
+ ],
213
+ "datasource": {
214
+ "type": "grafana-opensearch-datasource",
215
+ "uid": "replace_datasource_uid"
216
+ },
217
+ "metrics": [
218
+ {
219
+ "field": "select field",
220
+ "id": "1",
221
+ "type": "count"
222
+ }
223
+ ],
224
+ "query": "agent.name:$agent_name",
225
+ "refId": "A",
226
+ "timeField": "timestamp"
227
+ }
228
+ ],
229
+ "title": "AGENTS",
230
+ "transform": "table",
231
+ "type": "table-old"
232
+ },
233
+ {
234
+ "columns": [],
235
+ "datasource": {
236
+ "type": "grafana-opensearch-datasource",
237
+ "uid": "replace_datasource_uid"
238
+ },
239
+ "fontSize": "100%",
240
+ "gridPos": {
241
+ "h": 7,
242
+ "w": 6,
243
+ "x": 12,
244
+ "y": 1
245
+ },
246
+ "id": 54,
247
+ "showHeader": true,
248
+ "sort": {
249
+ "col": 0,
250
+ "desc": true
251
+ },
252
+ "styles": [
253
+ {
254
+ "alias": "Time",
255
+ "align": "auto",
256
+ "dateFormat": "YYYY-MM-DD HH:mm:ss",
257
+ "pattern": "Time",
258
+ "type": "date"
259
+ },
260
+ {
261
+ "alias": "",
262
+ "align": "auto",
263
+ "colorMode": "row",
264
+ "colors": ["rgba(50, 172, 45, 0.97)", "rgba(237, 129, 40, 0.89)", "#FA6400"],
265
+ "dateFormat": "YYYY-MM-DD HH:mm:ss",
266
+ "decimals": -1,
267
+ "mappingType": 1,
268
+ "pattern": "Count",
269
+ "thresholds": ["0", "1"],
270
+ "type": "number",
271
+ "unit": "short"
272
+ },
273
+ {
274
+ "alias": "CVSS2",
275
+ "align": "auto",
276
+ "colors": ["rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)"],
277
+ "dateFormat": "YYYY-MM-DD HH:mm:ss",
278
+ "decimals": 2,
279
+ "mappingType": 1,
280
+ "pattern": "data_vulnerability_cvss_cvss2_base_score",
281
+ "thresholds": [],
282
+ "type": "number",
283
+ "unit": "short"
284
+ }
285
+ ],
286
+ "targets": [
287
+ {
288
+ "bucketAggs": [
289
+ {
290
+ "fake": true,
291
+ "field": "vulnerability.score.base",
292
+ "id": "4",
293
+ "settings": {
294
+ "min_doc_count": 1,
295
+ "order": "desc",
296
+ "orderBy": "_term",
297
+ "size": "0"
298
+ },
299
+ "type": "terms"
300
+ }
301
+ ],
302
+ "datasource": {
303
+ "type": "grafana-opensearch-datasource",
304
+ "uid": "replace_datasource_uid"
305
+ },
306
+ "metrics": [
307
+ {
308
+ "field": "select field",
309
+ "id": "1",
310
+ "type": "count"
311
+ }
312
+ ],
313
+ "query": "agent.name:$agent_name",
314
+ "refId": "A",
315
+ "timeField": "timestamp"
316
+ }
317
+ ],
318
+ "title": "CVSS2 BASE SCORE",
319
+ "transform": "table",
320
+ "type": "table-old"
321
+ },
322
+ {
323
+ "datasource": {
324
+ "type": "grafana-opensearch-datasource",
325
+ "uid": "replace_datasource_uid"
326
+ },
327
+ "fieldConfig": {
328
+ "defaults": {
329
+ "color": {
330
+ "mode": "thresholds"
331
+ },
332
+ "custom": {
333
+ "align": "auto",
334
+ "cellOptions": {
335
+ "type": "auto"
336
+ },
337
+ "filterable": false,
338
+ "inspect": false
339
+ },
340
+ "mappings": [],
341
+ "thresholds": {
342
+ "mode": "absolute",
343
+ "steps": [
344
+ {
345
+ "color": "green",
346
+ "value": null
347
+ },
348
+ {
349
+ "color": "red",
350
+ "value": 80
351
+ }
352
+ ]
353
+ }
354
+ },
355
+ "overrides": [
356
+ {
357
+ "matcher": {
358
+ "id": "byName",
359
+ "options": "Time"
360
+ },
361
+ "properties": [
362
+ {
363
+ "id": "displayName",
364
+ "value": "Time"
365
+ },
366
+ {
367
+ "id": "unit",
368
+ "value": "time: YYYY-MM-DD HH:mm:ss"
369
+ },
370
+ {
371
+ "id": "custom.align"
372
+ }
373
+ ]
374
+ },
375
+ {
376
+ "matcher": {
377
+ "id": "byName",
378
+ "options": ""
379
+ },
380
+ "properties": [
381
+ {
382
+ "id": "unit",
383
+ "value": "short"
384
+ },
385
+ {
386
+ "id": "decimals",
387
+ "value": 2
388
+ },
389
+ {
390
+ "id": "custom.align"
391
+ }
392
+ ]
393
+ },
394
+ {
395
+ "matcher": {
396
+ "id": "byName",
397
+ "options": "data_vulnerability_cve"
398
+ },
399
+ "properties": [
400
+ {
401
+ "id": "displayName",
402
+ "value": "CVE"
403
+ },
404
+ {
405
+ "id": "unit",
406
+ "value": "short"
407
+ },
408
+ {
409
+ "id": "decimals",
410
+ "value": -1
411
+ },
412
+ {
413
+ "id": "links",
414
+ "value": [
415
+ {
416
+ "targetBlank": true,
417
+ "title": "NVD - NIST DATABASE",
418
+ "url": "https://nvd.nist.gov/vuln/detail/${__value.text}"
419
+ }
420
+ ]
421
+ },
422
+ {
423
+ "id": "custom.align",
424
+ "value": "left"
425
+ }
426
+ ]
427
+ },
428
+ {
429
+ "matcher": {
430
+ "id": "byName",
431
+ "options": "Unique Count"
432
+ },
433
+ "properties": [
434
+ {
435
+ "id": "displayName",
436
+ "value": "HITS"
437
+ },
438
+ {
439
+ "id": "unit",
440
+ "value": "short"
441
+ },
442
+ {
443
+ "id": "decimals",
444
+ "value": -1
445
+ },
446
+ {
447
+ "id": "custom.align"
448
+ }
449
+ ]
450
+ },
451
+ {
452
+ "matcher": {
453
+ "id": "byName",
454
+ "options": "EPSS"
455
+ },
456
+ "properties": [
457
+ {
458
+ "id": "links",
459
+ "value": [
460
+ {
461
+ "targetBlank": true,
462
+ "title": "Exploit Prediction Scoring System",
463
+ "url": "https://www.first.org/epss/"
464
+ }
465
+ ]
466
+ }
467
+ ]
468
+ }
469
+ ]
470
+ },
471
+ "gridPos": {
472
+ "h": 7,
473
+ "w": 6,
474
+ "x": 18,
475
+ "y": 1
476
+ },
477
+ "id": 47,
478
+ "options": {
479
+ "cellHeight": "sm",
480
+ "footer": {
481
+ "countRows": false,
482
+ "fields": "",
483
+ "reducer": ["sum"],
484
+ "show": false
485
+ },
486
+ "showHeader": true
487
+ },
488
+ "pluginVersion": "10.2.3",
489
+ "targets": [
490
+ {
491
+ "bucketAggs": [
492
+ {
493
+ "fake": true,
494
+ "field": "vulnerability.id",
495
+ "id": "7",
496
+ "settings": {
497
+ "min_doc_count": 1,
498
+ "order": "desc",
499
+ "orderBy": "_term",
500
+ "size": "10"
501
+ },
502
+ "type": "terms"
503
+ }
504
+ ],
505
+ "datasource": {
506
+ "type": "grafana-opensearch-datasource",
507
+ "uid": "replace_datasource_uid"
508
+ },
509
+ "metrics": [
510
+ {
511
+ "field": "vulnerability.id",
512
+ "id": "1",
513
+ "meta": {},
514
+ "settings": {},
515
+ "type": "cardinality"
516
+ }
517
+ ],
518
+ "query": "agent.name:$agent_name",
519
+ "refId": "A",
520
+ "timeField": "vulnerability.detected_at"
521
+ }
522
+ ],
523
+ "title": "CVEs",
524
+ "transformations": [
525
+ {
526
+ "id": "organize",
527
+ "options": {
528
+ "excludeByName": {},
529
+ "includeByName": {},
530
+ "indexByName": {},
531
+ "renameByName": {
532
+ "data_vulnerability_cve": "CVE",
533
+ "epss_epss": "EPSS",
534
+ "vulnerability.id": "CVE"
535
+ }
536
+ }
537
+ }
538
+ ],
539
+ "type": "table"
540
+ },
541
+ {
542
+ "datasource": {
543
+ "type": "grafana-opensearch-datasource",
544
+ "uid": "replace_datasource_uid"
545
+ },
546
+ "fieldConfig": {
547
+ "defaults": {
548
+ "mappings": [],
549
+ "thresholds": {
550
+ "mode": "absolute",
551
+ "steps": [
552
+ {
553
+ "color": "green",
554
+ "value": null
555
+ },
556
+ {
557
+ "color": "red",
558
+ "value": 80
559
+ }
560
+ ]
561
+ }
562
+ },
563
+ "overrides": []
564
+ },
565
+ "gridPos": {
566
+ "h": 9,
567
+ "w": 17,
568
+ "x": 0,
569
+ "y": 8
570
+ },
571
+ "id": 37,
572
+ "options": {
573
+ "displayMode": "gradient",
574
+ "maxVizHeight": 300,
575
+ "minVizHeight": 10,
576
+ "minVizWidth": 0,
577
+ "namePlacement": "auto",
578
+ "orientation": "horizontal",
579
+ "reduceOptions": {
580
+ "calcs": ["sum"],
581
+ "fields": "",
582
+ "values": false
583
+ },
584
+ "showUnfilled": true,
585
+ "sizing": "auto",
586
+ "text": {},
587
+ "valueMode": "color"
588
+ },
589
+ "pluginVersion": "10.2.3",
590
+ "targets": [
591
+ {
592
+ "bucketAggs": [
593
+ {
594
+ "fake": true,
595
+ "field": "package.name",
596
+ "id": "6",
597
+ "settings": {
598
+ "min_doc_count": 1,
599
+ "order": "desc",
600
+ "orderBy": "_count",
601
+ "size": "15"
602
+ },
603
+ "type": "terms"
604
+ },
605
+ {
606
+ "fake": true,
607
+ "field": "timestamp",
608
+ "id": "5",
609
+ "settings": {
610
+ "interval": "auto",
611
+ "min_doc_count": 0,
612
+ "trimEdges": 0
613
+ },
614
+ "type": "date_histogram"
615
+ }
616
+ ],
617
+ "datasource": {
618
+ "type": "grafana-opensearch-datasource",
619
+ "uid": "replace_datasource_uid"
620
+ },
621
+ "metrics": [
622
+ {
623
+ "field": "type",
624
+ "id": "1",
625
+ "meta": {},
626
+ "settings": {},
627
+ "type": "count"
628
+ }
629
+ ],
630
+ "query": "agent.name:$agent_name",
631
+ "refId": "A",
632
+ "timeField": "vulnerability.detected_at"
633
+ }
634
+ ],
635
+ "title": "VULNERABLE SOFTWARE / PACKAGE",
636
+ "type": "bargauge"
637
+ },
638
+ {
639
+ "datasource": {
640
+ "type": "grafana-opensearch-datasource",
641
+ "uid": "replace_datasource_uid"
642
+ },
643
+ "fieldConfig": {
644
+ "defaults": {
645
+ "color": {
646
+ "mode": "palette-classic"
647
+ },
648
+ "custom": {
649
+ "hideFrom": {
650
+ "legend": false,
651
+ "tooltip": false,
652
+ "viz": false
653
+ }
654
+ },
655
+ "decimals": 0,
656
+ "mappings": [],
657
+ "unit": "short"
658
+ },
659
+ "overrides": [
660
+ {
661
+ "matcher": {
662
+ "id": "byName",
663
+ "options": "Critical"
664
+ },
665
+ "properties": [
666
+ {
667
+ "id": "color",
668
+ "value": {
669
+ "fixedColor": "#C4162A",
670
+ "mode": "fixed"
671
+ }
672
+ }
673
+ ]
674
+ },
675
+ {
676
+ "matcher": {
677
+ "id": "byName",
678
+ "options": "High"
679
+ },
680
+ "properties": [
681
+ {
682
+ "id": "color",
683
+ "value": {
684
+ "fixedColor": "#F2495C",
685
+ "mode": "fixed"
686
+ }
687
+ }
688
+ ]
689
+ },
690
+ {
691
+ "matcher": {
692
+ "id": "byName",
693
+ "options": "Low"
694
+ },
695
+ "properties": [
696
+ {
697
+ "id": "color",
698
+ "value": {
699
+ "fixedColor": "#5794F2",
700
+ "mode": "fixed"
701
+ }
702
+ }
703
+ ]
704
+ },
705
+ {
706
+ "matcher": {
707
+ "id": "byName",
708
+ "options": "Medium"
709
+ },
710
+ "properties": [
711
+ {
712
+ "id": "color",
713
+ "value": {
714
+ "fixedColor": "#FF9830",
715
+ "mode": "fixed"
716
+ }
717
+ }
718
+ ]
719
+ }
720
+ ]
721
+ },
722
+ "gridPos": {
723
+ "h": 9,
724
+ "w": 7,
725
+ "x": 17,
726
+ "y": 8
727
+ },
728
+ "id": 45,
729
+ "links": [],
730
+ "maxDataPoints": 3,
731
+ "options": {
732
+ "legend": {
733
+ "calcs": [],
734
+ "displayMode": "table",
735
+ "placement": "right",
736
+ "showLegend": true,
737
+ "values": ["value"]
738
+ },
739
+ "pieType": "donut",
740
+ "reduceOptions": {
741
+ "calcs": ["sum"],
742
+ "fields": "",
743
+ "values": false
744
+ },
745
+ "tooltip": {
746
+ "mode": "single",
747
+ "sort": "none"
748
+ }
749
+ },
750
+ "targets": [
751
+ {
752
+ "bucketAggs": [
753
+ {
754
+ "fake": true,
755
+ "field": "vulnerability.severity",
756
+ "id": "3",
757
+ "settings": {
758
+ "min_doc_count": 1,
759
+ "order": "desc",
760
+ "orderBy": "_count",
761
+ "size": "0"
762
+ },
763
+ "type": "terms"
764
+ },
765
+ {
766
+ "field": "timestamp",
767
+ "id": "2",
768
+ "settings": {
769
+ "interval": "auto",
770
+ "min_doc_count": 0,
771
+ "trimEdges": 0
772
+ },
773
+ "type": "date_histogram"
774
+ }
775
+ ],
776
+ "datasource": {
777
+ "type": "grafana-opensearch-datasource",
778
+ "uid": "replace_datasource_uid"
779
+ },
780
+ "metrics": [
781
+ {
782
+ "field": "select field",
783
+ "id": "1",
784
+ "type": "count"
785
+ }
786
+ ],
787
+ "query": "agent.name:$agent_name",
788
+ "refId": "A",
789
+ "timeField": "vulnerability.detected_at"
790
+ }
791
+ ],
792
+ "title": "VULNERABILITY LEVELS",
793
+ "type": "piechart"
794
+ },
795
+ {
796
+ "collapsed": false,
797
+ "datasource": {
798
+ "type": "grafana-opensearch-datasource",
799
+ "uid": "replace_datasource_uid"
800
+ },
801
+ "gridPos": {
802
+ "h": 1,
803
+ "w": 24,
804
+ "x": 0,
805
+ "y": 17
806
+ },
807
+ "id": 60,
808
+ "panels": [],
809
+ "title": "SYSTEM OS AND SOFTWARE VULNERABILITIES - ENTRIES",
810
+ "type": "row"
811
+ },
812
+ {
813
+ "datasource": {
814
+ "type": "grafana-opensearch-datasource",
815
+ "uid": "replace_datasource_uid"
816
+ },
817
+ "fieldConfig": {
818
+ "defaults": {
819
+ "color": {
820
+ "mode": "thresholds"
821
+ },
822
+ "custom": {
823
+ "align": "auto",
824
+ "cellOptions": {
825
+ "type": "auto"
826
+ },
827
+ "filterable": false,
828
+ "inspect": false
829
+ },
830
+ "mappings": [],
831
+ "thresholds": {
832
+ "mode": "absolute",
833
+ "steps": [
834
+ {
835
+ "color": "green",
836
+ "value": null
837
+ },
838
+ {
839
+ "color": "red",
840
+ "value": 80
841
+ }
842
+ ]
843
+ }
844
+ },
845
+ "overrides": [
846
+ {
847
+ "matcher": {
848
+ "id": "byName",
849
+ "options": "Time"
850
+ },
851
+ "properties": [
852
+ {
853
+ "id": "displayName",
854
+ "value": "Time"
855
+ },
856
+ {
857
+ "id": "unit",
858
+ "value": "time: YYYY-MM-DD HH:mm:ss"
859
+ },
860
+ {
861
+ "id": "custom.align"
862
+ }
863
+ ]
864
+ },
865
+ {
866
+ "matcher": {
867
+ "id": "byName",
868
+ "options": ""
869
+ },
870
+ "properties": [
871
+ {
872
+ "id": "unit",
873
+ "value": "short"
874
+ },
875
+ {
876
+ "id": "decimals",
877
+ "value": 2
878
+ },
879
+ {
880
+ "id": "custom.align"
881
+ }
882
+ ]
883
+ },
884
+ {
885
+ "matcher": {
886
+ "id": "byName",
887
+ "options": "data_vulnerability_package_name"
888
+ },
889
+ "properties": [
890
+ {
891
+ "id": "displayName",
892
+ "value": "PACKAGE NAME"
893
+ },
894
+ {
895
+ "id": "unit",
896
+ "value": "short"
897
+ },
898
+ {
899
+ "id": "decimals",
900
+ "value": -1
901
+ },
902
+ {
903
+ "id": "custom.align",
904
+ "value": "left"
905
+ }
906
+ ]
907
+ },
908
+ {
909
+ "matcher": {
910
+ "id": "byName",
911
+ "options": "Unique Count"
912
+ },
913
+ "properties": [
914
+ {
915
+ "id": "displayName",
916
+ "value": "HITS"
917
+ },
918
+ {
919
+ "id": "unit",
920
+ "value": "short"
921
+ },
922
+ {
923
+ "id": "decimals",
924
+ "value": -1
925
+ },
926
+ {
927
+ "id": "custom.align"
928
+ }
929
+ ]
930
+ },
931
+ {
932
+ "matcher": {
933
+ "id": "byName",
934
+ "options": "data_vulnerability_package_condition"
935
+ },
936
+ "properties": [
937
+ {
938
+ "id": "displayName",
939
+ "value": "CONDITION"
940
+ },
941
+ {
942
+ "id": "unit",
943
+ "value": "short"
944
+ },
945
+ {
946
+ "id": "decimals",
947
+ "value": 2
948
+ },
949
+ {
950
+ "id": "custom.align"
951
+ }
952
+ ]
953
+ },
954
+ {
955
+ "matcher": {
956
+ "id": "byName",
957
+ "options": "CONDITION"
958
+ },
959
+ "properties": [
960
+ {
961
+ "id": "custom.width",
962
+ "value": 378
963
+ }
964
+ ]
965
+ }
966
+ ]
967
+ },
968
+ "gridPos": {
969
+ "h": 11,
970
+ "w": 9,
971
+ "x": 0,
972
+ "y": 18
973
+ },
974
+ "id": 53,
975
+ "options": {
976
+ "cellHeight": "sm",
977
+ "footer": {
978
+ "countRows": false,
979
+ "fields": "",
980
+ "reducer": ["sum"],
981
+ "show": false
982
+ },
983
+ "showHeader": true,
984
+ "sortBy": []
985
+ },
986
+ "pluginVersion": "10.2.3",
987
+ "targets": [
988
+ {
989
+ "bucketAggs": [
990
+ {
991
+ "fake": true,
992
+ "field": "package.name",
993
+ "id": "8",
994
+ "settings": {
995
+ "min_doc_count": 1,
996
+ "order": "desc",
997
+ "orderBy": "_term",
998
+ "size": "10"
999
+ },
1000
+ "type": "terms"
1001
+ }
1002
+ ],
1003
+ "datasource": {
1004
+ "type": "grafana-opensearch-datasource",
1005
+ "uid": "replace_datasource_uid"
1006
+ },
1007
+ "metrics": [
1008
+ {
1009
+ "field": "package.description",
1010
+ "id": "1",
1011
+ "meta": {},
1012
+ "settings": {},
1013
+ "type": "cardinality"
1014
+ }
1015
+ ],
1016
+ "query": "agent.name:$agent_name",
1017
+ "refId": "A",
1018
+ "timeField": "vulnerability.detected_at"
1019
+ }
1020
+ ],
1021
+ "title": "SOFTWARE / PACKAGE",
1022
+ "transformations": [
1023
+ {
1024
+ "id": "merge",
1025
+ "options": {
1026
+ "reducers": []
1027
+ }
1028
+ }
1029
+ ],
1030
+ "type": "table"
1031
+ },
1032
+ {
1033
+ "datasource": {
1034
+ "type": "grafana-opensearch-datasource",
1035
+ "uid": "replace_datasource_uid"
1036
+ },
1037
+ "fieldConfig": {
1038
+ "defaults": {
1039
+ "color": {
1040
+ "mode": "palette-classic"
1041
+ },
1042
+ "custom": {
1043
+ "axisBorderShow": false,
1044
+ "axisCenteredZero": false,
1045
+ "axisColorMode": "text",
1046
+ "axisLabel": "",
1047
+ "axisPlacement": "auto",
1048
+ "barAlignment": 0,
1049
+ "drawStyle": "line",
1050
+ "fillOpacity": 0,
1051
+ "gradientMode": "none",
1052
+ "hideFrom": {
1053
+ "legend": false,
1054
+ "tooltip": false,
1055
+ "viz": false
1056
+ },
1057
+ "insertNulls": false,
1058
+ "lineInterpolation": "linear",
1059
+ "lineWidth": 1,
1060
+ "pointSize": 5,
1061
+ "scaleDistribution": {
1062
+ "type": "linear"
1063
+ },
1064
+ "showPoints": "auto",
1065
+ "spanNulls": false,
1066
+ "stacking": {
1067
+ "group": "A",
1068
+ "mode": "none"
1069
+ },
1070
+ "thresholdsStyle": {
1071
+ "mode": "off"
1072
+ }
1073
+ },
1074
+ "mappings": [],
1075
+ "thresholds": {
1076
+ "mode": "absolute",
1077
+ "steps": [
1078
+ {
1079
+ "color": "green",
1080
+ "value": null
1081
+ },
1082
+ {
1083
+ "color": "red",
1084
+ "value": 80
1085
+ }
1086
+ ]
1087
+ }
1088
+ },
1089
+ "overrides": []
1090
+ },
1091
+ "gridPos": {
1092
+ "h": 11,
1093
+ "w": 15,
1094
+ "x": 9,
1095
+ "y": 18
1096
+ },
1097
+ "id": 72,
1098
+ "options": {
1099
+ "legend": {
1100
+ "calcs": [],
1101
+ "displayMode": "table",
1102
+ "placement": "right",
1103
+ "showLegend": true
1104
+ },
1105
+ "tooltip": {
1106
+ "mode": "single",
1107
+ "sort": "none"
1108
+ }
1109
+ },
1110
+ "targets": [
1111
+ {
1112
+ "alias": "",
1113
+ "bucketAggs": [
1114
+ {
1115
+ "field": "agent.name",
1116
+ "id": "3",
1117
+ "settings": {
1118
+ "min_doc_count": "1",
1119
+ "order": "desc",
1120
+ "orderBy": "_term",
1121
+ "size": "10"
1122
+ },
1123
+ "type": "terms"
1124
+ },
1125
+ {
1126
+ "field": "timestamp",
1127
+ "id": "2",
1128
+ "settings": {
1129
+ "interval": "auto"
1130
+ },
1131
+ "type": "date_histogram"
1132
+ }
1133
+ ],
1134
+ "datasource": {
1135
+ "type": "grafana-opensearch-datasource",
1136
+ "uid": "replace_datasource_uid"
1137
+ },
1138
+ "metrics": [
1139
+ {
1140
+ "id": "1",
1141
+ "type": "count"
1142
+ }
1143
+ ],
1144
+ "query": "agent.name:$agent_name",
1145
+ "refId": "A",
1146
+ "timeField": "timestamp"
1147
+ }
1148
+ ],
1149
+ "title": "VULNERABILITY EVENTS - HISTOGRAM",
1150
+ "type": "timeseries"
1151
+ },
1152
+ {
1153
+ "datasource": {
1154
+ "type": "grafana-opensearch-datasource",
1155
+ "uid": "replace_datasource_uid"
1156
+ },
1157
+ "fieldConfig": {
1158
+ "defaults": {
1159
+ "color": {
1160
+ "mode": "thresholds"
1161
+ },
1162
+ "custom": {
1163
+ "align": "auto",
1164
+ "cellOptions": {
1165
+ "type": "auto"
1166
+ },
1167
+ "inspect": false
1168
+ },
1169
+ "mappings": [],
1170
+ "thresholds": {
1171
+ "mode": "absolute",
1172
+ "steps": [
1173
+ {
1174
+ "color": "green"
1175
+ },
1176
+ {
1177
+ "color": "red",
1178
+ "value": 80
1179
+ }
1180
+ ]
1181
+ }
1182
+ },
1183
+ "overrides": [
1184
+ {
1185
+ "matcher": {
1186
+ "id": "byName",
1187
+ "options": "data_vulnerability_package_name"
1188
+ },
1189
+ "properties": [
1190
+ {
1191
+ "id": "displayName",
1192
+ "value": "PACKAGE"
1193
+ },
1194
+ {
1195
+ "id": "custom.align"
1196
+ }
1197
+ ]
1198
+ },
1199
+ {
1200
+ "matcher": {
1201
+ "id": "byName",
1202
+ "options": "data_vulnerability_package_condition"
1203
+ },
1204
+ "properties": [
1205
+ {
1206
+ "id": "displayName",
1207
+ "value": "STATUS"
1208
+ },
1209
+ {
1210
+ "id": "unit",
1211
+ "value": "short"
1212
+ },
1213
+ {
1214
+ "id": "decimals",
1215
+ "value": -1
1216
+ },
1217
+ {
1218
+ "id": "custom.align"
1219
+ }
1220
+ ]
1221
+ },
1222
+ {
1223
+ "matcher": {
1224
+ "id": "byName",
1225
+ "options": "data_vulnerability_cve"
1226
+ },
1227
+ "properties": [
1228
+ {
1229
+ "id": "displayName",
1230
+ "value": "CVE"
1231
+ },
1232
+ {
1233
+ "id": "unit",
1234
+ "value": "kbytes"
1235
+ },
1236
+ {
1237
+ "id": "decimals",
1238
+ "value": -1
1239
+ },
1240
+ {
1241
+ "id": "custom.align"
1242
+ }
1243
+ ]
1244
+ },
1245
+ {
1246
+ "matcher": {
1247
+ "id": "byName",
1248
+ "options": "agent_name"
1249
+ },
1250
+ "properties": [
1251
+ {
1252
+ "id": "displayName",
1253
+ "value": "AGENT"
1254
+ },
1255
+ {
1256
+ "id": "unit",
1257
+ "value": "short"
1258
+ },
1259
+ {
1260
+ "id": "decimals",
1261
+ "value": 2
1262
+ },
1263
+ {
1264
+ "id": "custom.align"
1265
+ }
1266
+ ]
1267
+ },
1268
+ {
1269
+ "matcher": {
1270
+ "id": "byName",
1271
+ "options": "data_vulnerability_title"
1272
+ },
1273
+ "properties": [
1274
+ {
1275
+ "id": "displayName",
1276
+ "value": "CVE TITLE"
1277
+ },
1278
+ {
1279
+ "id": "unit",
1280
+ "value": "short"
1281
+ },
1282
+ {
1283
+ "id": "decimals",
1284
+ "value": 2
1285
+ },
1286
+ {
1287
+ "id": "custom.align"
1288
+ }
1289
+ ]
1290
+ },
1291
+ {
1292
+ "matcher": {
1293
+ "id": "byName",
1294
+ "options": "data_vulnerability_severity"
1295
+ },
1296
+ "properties": [
1297
+ {
1298
+ "id": "displayName",
1299
+ "value": "SEVERITY"
1300
+ },
1301
+ {
1302
+ "id": "unit",
1303
+ "value": "short"
1304
+ },
1305
+ {
1306
+ "id": "decimals",
1307
+ "value": 2
1308
+ },
1309
+ {
1310
+ "id": "custom.align"
1311
+ }
1312
+ ]
1313
+ },
1314
+ {
1315
+ "matcher": {
1316
+ "id": "byName",
1317
+ "options": "epss_epss"
1318
+ },
1319
+ "properties": [
1320
+ {
1321
+ "id": "displayName",
1322
+ "value": "EPSS"
1323
+ }
1324
+ ]
1325
+ },
1326
+ {
1327
+ "matcher": {
1328
+ "id": "byName",
1329
+ "options": "AGENT"
1330
+ },
1331
+ "properties": [
1332
+ {
1333
+ "id": "custom.width",
1334
+ "value": 183
1335
+ }
1336
+ ]
1337
+ },
1338
+ {
1339
+ "matcher": {
1340
+ "id": "byName",
1341
+ "options": "CVE"
1342
+ },
1343
+ "properties": [
1344
+ {
1345
+ "id": "custom.width",
1346
+ "value": 183
1347
+ }
1348
+ ]
1349
+ },
1350
+ {
1351
+ "matcher": {
1352
+ "id": "byName",
1353
+ "options": "timestamp"
1354
+ },
1355
+ "properties": [
1356
+ {
1357
+ "id": "custom.width",
1358
+ "value": 200
1359
+ }
1360
+ ]
1361
+ },
1362
+ {
1363
+ "matcher": {
1364
+ "id": "byName",
1365
+ "options": "SEVERITY"
1366
+ },
1367
+ "properties": [
1368
+ {
1369
+ "id": "custom.width",
1370
+ "value": 174
1371
+ }
1372
+ ]
1373
+ },
1374
+ {
1375
+ "matcher": {
1376
+ "id": "byName",
1377
+ "options": "CVE TITLE"
1378
+ },
1379
+ "properties": [
1380
+ {
1381
+ "id": "custom.width",
1382
+ "value": 736
1383
+ }
1384
+ ]
1385
+ }
1386
+ ]
1387
+ },
1388
+ "gridPos": {
1389
+ "h": 12,
1390
+ "w": 24,
1391
+ "x": 0,
1392
+ "y": 29
1393
+ },
1394
+ "id": 48,
1395
+ "options": {
1396
+ "cellHeight": "sm",
1397
+ "footer": {
1398
+ "countRows": false,
1399
+ "fields": "",
1400
+ "reducer": ["sum"],
1401
+ "show": false
1402
+ },
1403
+ "showHeader": true,
1404
+ "sortBy": []
1405
+ },
1406
+ "pluginVersion": "10.2.3",
1407
+ "targets": [
1408
+ {
1409
+ "bucketAggs": [],
1410
+ "datasource": {
1411
+ "type": "grafana-opensearch-datasource",
1412
+ "uid": "replace_datasource_uid"
1413
+ },
1414
+ "metrics": [
1415
+ {
1416
+ "id": "1",
1417
+ "settings": {
1418
+ "size": "500"
1419
+ },
1420
+ "type": "raw_data"
1421
+ }
1422
+ ],
1423
+ "query": "agent.name:$agent_name",
1424
+ "refId": "A",
1425
+ "timeField": "vulnerability.detected_at"
1426
+ }
1427
+ ],
1428
+ "title": "SYSTEM VULNERABILITIES - DETAILS",
1429
+ "transformations": [
1430
+ {
1431
+ "id": "filterFieldsByName",
1432
+ "options": {
1433
+ "byVariable": false,
1434
+ "include": {
1435
+ "names": [
1436
+ "agent.name",
1437
+ "package.name",
1438
+ "vulnerability.description",
1439
+ "vulnerability.id",
1440
+ "vulnerability.severity",
1441
+ "vulnerability.detected_at"
1442
+ ]
1443
+ }
1444
+ }
1445
+ },
1446
+ {
1447
+ "id": "organize",
1448
+ "options": {
1449
+ "excludeByName": {},
1450
+ "includeByName": {},
1451
+ "indexByName": {
1452
+ "agent.name": 1,
1453
+ "package.name": 3,
1454
+ "vulnerability.description": 5,
1455
+ "vulnerability.detected_at": 0,
1456
+ "vulnerability.id": 2,
1457
+ "vulnerability.severity": 4
1458
+ },
1459
+ "renameByName": {
1460
+ "agent.name": "AGENT",
1461
+ "package.name": "PACKAGE",
1462
+ "vulnerability.description": "DESCRIPTION",
1463
+ "vulnerability.detected_at": "DETECTED AT",
1464
+ "vulnerability.id": "CVE",
1465
+ "vulnerability.severity": "SEVERITY"
1466
+ }
1467
+ }
1468
+ }
1469
+ ],
1470
+ "type": "table"
1471
+ },
1472
+ {
1473
+ "collapsed": true,
1474
+ "datasource": {
1475
+ "type": "grafana-opensearch-datasource",
1476
+ "uid": "replace_datasource_uid"
1477
+ },
1478
+ "gridPos": {
1479
+ "h": 1,
1480
+ "w": 24,
1481
+ "x": 0,
1482
+ "y": 41
1483
+ },
1484
+ "id": 62,
1485
+ "panels": [
1486
+ {
1487
+ "datasource": {
1488
+ "type": "grafana-opensearch-datasource",
1489
+ "uid": "replace_datasource_uid"
1490
+ },
1491
+ "fieldConfig": {
1492
+ "defaults": {
1493
+ "mappings": [
1494
+ {
1495
+ "options": {
1496
+ "match": "null",
1497
+ "result": {
1498
+ "text": "N/A"
1499
+ }
1500
+ },
1501
+ "type": "special"
1502
+ }
1503
+ ],
1504
+ "thresholds": {
1505
+ "mode": "absolute",
1506
+ "steps": [
1507
+ {
1508
+ "color": "dark-orange"
1509
+ }
1510
+ ]
1511
+ },
1512
+ "unit": "short"
1513
+ },
1514
+ "overrides": []
1515
+ },
1516
+ "gridPos": {
1517
+ "h": 7,
1518
+ "w": 4,
1519
+ "x": 0,
1520
+ "y": 27
1521
+ },
1522
+ "id": 63,
1523
+ "links": [],
1524
+ "options": {
1525
+ "colorMode": "value",
1526
+ "graphMode": "area",
1527
+ "justifyMode": "auto",
1528
+ "orientation": "horizontal",
1529
+ "reduceOptions": {
1530
+ "calcs": ["sum"],
1531
+ "fields": "",
1532
+ "values": false
1533
+ },
1534
+ "text": {},
1535
+ "textMode": "auto"
1536
+ },
1537
+ "pluginVersion": "10.0.3",
1538
+ "targets": [
1539
+ {
1540
+ "bucketAggs": [
1541
+ {
1542
+ "field": "timestamp",
1543
+ "id": "2",
1544
+ "settings": {
1545
+ "interval": "auto",
1546
+ "min_doc_count": 0,
1547
+ "trimEdges": 0
1548
+ },
1549
+ "type": "date_histogram"
1550
+ }
1551
+ ],
1552
+ "datasource": {
1553
+ "type": "grafana-opensearch-datasource",
1554
+ "uid": "replace_datasource_uid"
1555
+ },
1556
+ "metrics": [
1557
+ {
1558
+ "field": "select field",
1559
+ "id": "1",
1560
+ "type": "count"
1561
+ }
1562
+ ],
1563
+ "query": "rule_group2:snyk AND agent_name:$agent_name",
1564
+ "refId": "A",
1565
+ "timeField": "timestamp"
1566
+ }
1567
+ ],
1568
+ "title": "VULNERABILITY EVENTS",
1569
+ "type": "stat"
1570
+ },
1571
+ {
1572
+ "columns": [],
1573
+ "datasource": {
1574
+ "type": "grafana-opensearch-datasource",
1575
+ "uid": "replace_datasource_uid"
1576
+ },
1577
+ "fontSize": "100%",
1578
+ "gridPos": {
1579
+ "h": 7,
1580
+ "w": 8,
1581
+ "x": 4,
1582
+ "y": 27
1583
+ },
1584
+ "id": 64,
1585
+ "showHeader": true,
1586
+ "sort": {
1587
+ "col": 0,
1588
+ "desc": true
1589
+ },
1590
+ "styles": [
1591
+ {
1592
+ "$$hashKey": "object:108",
1593
+ "alias": "Time",
1594
+ "align": "auto",
1595
+ "dateFormat": "YYYY-MM-DD HH:mm:ss",
1596
+ "pattern": "Time",
1597
+ "type": "date"
1598
+ },
1599
+ {
1600
+ "$$hashKey": "object:109",
1601
+ "alias": "",
1602
+ "align": "auto",
1603
+ "colorMode": "row",
1604
+ "colors": ["rgba(50, 172, 45, 0.97)", "rgba(237, 129, 40, 0.89)", "#FA6400"],
1605
+ "dateFormat": "YYYY-MM-DD HH:mm:ss",
1606
+ "decimals": -1,
1607
+ "mappingType": 1,
1608
+ "pattern": "Count",
1609
+ "thresholds": ["0", "1"],
1610
+ "type": "number",
1611
+ "unit": "short"
1612
+ },
1613
+ {
1614
+ "$$hashKey": "object:110",
1615
+ "alias": "AGENT",
1616
+ "align": "auto",
1617
+ "colors": ["rgba(245, 54, 54, 0.9)", "rgba(237, 129, 40, 0.89)", "rgba(50, 172, 45, 0.97)"],
1618
+ "dateFormat": "YYYY-MM-DD HH:mm:ss",
1619
+ "decimals": 2,
1620
+ "mappingType": 1,
1621
+ "pattern": "agent_name",
1622
+ "thresholds": [],
1623
+ "type": "number",
1624
+ "unit": "short"
1625
+ }
1626
+ ],
1627
+ "targets": [
1628
+ {
1629
+ "bucketAggs": [
1630
+ {
1631
+ "fake": true,
1632
+ "field": "agent_name",
1633
+ "id": "4",
1634
+ "settings": {
1635
+ "min_doc_count": 1,
1636
+ "order": "desc",
1637
+ "orderBy": "_term",
1638
+ "size": "0"
1639
+ },
1640
+ "type": "terms"
1641
+ }
1642
+ ],
1643
+ "datasource": {
1644
+ "type": "grafana-opensearch-datasource",
1645
+ "uid": "replace_datasource_uid"
1646
+ },
1647
+ "metrics": [
1648
+ {
1649
+ "field": "select field",
1650
+ "id": "1",
1651
+ "type": "count"
1652
+ }
1653
+ ],
1654
+ "query": "rule_group2:snyk AND agent_name:$agent_name",
1655
+ "refId": "A",
1656
+ "timeField": "timestamp"
1657
+ }
1658
+ ],
1659
+ "title": "DOCKER HOST",
1660
+ "transform": "table",
1661
+ "type": "table-old"
1662
+ },
1663
+ {
1664
+ "datasource": {
1665
+ "type": "grafana-opensearch-datasource",
1666
+ "uid": "replace_datasource_uid"
1667
+ },
1668
+ "fieldConfig": {
1669
+ "defaults": {
1670
+ "color": {
1671
+ "mode": "thresholds"
1672
+ },
1673
+ "custom": {
1674
+ "align": "auto",
1675
+ "cellOptions": {
1676
+ "type": "auto"
1677
+ },
1678
+ "filterable": false,
1679
+ "inspect": false
1680
+ },
1681
+ "mappings": [],
1682
+ "thresholds": {
1683
+ "mode": "absolute",
1684
+ "steps": [
1685
+ {
1686
+ "color": "green"
1687
+ },
1688
+ {
1689
+ "color": "red",
1690
+ "value": 80
1691
+ }
1692
+ ]
1693
+ }
1694
+ },
1695
+ "overrides": [
1696
+ {
1697
+ "matcher": {
1698
+ "id": "byName",
1699
+ "options": "Time"
1700
+ },
1701
+ "properties": [
1702
+ {
1703
+ "id": "displayName",
1704
+ "value": "Time"
1705
+ },
1706
+ {
1707
+ "id": "unit",
1708
+ "value": "time: YYYY-MM-DD HH:mm:ss"
1709
+ },
1710
+ {
1711
+ "id": "custom.align"
1712
+ }
1713
+ ]
1714
+ },
1715
+ {
1716
+ "matcher": {
1717
+ "id": "byName",
1718
+ "options": ""
1719
+ },
1720
+ "properties": [
1721
+ {
1722
+ "id": "unit",
1723
+ "value": "short"
1724
+ },
1725
+ {
1726
+ "id": "decimals",
1727
+ "value": 2
1728
+ },
1729
+ {
1730
+ "id": "custom.align"
1731
+ }
1732
+ ]
1733
+ },
1734
+ {
1735
+ "matcher": {
1736
+ "id": "byName",
1737
+ "options": "data_vulnerability_cve"
1738
+ },
1739
+ "properties": [
1740
+ {
1741
+ "id": "displayName",
1742
+ "value": "CVE"
1743
+ },
1744
+ {
1745
+ "id": "unit",
1746
+ "value": "short"
1747
+ },
1748
+ {
1749
+ "id": "decimals",
1750
+ "value": -1
1751
+ },
1752
+ {
1753
+ "id": "links",
1754
+ "value": [
1755
+ {
1756
+ "targetBlank": true,
1757
+ "title": "NVD - NIST DATABASE",
1758
+ "url": "https://nvd.nist.gov/vuln/detail/$__cell"
1759
+ }
1760
+ ]
1761
+ },
1762
+ {
1763
+ "id": "custom.align",
1764
+ "value": "left"
1765
+ }
1766
+ ]
1767
+ },
1768
+ {
1769
+ "matcher": {
1770
+ "id": "byName",
1771
+ "options": "Unique Count"
1772
+ },
1773
+ "properties": [
1774
+ {
1775
+ "id": "displayName",
1776
+ "value": "HITS"
1777
+ },
1778
+ {
1779
+ "id": "unit",
1780
+ "value": "short"
1781
+ },
1782
+ {
1783
+ "id": "decimals",
1784
+ "value": -1
1785
+ },
1786
+ {
1787
+ "id": "custom.align"
1788
+ }
1789
+ ]
1790
+ }
1791
+ ]
1792
+ },
1793
+ "gridPos": {
1794
+ "h": 7,
1795
+ "w": 6,
1796
+ "x": 12,
1797
+ "y": 27
1798
+ },
1799
+ "id": 71,
1800
+ "options": {
1801
+ "cellHeight": "sm",
1802
+ "footer": {
1803
+ "countRows": false,
1804
+ "fields": "",
1805
+ "reducer": ["sum"],
1806
+ "show": false
1807
+ },
1808
+ "showHeader": true
1809
+ },
1810
+ "pluginVersion": "10.0.3",
1811
+ "targets": [
1812
+ {
1813
+ "bucketAggs": [
1814
+ {
1815
+ "fake": true,
1816
+ "field": "data_dockerBaseImage",
1817
+ "id": "7",
1818
+ "settings": {
1819
+ "min_doc_count": 1,
1820
+ "order": "desc",
1821
+ "orderBy": "_term",
1822
+ "size": "10"
1823
+ },
1824
+ "type": "terms"
1825
+ }
1826
+ ],
1827
+ "datasource": {
1828
+ "type": "grafana-opensearch-datasource",
1829
+ "uid": "replace_datasource_uid"
1830
+ },
1831
+ "metrics": [
1832
+ {
1833
+ "field": "data_dockerBaseImage",
1834
+ "id": "1",
1835
+ "meta": {},
1836
+ "settings": {},
1837
+ "type": "cardinality"
1838
+ }
1839
+ ],
1840
+ "query": "rule_group2:snyk AND agent_name:$agent_name",
1841
+ "refId": "A",
1842
+ "timeField": "timestamp"
1843
+ }
1844
+ ],
1845
+ "title": "DOCKER BASE IMAGE",
1846
+ "transformations": [
1847
+ {
1848
+ "id": "merge",
1849
+ "options": {
1850
+ "reducers": []
1851
+ }
1852
+ }
1853
+ ],
1854
+ "type": "table"
1855
+ },
1856
+ {
1857
+ "datasource": {
1858
+ "type": "grafana-opensearch-datasource",
1859
+ "uid": "replace_datasource_uid"
1860
+ },
1861
+ "fieldConfig": {
1862
+ "defaults": {
1863
+ "color": {
1864
+ "mode": "thresholds"
1865
+ },
1866
+ "custom": {
1867
+ "align": "auto",
1868
+ "cellOptions": {
1869
+ "type": "auto"
1870
+ },
1871
+ "filterable": false,
1872
+ "inspect": false
1873
+ },
1874
+ "mappings": [],
1875
+ "thresholds": {
1876
+ "mode": "absolute",
1877
+ "steps": [
1878
+ {
1879
+ "color": "green"
1880
+ },
1881
+ {
1882
+ "color": "red",
1883
+ "value": 80
1884
+ }
1885
+ ]
1886
+ }
1887
+ },
1888
+ "overrides": [
1889
+ {
1890
+ "matcher": {
1891
+ "id": "byName",
1892
+ "options": "Time"
1893
+ },
1894
+ "properties": [
1895
+ {
1896
+ "id": "displayName",
1897
+ "value": "Time"
1898
+ },
1899
+ {
1900
+ "id": "unit",
1901
+ "value": "time: YYYY-MM-DD HH:mm:ss"
1902
+ },
1903
+ {
1904
+ "id": "custom.align"
1905
+ }
1906
+ ]
1907
+ },
1908
+ {
1909
+ "matcher": {
1910
+ "id": "byName",
1911
+ "options": ""
1912
+ },
1913
+ "properties": [
1914
+ {
1915
+ "id": "unit",
1916
+ "value": "short"
1917
+ },
1918
+ {
1919
+ "id": "decimals",
1920
+ "value": 2
1921
+ },
1922
+ {
1923
+ "id": "custom.align"
1924
+ }
1925
+ ]
1926
+ },
1927
+ {
1928
+ "matcher": {
1929
+ "id": "byName",
1930
+ "options": "data_vulnerability_cve"
1931
+ },
1932
+ "properties": [
1933
+ {
1934
+ "id": "displayName",
1935
+ "value": "CVE"
1936
+ },
1937
+ {
1938
+ "id": "unit",
1939
+ "value": "short"
1940
+ },
1941
+ {
1942
+ "id": "decimals",
1943
+ "value": -1
1944
+ },
1945
+ {
1946
+ "id": "links",
1947
+ "value": [
1948
+ {
1949
+ "targetBlank": true,
1950
+ "title": "NVD - NIST DATABASE",
1951
+ "url": "https://nvd.nist.gov/vuln/detail/$__cell"
1952
+ }
1953
+ ]
1954
+ },
1955
+ {
1956
+ "id": "custom.align",
1957
+ "value": "left"
1958
+ }
1959
+ ]
1960
+ },
1961
+ {
1962
+ "matcher": {
1963
+ "id": "byName",
1964
+ "options": "Unique Count"
1965
+ },
1966
+ "properties": [
1967
+ {
1968
+ "id": "displayName",
1969
+ "value": "HITS"
1970
+ },
1971
+ {
1972
+ "id": "unit",
1973
+ "value": "short"
1974
+ },
1975
+ {
1976
+ "id": "decimals",
1977
+ "value": -1
1978
+ },
1979
+ {
1980
+ "id": "custom.align"
1981
+ }
1982
+ ]
1983
+ }
1984
+ ]
1985
+ },
1986
+ "gridPos": {
1987
+ "h": 7,
1988
+ "w": 6,
1989
+ "x": 18,
1990
+ "y": 27
1991
+ },
1992
+ "id": 65,
1993
+ "options": {
1994
+ "cellHeight": "sm",
1995
+ "footer": {
1996
+ "countRows": false,
1997
+ "fields": "",
1998
+ "reducer": ["sum"],
1999
+ "show": false
2000
+ },
2001
+ "showHeader": true
2002
+ },
2003
+ "pluginVersion": "10.0.3",
2004
+ "targets": [
2005
+ {
2006
+ "bucketAggs": [
2007
+ {
2008
+ "fake": true,
2009
+ "field": "data_identifiers_CVE",
2010
+ "id": "7",
2011
+ "settings": {
2012
+ "min_doc_count": 1,
2013
+ "order": "desc",
2014
+ "orderBy": "_term",
2015
+ "size": "10"
2016
+ },
2017
+ "type": "terms"
2018
+ }
2019
+ ],
2020
+ "datasource": {
2021
+ "type": "grafana-opensearch-datasource",
2022
+ "uid": "replace_datasource_uid"
2023
+ },
2024
+ "metrics": [
2025
+ {
2026
+ "field": "data_identifiers_CVE",
2027
+ "id": "1",
2028
+ "meta": {},
2029
+ "settings": {},
2030
+ "type": "cardinality"
2031
+ }
2032
+ ],
2033
+ "query": "rule_group2:snyk AND agent_name:$agent_name",
2034
+ "refId": "A",
2035
+ "timeField": "timestamp"
2036
+ }
2037
+ ],
2038
+ "title": "CVEs",
2039
+ "transformations": [
2040
+ {
2041
+ "id": "merge",
2042
+ "options": {
2043
+ "reducers": []
2044
+ }
2045
+ }
2046
+ ],
2047
+ "type": "table"
2048
+ },
2049
+ {
2050
+ "datasource": {
2051
+ "type": "grafana-opensearch-datasource",
2052
+ "uid": "replace_datasource_uid"
2053
+ },
2054
+ "fieldConfig": {
2055
+ "defaults": {
2056
+ "mappings": [],
2057
+ "thresholds": {
2058
+ "mode": "absolute",
2059
+ "steps": [
2060
+ {
2061
+ "color": "green"
2062
+ },
2063
+ {
2064
+ "color": "red",
2065
+ "value": 80
2066
+ }
2067
+ ]
2068
+ }
2069
+ },
2070
+ "overrides": []
2071
+ },
2072
+ "gridPos": {
2073
+ "h": 11,
2074
+ "w": 17,
2075
+ "x": 0,
2076
+ "y": 34
2077
+ },
2078
+ "id": 67,
2079
+ "options": {
2080
+ "displayMode": "gradient",
2081
+ "minVizHeight": 10,
2082
+ "minVizWidth": 0,
2083
+ "orientation": "vertical",
2084
+ "reduceOptions": {
2085
+ "calcs": ["sum"],
2086
+ "fields": "",
2087
+ "values": false
2088
+ },
2089
+ "showUnfilled": true,
2090
+ "text": {},
2091
+ "valueMode": "color"
2092
+ },
2093
+ "pluginVersion": "10.0.3",
2094
+ "targets": [
2095
+ {
2096
+ "bucketAggs": [
2097
+ {
2098
+ "fake": true,
2099
+ "field": "data_packageName",
2100
+ "id": "6",
2101
+ "settings": {
2102
+ "min_doc_count": 1,
2103
+ "order": "desc",
2104
+ "orderBy": "_count",
2105
+ "size": "15"
2106
+ },
2107
+ "type": "terms"
2108
+ },
2109
+ {
2110
+ "fake": true,
2111
+ "field": "timestamp",
2112
+ "id": "5",
2113
+ "settings": {
2114
+ "interval": "auto",
2115
+ "min_doc_count": 0,
2116
+ "trimEdges": 0
2117
+ },
2118
+ "type": "date_histogram"
2119
+ }
2120
+ ],
2121
+ "datasource": {
2122
+ "type": "grafana-opensearch-datasource",
2123
+ "uid": "replace_datasource_uid"
2124
+ },
2125
+ "metrics": [
2126
+ {
2127
+ "field": "type",
2128
+ "id": "1",
2129
+ "meta": {},
2130
+ "settings": {},
2131
+ "type": "count"
2132
+ }
2133
+ ],
2134
+ "query": "rule_group2:snyk AND agent_name:$agent_name",
2135
+ "refId": "A",
2136
+ "timeField": "timestamp"
2137
+ }
2138
+ ],
2139
+ "title": "VULNERABLE SOFTWARE / PACKAGE",
2140
+ "type": "bargauge"
2141
+ },
2142
+ {
2143
+ "datasource": {
2144
+ "type": "grafana-opensearch-datasource",
2145
+ "uid": "replace_datasource_uid"
2146
+ },
2147
+ "fieldConfig": {
2148
+ "defaults": {
2149
+ "color": {
2150
+ "mode": "palette-classic"
2151
+ },
2152
+ "custom": {
2153
+ "hideFrom": {
2154
+ "legend": false,
2155
+ "tooltip": false,
2156
+ "viz": false
2157
+ }
2158
+ },
2159
+ "decimals": 0,
2160
+ "mappings": [],
2161
+ "unit": "short"
2162
+ },
2163
+ "overrides": [
2164
+ {
2165
+ "matcher": {
2166
+ "id": "byName",
2167
+ "options": "Critical"
2168
+ },
2169
+ "properties": [
2170
+ {
2171
+ "id": "color",
2172
+ "value": {
2173
+ "fixedColor": "#C4162A",
2174
+ "mode": "fixed"
2175
+ }
2176
+ }
2177
+ ]
2178
+ },
2179
+ {
2180
+ "matcher": {
2181
+ "id": "byName",
2182
+ "options": "High"
2183
+ },
2184
+ "properties": [
2185
+ {
2186
+ "id": "color",
2187
+ "value": {
2188
+ "fixedColor": "#F2495C",
2189
+ "mode": "fixed"
2190
+ }
2191
+ }
2192
+ ]
2193
+ },
2194
+ {
2195
+ "matcher": {
2196
+ "id": "byName",
2197
+ "options": "Low"
2198
+ },
2199
+ "properties": [
2200
+ {
2201
+ "id": "color",
2202
+ "value": {
2203
+ "fixedColor": "#5794F2",
2204
+ "mode": "fixed"
2205
+ }
2206
+ }
2207
+ ]
2208
+ },
2209
+ {
2210
+ "matcher": {
2211
+ "id": "byName",
2212
+ "options": "Medium"
2213
+ },
2214
+ "properties": [
2215
+ {
2216
+ "id": "color",
2217
+ "value": {
2218
+ "fixedColor": "#FF9830",
2219
+ "mode": "fixed"
2220
+ }
2221
+ }
2222
+ ]
2223
+ },
2224
+ {
2225
+ "matcher": {
2226
+ "id": "byName",
2227
+ "options": "high"
2228
+ },
2229
+ "properties": [
2230
+ {
2231
+ "id": "color",
2232
+ "value": {
2233
+ "fixedColor": "red",
2234
+ "mode": "fixed"
2235
+ }
2236
+ }
2237
+ ]
2238
+ },
2239
+ {
2240
+ "matcher": {
2241
+ "id": "byName",
2242
+ "options": "medium"
2243
+ },
2244
+ "properties": [
2245
+ {
2246
+ "id": "color",
2247
+ "value": {
2248
+ "fixedColor": "orange",
2249
+ "mode": "fixed"
2250
+ }
2251
+ }
2252
+ ]
2253
+ }
2254
+ ]
2255
+ },
2256
+ "gridPos": {
2257
+ "h": 11,
2258
+ "w": 7,
2259
+ "x": 17,
2260
+ "y": 34
2261
+ },
2262
+ "id": 66,
2263
+ "links": [],
2264
+ "maxDataPoints": 3,
2265
+ "options": {
2266
+ "legend": {
2267
+ "calcs": [],
2268
+ "displayMode": "table",
2269
+ "placement": "right",
2270
+ "showLegend": true,
2271
+ "values": ["value"]
2272
+ },
2273
+ "pieType": "donut",
2274
+ "reduceOptions": {
2275
+ "calcs": ["sum"],
2276
+ "fields": "",
2277
+ "values": false
2278
+ },
2279
+ "tooltip": {
2280
+ "mode": "single",
2281
+ "sort": "none"
2282
+ }
2283
+ },
2284
+ "targets": [
2285
+ {
2286
+ "bucketAggs": [
2287
+ {
2288
+ "fake": true,
2289
+ "field": "data_nvdSeverity",
2290
+ "id": "3",
2291
+ "settings": {
2292
+ "min_doc_count": 1,
2293
+ "order": "desc",
2294
+ "orderBy": "_count",
2295
+ "size": "0"
2296
+ },
2297
+ "type": "terms"
2298
+ },
2299
+ {
2300
+ "field": "timestamp",
2301
+ "id": "2",
2302
+ "settings": {
2303
+ "interval": "auto",
2304
+ "min_doc_count": 0,
2305
+ "trimEdges": 0
2306
+ },
2307
+ "type": "date_histogram"
2308
+ }
2309
+ ],
2310
+ "datasource": {
2311
+ "type": "grafana-opensearch-datasource",
2312
+ "uid": "replace_datasource_uid"
2313
+ },
2314
+ "metrics": [
2315
+ {
2316
+ "field": "select field",
2317
+ "id": "1",
2318
+ "type": "count"
2319
+ }
2320
+ ],
2321
+ "query": "rule_group2:snyk AND agent_name:$agent_name",
2322
+ "refId": "A",
2323
+ "timeField": "timestamp"
2324
+ }
2325
+ ],
2326
+ "title": "VULNERABILITY LEVELS",
2327
+ "type": "piechart"
2328
+ }
2329
+ ],
2330
+ "title": "DOCKER IMAGES VULNERABILITIES - SUMMARY",
2331
+ "type": "row"
2332
+ },
2333
+ {
2334
+ "collapsed": true,
2335
+ "datasource": {
2336
+ "type": "grafana-opensearch-datasource",
2337
+ "uid": "replace_datasource_uid"
2338
+ },
2339
+ "gridPos": {
2340
+ "h": 1,
2341
+ "w": 24,
2342
+ "x": 0,
2343
+ "y": 42
2344
+ },
2345
+ "id": 70,
2346
+ "panels": [
2347
+ {
2348
+ "datasource": {
2349
+ "type": "grafana-opensearch-datasource",
2350
+ "uid": "replace_datasource_uid"
2351
+ },
2352
+ "fieldConfig": {
2353
+ "defaults": {
2354
+ "color": {
2355
+ "mode": "thresholds"
2356
+ },
2357
+ "custom": {
2358
+ "align": "auto",
2359
+ "cellOptions": {
2360
+ "type": "auto"
2361
+ }
2362
+ },
2363
+ "mappings": [],
2364
+ "thresholds": {
2365
+ "mode": "absolute",
2366
+ "steps": [
2367
+ {
2368
+ "color": "green"
2369
+ },
2370
+ {
2371
+ "color": "red",
2372
+ "value": 80
2373
+ }
2374
+ ]
2375
+ }
2376
+ },
2377
+ "overrides": [
2378
+ {
2379
+ "matcher": {
2380
+ "id": "byName",
2381
+ "options": "data_vulnerability_package_name"
2382
+ },
2383
+ "properties": [
2384
+ {
2385
+ "id": "displayName",
2386
+ "value": "PACKAGE"
2387
+ },
2388
+ {
2389
+ "id": "custom.align"
2390
+ }
2391
+ ]
2392
+ },
2393
+ {
2394
+ "matcher": {
2395
+ "id": "byName",
2396
+ "options": "data_vulnerability_package_condition"
2397
+ },
2398
+ "properties": [
2399
+ {
2400
+ "id": "displayName",
2401
+ "value": "STATUS"
2402
+ },
2403
+ {
2404
+ "id": "unit",
2405
+ "value": "short"
2406
+ },
2407
+ {
2408
+ "id": "decimals",
2409
+ "value": -1
2410
+ },
2411
+ {
2412
+ "id": "custom.align"
2413
+ }
2414
+ ]
2415
+ },
2416
+ {
2417
+ "matcher": {
2418
+ "id": "byName",
2419
+ "options": "data_vulnerability_cve"
2420
+ },
2421
+ "properties": [
2422
+ {
2423
+ "id": "displayName",
2424
+ "value": "CVE"
2425
+ },
2426
+ {
2427
+ "id": "unit",
2428
+ "value": "kbytes"
2429
+ },
2430
+ {
2431
+ "id": "decimals",
2432
+ "value": -1
2433
+ },
2434
+ {
2435
+ "id": "custom.align"
2436
+ }
2437
+ ]
2438
+ },
2439
+ {
2440
+ "matcher": {
2441
+ "id": "byName",
2442
+ "options": "agent_name"
2443
+ },
2444
+ "properties": [
2445
+ {
2446
+ "id": "displayName",
2447
+ "value": "AGENT"
2448
+ },
2449
+ {
2450
+ "id": "unit",
2451
+ "value": "short"
2452
+ },
2453
+ {
2454
+ "id": "decimals",
2455
+ "value": 2
2456
+ },
2457
+ {
2458
+ "id": "custom.align"
2459
+ }
2460
+ ]
2461
+ },
2462
+ {
2463
+ "matcher": {
2464
+ "id": "byName",
2465
+ "options": "data_vulnerability_title"
2466
+ },
2467
+ "properties": [
2468
+ {
2469
+ "id": "displayName",
2470
+ "value": "CVE TITLE"
2471
+ },
2472
+ {
2473
+ "id": "unit",
2474
+ "value": "short"
2475
+ },
2476
+ {
2477
+ "id": "decimals",
2478
+ "value": 2
2479
+ },
2480
+ {
2481
+ "id": "custom.align"
2482
+ }
2483
+ ]
2484
+ },
2485
+ {
2486
+ "matcher": {
2487
+ "id": "byName",
2488
+ "options": "data_vulnerability_severity"
2489
+ },
2490
+ "properties": [
2491
+ {
2492
+ "id": "displayName",
2493
+ "value": "SEVERITY"
2494
+ },
2495
+ {
2496
+ "id": "unit",
2497
+ "value": "short"
2498
+ },
2499
+ {
2500
+ "id": "decimals",
2501
+ "value": 2
2502
+ },
2503
+ {
2504
+ "id": "custom.align"
2505
+ }
2506
+ ]
2507
+ }
2508
+ ]
2509
+ },
2510
+ "gridPos": {
2511
+ "h": 12,
2512
+ "w": 24,
2513
+ "x": 0,
2514
+ "y": 46
2515
+ },
2516
+ "id": 68,
2517
+ "options": {
2518
+ "footer": {
2519
+ "fields": "",
2520
+ "reducer": ["sum"],
2521
+ "show": false
2522
+ },
2523
+ "showHeader": true
2524
+ },
2525
+ "pluginVersion": "8.3.3",
2526
+ "targets": [
2527
+ {
2528
+ "bucketAggs": [],
2529
+ "datasource": {
2530
+ "type": "grafana-opensearch-datasource",
2531
+ "uid": "replace_datasource_uid"
2532
+ },
2533
+ "metrics": [
2534
+ {
2535
+ "id": "1",
2536
+ "settings": {
2537
+ "size": "500"
2538
+ },
2539
+ "type": "raw_data"
2540
+ }
2541
+ ],
2542
+ "query": "rule_group2:snyk AND agent_name:$agent_name",
2543
+ "refId": "A",
2544
+ "timeField": "timestamp"
2545
+ }
2546
+ ],
2547
+ "title": "SYSTEM VULNERABILITIES - DETAILS",
2548
+ "transformations": [
2549
+ {
2550
+ "id": "filterFieldsByName",
2551
+ "options": {
2552
+ "include": {
2553
+ "names": [
2554
+ "timestamp",
2555
+ "agent_name",
2556
+ "data_dockerBaseImage",
2557
+ "data_name",
2558
+ "data_nearestFixedInVersion",
2559
+ "data_nvdSeverity",
2560
+ "data_malicious",
2561
+ "data_identifiers_CWE",
2562
+ "data_identifiers_CVE",
2563
+ "data_cvssScore"
2564
+ ]
2565
+ }
2566
+ }
2567
+ },
2568
+ {
2569
+ "id": "organize",
2570
+ "options": {
2571
+ "excludeByName": {},
2572
+ "indexByName": {
2573
+ "agent_name": 1,
2574
+ "data_cvssScore": 7,
2575
+ "data_dockerBaseImage": 2,
2576
+ "data_identifiers_CVE": 4,
2577
+ "data_identifiers_CWE": 5,
2578
+ "data_malicious": 8,
2579
+ "data_name": 3,
2580
+ "data_nearestFixedInVersion": 9,
2581
+ "data_nvdSeverity": 6,
2582
+ "timestamp": 0
2583
+ },
2584
+ "renameByName": {
2585
+ "agent_name": "DOCKER HOST",
2586
+ "data_cvssScore": "SCORE",
2587
+ "data_dockerBaseImage": "CONTAINER BASE IMAGE",
2588
+ "data_identifiers_CVE": "CVE",
2589
+ "data_identifiers_CWE": "CWE",
2590
+ "data_malicious": "MALICIOUS",
2591
+ "data_name": "IMAGE",
2592
+ "data_nearestFixedInVersion": "FIXED IN",
2593
+ "data_nvdSeverity": "NVD SEVERITY",
2594
+ "timestamp": "DATE/TIME"
2595
+ }
2596
+ }
2597
+ }
2598
+ ],
2599
+ "transparent": true,
2600
+ "type": "table"
2601
+ }
2602
+ ],
2603
+ "title": "DOCKER IMAGES VULNERABILITIES - ENTRIES",
2604
+ "type": "row"
2605
+ }
2606
+ ],
2607
+ "refresh": "",
2608
+ "schemaVersion": 39,
2609
+ "tags": ["EDR"],
2610
+ "templating": {
2611
+ "list": [
2612
+ {
2613
+ "current": {
2614
+ "selected": false,
2615
+ "text": "All",
2616
+ "value": "$__all"
2617
+ },
2618
+ "datasource": {
2619
+ "type": "grafana-opensearch-datasource",
2620
+ "uid": "replace_datasource_uid"
2621
+ },
2622
+ "definition": "{ \"find\": \"terms\", \"field\": \"agent_name\", \"query\": \"rule_groups:vulnerability-detector\"}",
2623
+ "hide": 0,
2624
+ "includeAll": true,
2625
+ "label": "Agent",
2626
+ "multi": false,
2627
+ "name": "agent_name",
2628
+ "options": [],
2629
+ "query": "{ \"find\": \"terms\", \"field\": \"agent_name\", \"query\": \"rule_groups:vulnerability-detector\"}",
2630
+ "refresh": 2,
2631
+ "regex": "",
2632
+ "skipUrlSync": false,
2633
+ "sort": 2,
2634
+ "tagValuesQuery": "",
2635
+ "tagsQuery": "",
2636
+ "type": "query",
2637
+ "useTags": false
2638
+ },
2639
+ {
2640
+ "datasource": {
2641
+ "type": "grafana-opensearch-datasource",
2642
+ "uid": "replace_datasource_uid"
2643
+ },
2644
+ "filters": [],
2645
+ "hide": 0,
2646
+ "name": "Filters",
2647
+ "skipUrlSync": false,
2648
+ "type": "adhoc"
2649
+ }
2650
+ ]
2651
+ },
2652
+ "time": {
2653
+ "from": "now-30d",
2654
+ "to": "now"
2655
+ },
2656
+ "timepicker": {
2657
+ "refresh_intervals": ["5s", "10s", "30s", "1m", "5m", "15m", "30m", "1h", "2h", "1d"],
2658
+ "time_options": ["5m", "15m", "1h", "6h", "12h", "24h", "2d", "7d", "30d"]
2659
+ },
2660
+ "timezone": "",
2661
+ "title": "EDR - SYSTEM VULNERABILITIES - WAZUH 4.8 and ABOVE",
2662
+ "weekStart": ""
2663
+}