From c64de041b80c0a074922a11e59c7b7f9800fd49d Mon Sep 17 00:00:00 2001 From: a3ilson <a@3ilson.com> Date: Sun, 10 Dec 2017 13:57:23 -0500 Subject: [PATCH] Add files via upload --- Dashboard(v6).json | 19 ++++++++ Searches(v6).json | 31 +++++++++++++ Visualizations(v6).json | 100 ++++++++++++++++++++++++++++++++++++++++ 3 files changed, 150 insertions(+) create mode 100644 Dashboard(v6).json create mode 100644 Searches(v6).json create mode 100644 Visualizations(v6).json diff --git a/Dashboard(v6).json b/Dashboard(v6).json new file mode 100644 index 0000000..0647950 --- /dev/null +++ b/Dashboard(v6).json @@ -0,0 +1,19 @@ +[ + { + "_id": "9c6c2ea0-d258-11e7-bf36-8fe14dd6e726", + "_type": "dashboard", + "_source": { + "title": "Dashboard", + "hits": 0, + "description": "", + "panelsJSON": "[{\"size_x\":12,\"size_y\":5,\"panelIndex\":1,\"type\":\"search\",\"id\":\"4be2a8b0-d258-11e7-bf36-8fe14dd6e726\",\"col\":1,\"row\":7,\"columns\":[\"src_ip\",\"src_port\",\"dest_ip\",\"dest_port\",\"direction\",\"geoip.country_name\",\"iface\",\"mac_address\",\"reason\",\"action\"],\"sort\":[\"@timestamp\",\"desc\"]},{\"size_x\":5,\"size_y\":7,\"panelIndex\":2,\"type\":\"visualization\",\"id\":\"ede09120-d255-11e7-bf36-8fe14dd6e726\",\"col\":8,\"row\":12},{\"size_x\":7,\"size_y\":7,\"panelIndex\":3,\"type\":\"visualization\",\"id\":\"4d9d62f0-d256-11e7-bf36-8fe14dd6e726\",\"col\":1,\"row\":19},{\"size_x\":5,\"size_y\":8,\"panelIndex\":4,\"type\":\"visualization\",\"id\":\"014c2f80-d256-11e7-bf36-8fe14dd6e726\",\"col\":8,\"row\":19},{\"size_x\":7,\"size_y\":7,\"panelIndex\":5,\"type\":\"visualization\",\"id\":\"43e2b1c0-d256-11e7-bf36-8fe14dd6e726\",\"col\":1,\"row\":12},{\"size_x\":5,\"size_y\":6,\"panelIndex\":6,\"type\":\"visualization\",\"id\":\"87098d20-d256-11e7-bf36-8fe14dd6e726\",\"col\":8,\"row\":1},{\"size_x\":7,\"size_y\":6,\"panelIndex\":7,\"type\":\"visualization\",\"id\":\"95b500d0-d255-11e7-bf36-8fe14dd6e726\",\"col\":1,\"row\":1}]", + "optionsJSON": "{\"darkTheme\":false}", + "uiStateJSON": "{\"P-7\":{\"mapZoom\":2,\"mapCenter\":[12.382928338487396,5.361328125]},\"P-5\":{\"vis\":{\"legendOpen\":false}},\"P-3\":{\"vis\":{\"legendOpen\":false}}}", + "version": 1, + "timeRestore": false, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[],\"highlightAll\":true,\"version\":true}" + } + } + } +] \ No newline at end of file diff --git a/Searches(v6).json b/Searches(v6).json new file mode 100644 index 0000000..efe0753 --- /dev/null +++ b/Searches(v6).json @@ -0,0 +1,31 @@ +[ + { + "_id": "4be2a8b0-d258-11e7-bf36-8fe14dd6e726", + "_type": "search", + "_source": { + "title": "Discovery", + "description": "", + "hits": 0, + "columns": [ + "src_ip", + "src_port", + "dest_ip", + "dest_port", + "direction", + "geoip.country_name", + "iface", + "mac_address", + "reason", + "action" + ], + "sort": [ + "@timestamp", + "desc" + ], + "version": 1, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"2dadd6b0-d255-11e7-bf36-8fe14dd6e726\",\"highlightAll\":true,\"version\":true,\"query\":{\"language\":\"lucene\",\"query\":\"\"},\"filter\":[]}" + } + } + } +] \ No newline at end of file diff --git a/Visualizations(v6).json b/Visualizations(v6).json new file mode 100644 index 0000000..c34a368 --- /dev/null +++ b/Visualizations(v6).json @@ -0,0 +1,100 @@ +[ + { + "_id": "4d9d62f0-d256-11e7-bf36-8fe14dd6e726", + "_type": "visualization", + "_source": { + "title": "Destination Ports/Time", + "visState": "{\"title\":\"Destination Ports/Time\",\"type\":\"histogram\",\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"dest_port.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}]}", + "uiStateJSON": "{}", + "description": "", + "version": 1, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"2dadd6b0-d255-11e7-bf36-8fe14dd6e726\",\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}" + } + } + }, + { + "_id": "43e2b1c0-d256-11e7-bf36-8fe14dd6e726", + "_type": "visualization", + "_source": { + "title": "Source Ports/Time", + "visState": "{\"title\":\"Source Ports/Time\",\"type\":\"histogram\",\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false,\"style\":{\"color\":\"#eee\"}},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"@timestamp\",\"interval\":\"auto\",\"customInterval\":\"2h\",\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"src_port.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}]}", + "uiStateJSON": "{}", + "description": "", + "version": 1, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"2dadd6b0-d255-11e7-bf36-8fe14dd6e726\",\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}" + } + } + }, + { + "_id": "95b500d0-d255-11e7-bf36-8fe14dd6e726", + "_type": "visualization", + "_source": { + "title": "World HeatMap", + "visState": "{\"title\":\"World HeatMap\",\"type\":\"tile_map\",\"params\":{\"mapType\":\"Heatmap\",\"isDesaturated\":true,\"addTooltip\":true,\"heatClusterSize\":1.5,\"legendPosition\":\"bottomright\",\"mapZoom\":2,\"mapCenter\":[0,0],\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true}}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"geohash_grid\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.location\",\"autoPrecision\":true,\"isFilteredByCollar\":true,\"useGeocentroid\":true,\"precision\":2}}]}", + "uiStateJSON": "{\"mapZoom\":3,\"mapCenter\":[12.382928338487396,5.449218750000001]}", + "description": "", + "version": 1, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"2dadd6b0-d255-11e7-bf36-8fe14dd6e726\",\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}" + } + } + }, + { + "_id": "ede09120-d255-11e7-bf36-8fe14dd6e726", + "_type": "visualization", + "_source": { + "title": "Destination Ports", + "visState": "{\"title\":\"Destination Ports\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"proto.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"dest_port.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}]}", + "uiStateJSON": "{}", + "description": "", + "version": 1, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"2dadd6b0-d255-11e7-bf36-8fe14dd6e726\",\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}" + } + } + }, + { + "_id": "87098d20-d256-11e7-bf36-8fe14dd6e726", + "_type": "visualization", + "_source": { + "title": "Top Country/Names", + "visState": "{\"title\":\"Top Country/Names\",\"type\":\"tagcloud\",\"params\":{\"scale\":\"linear\",\"orientation\":\"multiple\",\"minFontSize\":18,\"maxFontSize\":72},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_name.keyword\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\"}}]}", + "uiStateJSON": "{}", + "description": "", + "version": 1, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"2dadd6b0-d255-11e7-bf36-8fe14dd6e726\",\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}" + } + } + }, + { + "_id": "014c2f80-d256-11e7-bf36-8fe14dd6e726", + "_type": "visualization", + "_source": { + "title": "Source Ports", + "visState": "{\"title\":\"Source Ports\",\"type\":\"pie\",\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"proto.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"src_port.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}]}", + "uiStateJSON": "{}", + "description": "", + "version": 1, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"2dadd6b0-d255-11e7-bf36-8fe14dd6e726\",\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}" + } + } + }, + { + "_id": "9070efc0-d2ba-11e7-bf36-8fe14dd6e726", + "_type": "visualization", + "_source": { + "title": "Country Color Coded", + "visState": "{\"title\":\"Country Color Coded\",\"type\":\"region_map\",\"params\":{\"legendPosition\":\"bottomright\",\"addTooltip\":true,\"colorSchema\":\"Reds\",\"selectedLayer\":{\"attribution\":\"<p><a href=\\\"http://www.naturalearthdata.com/about/terms-of-use\\\">Made with NaturalEarth</a> | <a href=\\\"https://www.elastic.co/elastic-maps-service\\\">Elastic Maps Service</a></p> \",\"name\":\"World Countries\",\"format\":\"geojson\",\"url\":\"https://layers.geo.elastic.co/blob/5659313586569216?elastic_tile_service_tos=agree&my_app_version=6.0.0\",\"fields\":[{\"name\":\"iso2\",\"description\":\"Two letter abbreviation\"},{\"name\":\"name\",\"description\":\"Country name\"},{\"name\":\"iso3\",\"description\":\"Three letter abbreviation\"}],\"created_at\":\"2017-04-26T17:12:15.978370\",\"id\":5659313586569216,\"layerId\":\"elastic_maps_service.World Countries\"},\"selectedJoinField\":{\"name\":\"iso2\",\"description\":\"Two letter abbreviation\"}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"geoip.country_code2.keyword\",\"size\":5,\"order\":\"desc\",\"orderBy\":\"1\"}}]}", + "uiStateJSON": "{\"mapZoom\":3,\"mapCenter\":[-0.17578097424708533,0]}", + "description": "", + "version": 1, + "kibanaSavedObjectMeta": { + "searchSourceJSON": "{\"index\":\"2dadd6b0-d255-11e7-bf36-8fe14dd6e726\",\"filter\":[],\"query\":{\"query\":\"\",\"language\":\"lucene\"}}" + } + } + } +] \ No newline at end of file -- GitLab