• Home
• org.graylog2
• graylog2-server
• 6.0.5
• source code
• bb8c8232-1774.1fd67a6c13c14ec41a15.js

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

web-interface.assets.bb8c8232-1774.1fd67a6c13c14ec41a15.js Maven / Gradle / Ivy

"use strict";(()=>{(self.webpackChunkgraylog_web_interface=self.webpackChunkgraylog_web_interface||[]).push([["bb8c8232-1774"],{"/dGFSS79":(g,n,e)=>{e.r(n),e.d(n,{default:()=>m});var t=e("Z7aTuO5B"),r=e("IOI9nV80"),v=e("q5MWReSo");const l=JSON.parse('{"id":"graylog-security-views__user-activity","type":"DASHBOARD","title":"User Activity","summary":"Read Only User","description":"in development","search_id":"656510c70548c8792779eea9","properties":[],"state":{"a118ddfe-2322-456c-8ba2-5d9079676e0c":{"selected_fields":null,"formatting":{"highlighting":[]},"titles":{"tab":{"title":"User Activity"},"widget":{"a5c96581-122b-4d9a-913b-bdaf8c990ea8":"authentication success trend","9b905524-cb5d-4d47-b224-42da47cb7cdf":"IAM Modifications by event_source_product (Top 15)","ba9282b8-cc2c-4650-9699-d7ce052b20ad":"authentication failure trend","692bb05f-dfc2-4764-bfcd-453b842e945a":"IAM Modifications by event_source (Top 15)","96cb3dc8-b2ab-4b36-ba1d-30149513b09c":"Logon Failure by event_source_product (top 15) (copy)","a77c32bb-1e84-454b-82ee-f27ca197c66b":"All Logon Attempts","212dcc45-6d3f-42a7-af63-0b55075175b8":"Logon Attempts by user_name (top 15)","b111ed31-ffa4-458b-b939-160c462c0021":"IAM Modifications by gim_event_type (Top 15)","164c12b3-5a04-41f6-b96e-27904401493f":"IAM Modifications by target_user_name (Top 15)","7517ce6a-8e53-4766-b706-1a9d39057544":"Logon Failure by user_name (top 15)","9f50e265-1b30-4ff0-b408-e17069320478":"IAM Modifications by source_user_name (Top 15)","05b8268d-afd5-4664-bbc3-e71e813bc3f8":"Logon, Success","ea61576d-8369-4c98-ac2c-3e135d862edb":"Msg Count by user_name (Top 15)","b2fd1fad-0677-4205-ba5e-2aacbdaee565":"Logon, Failure","35796a85-feb3-4c91-b291-875b932e54f1":"IAM Modifications by user_name (Top 15)","eece74d8-c1ff-4162-b8c4-316fbd4c3b60":"High Illuminate Alerts by user_name (Top 15)"}},"widgets":[{"id":"9f50e265-1b30-4ff0-b408-e17069320478","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#4b6ab7"}]},"rollup":true,"row_pivots":[{"fields":["source_user_name"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(source_user_name AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[]},{"id":"212dcc45-6d3f-42a7-af63-0b55075175b8","type":"aggregation","config":{"column_pivots":[{"fields":["event_outcome"],"type":"values","config":{"limit":0}}],"formatting_settings":{"chart_colors":[{"field_name":"failure","chart_color":"#ff943f"},{"field_name":"success","chart_color":"#4b6ab7"}]},"rollup":false,"row_pivots":[{"fields":["user_name"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"stack","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(user_name AND event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[]},{"id":"164c12b3-5a04-41f6-b96e-27904401493f","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#4b6ab7"}]},"rollup":true,"row_pivots":[{"fields":["target_user_name"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(target_user_name AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[]},{"id":"ea61576d-8369-4c98-ac2c-3e135d862edb","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#758085"}]},"rollup":true,"row_pivots":[{"fields":["user_name"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:user_name AND NOT user_name:(_undefined_ OR not-found)"},"streams":[]},{"id":"9b905524-cb5d-4d47-b224-42da47cb7cdf","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#4b6ab7"}]},"rollup":true,"row_pivots":[{"fields":["event_source_product"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_category OR gim_event_type_code) AND _exists_:(event_source_product AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[]},{"id":"eece74d8-c1ff-4162-b8c4-316fbd4c3b60","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#bf360c"}]},"rollup":true,"row_pivots":[{"fields":["user_name"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(user_name AND alert_severity) AND alert_severity:(high OR critical)"},"streams":[]},{"id":"692bb05f-dfc2-4764-bfcd-453b842e945a","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#4b6ab7"}]},"rollup":true,"row_pivots":[{"fields":["event_source"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_source AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[]},{"id":"05b8268d-afd5-4664-bbc3-e71e813bc3f8","type":"aggregation","config":{"column_pivots":[],"rollup":true,"row_pivots":[],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"numeric","visualization_config":{"trend":true,"trend_preference":"NEUTRAL"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success)"},"streams":[]},{"id":"35796a85-feb3-4c91-b291-875b932e54f1","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#4b6ab7"}]},"rollup":true,"row_pivots":[{"fields":["user_name"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(user_name AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[]},{"id":"b111ed31-ffa4-458b-b939-160c462c0021","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#4b6ab7"}]},"rollup":true,"row_pivots":[{"fields":["gim_event_type"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(gim_event_type AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[]},{"id":"b2fd1fad-0677-4205-ba5e-2aacbdaee565","type":"aggregation","config":{"column_pivots":[],"rollup":true,"row_pivots":[],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"numeric","visualization_config":{"trend":true,"trend_preference":"LOWER"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[]},{"id":"a77c32bb-1e84-454b-82ee-f27ca197c66b","type":"aggregation","config":{"column_pivots":[],"rollup":true,"row_pivots":[],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"numeric","visualization_config":{"trend":true,"trend_preference":"NEUTRAL"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[]}],"widget_mapping":{"9b905524-cb5d-4d47-b224-42da47cb7cdf":["92ae66d3-01ee-4212-bafc-64e0556f758c"],"692bb05f-dfc2-4764-bfcd-453b842e945a":["ba849865-e780-4b8a-befa-45d57e6daf81"],"a77c32bb-1e84-454b-82ee-f27ca197c66b":["dd7d662c-80e2-43aa-94f2-80967d8a552a","0362927a-9421-43d5-94da-9c191125e18b"],"212dcc45-6d3f-42a7-af63-0b55075175b8":["5c481eb4-22ed-4293-8f76-b7e1dff34463"],"b111ed31-ffa4-458b-b939-160c462c0021":["203d3836-e66a-44d4-afdb-ba84fa42a14c"],"164c12b3-5a04-41f6-b96e-27904401493f":["50f93c36-27d0-4597-8a97-c54d2a0afb9e"],"9f50e265-1b30-4ff0-b408-e17069320478":["365f7227-b00d-4ec8-8ac3-a6ecff90d9a2"],"05b8268d-afd5-4664-bbc3-e71e813bc3f8":["9259b90a-eb32-435f-b917-7791982549cc","a5d2fe76-1ddf-4463-88a5-b81a00b4d13e"],"ea61576d-8369-4c98-ac2c-3e135d862edb":["4ec800c1-7f5c-46c3-bbb6-73d63af302b7"],"b2fd1fad-0677-4205-ba5e-2aacbdaee565":["1ca21123-be19-491d-9ffc-158aa1efb039","9f5b2059-efa0-4390-a679-90d3fadc6dc4"],"35796a85-feb3-4c91-b291-875b932e54f1":["0599f94e-96a2-48cd-9ebc-2f69e033c656"],"eece74d8-c1ff-4162-b8c4-316fbd4c3b60":["93f0da96-11e3-4e81-9269-f0e7fd1151d5"]},"positions":{"9b905524-cb5d-4d47-b224-42da47cb7cdf":{"col":1,"row":47,"height":4,"width":6},"692bb05f-dfc2-4764-bfcd-453b842e945a":{"col":1,"row":51,"height":4,"width":6},"a77c32bb-1e84-454b-82ee-f27ca197c66b":{"col":1,"row":33,"height":2,"width":4},"212dcc45-6d3f-42a7-af63-0b55075175b8":{"col":1,"row":35,"height":4,"width":6},"b111ed31-ffa4-458b-b939-160c462c0021":{"col":1,"row":39,"height":4,"width":6},"164c12b3-5a04-41f6-b96e-27904401493f":{"col":7,"row":43,"height":4,"width":6},"9f50e265-1b30-4ff0-b408-e17069320478":{"col":7,"row":39,"height":4,"width":6},"05b8268d-afd5-4664-bbc3-e71e813bc3f8":{"col":5,"row":33,"height":2,"width":4},"ea61576d-8369-4c98-ac2c-3e135d862edb":{"col":7,"row":47,"height":4,"width":6},"b2fd1fad-0677-4205-ba5e-2aacbdaee565":{"col":9,"row":33,"height":2,"width":4},"35796a85-feb3-4c91-b291-875b932e54f1":{"col":1,"row":43,"height":4,"width":6},"eece74d8-c1ff-4162-b8c4-316fbd4c3b60":{"col":7,"row":35,"height":4,"width":6}}}},"created_at":"2021-03-15T20:32:50.170Z","owner":"john.hartley"}'),f=JSON.parse('{"id":"656510c70548c8792779eea9","queries":[{"id":"a118ddfe-2322-456c-8ba2-5d9079676e0c","query":{"type":"elasticsearch","query_string":""},"timerange":{"from":300,"type":"relative"},"filter":null,"filters":[],"search_types":[{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"dd7d662c-80e2-43aa-94f2-80967d8a552a","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"dd7d662c-80e2-43aa-94f2-80967d8a552a","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"0362927a-9421-43d5-94da-9c191125e18b","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:user_name AND NOT user_name:(_undefined_ OR not-found)"},"streams":[],"id":"4ec800c1-7f5c-46c3-bbb6-73d63af302b7","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"a5d2fe76-1ddf-4463-88a5-b81a00b4d13e","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success)"},"streams":[],"id":"9259b90a-eb32-435f-b917-7791982549cc","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(target_user_name AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"50f93c36-27d0-4597-8a97-c54d2a0afb9e","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["target_user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(user_name AND alert_severity) AND alert_severity:(high OR critical)"},"streams":[],"id":"93f0da96-11e3-4e81-9269-f0e7fd1151d5","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(user_name AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"0599f94e-96a2-48cd-9ebc-2f69e033c656","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_source AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"ba849865-e780-4b8a-befa-45d57e6daf81","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(user_name AND event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"5c481eb4-22ed-4293-8f76-b7e1dff34463","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":false,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[{"type":"values","fields":["event_outcome"],"limit":15,"skip_empty_values":false}],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[],"id":"1ca21123-be19-491d-9ffc-158aa1efb039","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(gim_event_type AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"203d3836-e66a-44d4-afdb-ba84fa42a14c","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["gim_event_type"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"1ca21123-be19-491d-9ffc-158aa1efb039","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[],"id":"9f5b2059-efa0-4390-a679-90d3fadc6dc4","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_category OR gim_event_type_code) AND _exists_:(event_source_product AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"92ae66d3-01ee-4212-bafc-64e0556f758c","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source_product"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(source_user_name AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"365f7227-b00d-4ec8-8ac3-a6ecff90d9a2","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["source_user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success)"},"streams":[],"id":"a5d2fe76-1ddf-4463-88a5-b81a00b4d13e","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]}]}],"parameters":[]}'),p=JSON.parse('{"execution":{"done":true,"cancelled":false,"completed_exceptionally":false},"results":{"a118ddfe-2322-456c-8ba2-5d9079676e0c":{"query":{"id":"a118ddfe-2322-456c-8ba2-5d9079676e0c","timerange":{"from":300,"type":"relative"},"filter":{"type":"or","filters":[{"type":"stream","id":"653972ed4062770d2af9d2c9"},{"type":"stream","id":"000000000000000000000001"},{"type":"stream","id":"653972eb4062770d2af9d298"},{"type":"stream","id":"653972ec4062770d2af9d2b7"},{"type":"stream","id":"653972fe4062770d2af9d36f"},{"type":"stream","id":"653972ec4062770d2af9d2ae"},{"type":"stream","id":"653980454062770d2af9fd86"},{"type":"stream","id":"655634e28cca23167c7dfdce"},{"type":"stream","id":"653972ec4062770d2af9d2a5"},{"type":"stream","id":"653972ed4062770d2af9d2c0"}]},"filters":[],"query":{"type":"elasticsearch","query_string":""},"search_types":[{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"dd7d662c-80e2-43aa-94f2-80967d8a552a","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"dd7d662c-80e2-43aa-94f2-80967d8a552a","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"0362927a-9421-43d5-94da-9c191125e18b","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:user_name AND NOT user_name:(_undefined_ OR not-found)"},"streams":[],"id":"4ec800c1-7f5c-46c3-bbb6-73d63af302b7","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"a5d2fe76-1ddf-4463-88a5-b81a00b4d13e","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success)"},"streams":[],"id":"9259b90a-eb32-435f-b917-7791982549cc","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(target_user_name AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"50f93c36-27d0-4597-8a97-c54d2a0afb9e","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["target_user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(user_name AND alert_severity) AND alert_severity:(high OR critical)"},"streams":[],"id":"93f0da96-11e3-4e81-9269-f0e7fd1151d5","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(user_name AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"0599f94e-96a2-48cd-9ebc-2f69e033c656","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_source AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"ba849865-e780-4b8a-befa-45d57e6daf81","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(user_name AND event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"5c481eb4-22ed-4293-8f76-b7e1dff34463","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":false,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[{"type":"values","fields":["event_outcome"],"limit":15,"skip_empty_values":false}],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[],"id":"1ca21123-be19-491d-9ffc-158aa1efb039","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(gim_event_type AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"203d3836-e66a-44d4-afdb-ba84fa42a14c","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["gim_event_type"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"1ca21123-be19-491d-9ffc-158aa1efb039","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[],"id":"9f5b2059-efa0-4390-a679-90d3fadc6dc4","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_category OR gim_event_type_code) AND _exists_:(event_source_product AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"92ae66d3-01ee-4212-bafc-64e0556f758c","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source_product"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(source_user_name AND gim_event_subcategory) AND gim_event_subcategory:(\\"iam.object modify\\")"},"streams":[],"id":"365f7227-b00d-4ec8-8ac3-a6ecff90d9a2","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["source_user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success)"},"streams":[],"id":"a5d2fe76-1ddf-4463-88a5-b81a00b4d13e","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]}]},"execution_stats":{"duration":971,"timestamp":"2023-11-30T07:21:45.571Z","effective_timerange":{"from":"2023-11-30T07:16:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"search_types":{"9259b90a-eb32-435f-b917-7791982549cc":{"name":"trend","id":"9259b90a-eb32-435f-b917-7791982549cc","rows":[{"key":[],"values":[{"key":["count()"],"value":59976,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":59976,"type":"pivot","effective_timerange":{"from":"2023-11-28T07:21:46.542Z","to":"2023-11-29T07:21:46.542Z","type":"absolute"}},"a5d2fe76-1ddf-4463-88a5-b81a00b4d13e":{"name":"chart","id":"a5d2fe76-1ddf-4463-88a5-b81a00b4d13e","rows":[{"key":[],"values":[{"key":["count()"],"value":59071,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":59071,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"4ec800c1-7f5c-46c3-bbb6-73d63af302b7":{"name":"chart","id":"4ec800c1-7f5c-46c3-bbb6-73d63af302b7","rows":[{"key":["lbusby"],"values":[{"key":["count()"],"value":9981,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["mgray"],"values":[{"key":["count()"],"value":9911,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["abritt"],"values":[{"key":["count()"],"value":9836,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["tlott"],"values":[{"key":["count()"],"value":9760,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["workstationusers"],"values":[{"key":["count()"],"value":9676,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["serverusers"],"values":[{"key":["count()"],"value":9654,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["hkline"],"values":[{"key":["count()"],"value":9194,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["tfarley"],"values":[{"key":["count()"],"value":9097,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["administrators"],"values":[{"key":["count()"],"value":3769,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["jgross"],"values":[{"key":["count()"],"value":1832,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["ppadilla"],"values":[{"key":["count()"],"value":1807,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["rferry"],"values":[{"key":["count()"],"value":1802,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["zsims"],"values":[{"key":["count()"],"value":1800,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["ewilkes"],"values":[{"key":["count()"],"value":1794,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cmcknight"],"values":[{"key":["count()"],"value":1786,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":197592,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":197592,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"ba849865-e780-4b8a-befa-45d57e6daf81":{"name":"chart","id":"ba849865-e780-4b8a-befa-45d57e6daf81","rows":[{"key":["DC01.acme.local"],"values":[{"key":["count()"],"value":10449,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["DC02.acme.local"],"values":[{"key":["count()"],"value":10398,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["DC03.acme.local"],"values":[{"key":["count()"],"value":10353,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cmcknight-dkstp"],"values":[{"key":["count()"],"value":138,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["sheath-dkstp"],"values":[{"key":["count()"],"value":129,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["zsims-dkstp"],"values":[{"key":["count()"],"value":123,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["erhodes-dkstp"],"values":[{"key":["count()"],"value":122,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["ecantrell-dkstp"],"values":[{"key":["count()"],"value":121,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["ewilkes-dkstp"],"values":[{"key":["count()"],"value":116,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["hkline-dkstp"],"values":[{"key":["count()"],"value":115,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["adelarosa-dkstp"],"values":[{"key":["count()"],"value":114,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["jdawson-dkstp"],"values":[{"key":["count()"],"value":113,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["glynn-dkstp"],"values":[{"key":["count()"],"value":112,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["jford-dkstp"],"values":[{"key":["count()"],"value":111,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["sfowler-dkstp"],"values":[{"key":["count()"],"value":111,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":34969,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":34969,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"dd7d662c-80e2-43aa-94f2-80967d8a552a":{"name":"chart","id":"dd7d662c-80e2-43aa-94f2-80967d8a552a","rows":[{"key":[],"values":[{"key":["count()"],"value":61893,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":61893,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"92ae66d3-01ee-4212-bafc-64e0556f758c":{"name":"chart","id":"92ae66d3-01ee-4212-bafc-64e0556f758c","rows":[{"key":["windows"],"values":[{"key":["count()"],"value":34969,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":34969,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":34969,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"365f7227-b00d-4ec8-8ac3-a6ecff90d9a2":{"name":"chart","id":"365f7227-b00d-4ec8-8ac3-a6ecff90d9a2","rows":[{"key":["administrator"],"values":[{"key":["count()"],"value":6374,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["s_jdawson"],"values":[{"key":["count()"],"value":5764,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["s_dmiranda"],"values":[{"key":["count()"],"value":5762,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["s_jduffield"],"values":[{"key":["count()"],"value":5729,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["s_kpearson"],"values":[{"key":["count()"],"value":5681,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["s_jgross"],"values":[{"key":["count()"],"value":5659,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":34969,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":34969,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"5c481eb4-22ed-4293-8f76-b7e1dff34463":{"name":"chart","id":"5c481eb4-22ed-4293-8f76-b7e1dff34463","rows":[{"key":["lbusby"],"values":[{"key":["success","count()"],"value":4540,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":121,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["abritt"],"values":[{"key":["success","count()"],"value":4558,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":101,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["hkline"],"values":[{"key":["success","count()"],"value":4534,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":107,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["tfarley"],"values":[{"key":["success","count()"],"value":4527,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":102,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["mgray"],"values":[{"key":["success","count()"],"value":4514,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":97,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["tlott"],"values":[{"key":["success","count()"],"value":4408,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":65,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["amcarthur-dkstp$"],"values":[{"key":["success","count()"],"value":801,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":5,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["jford-dkstp$"],"values":[{"key":["success","count()"],"value":791,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":9,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["lbates-dkstp$"],"values":[{"key":["success","count()"],"value":790,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":10,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["ecantrell-dkstp$"],"values":[{"key":["success","count()"],"value":778,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":9,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["kpearson-dkstp$"],"values":[{"key":["success","count()"],"value":768,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":18,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["asheppard-dkstp$"],"values":[{"key":["success","count()"],"value":763,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":15,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["zsims-dkstp$"],"values":[{"key":["success","count()"],"value":772,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":6,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["hguerra-dkstp$"],"values":[{"key":["success","count()"],"value":763,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":12,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["jnorris-dkstp$"],"values":[{"key":["success","count()"],"value":763,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":12,"rollup":false,"source":"col-leaf"}],"source":"leaf"}],"total":61893,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"50f93c36-27d0-4597-8a97-c54d2a0afb9e":{"name":"chart","id":"50f93c36-27d0-4597-8a97-c54d2a0afb9e","rows":[{"key":["cn=tbuckner,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":506,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=dbenitez,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":503,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=amcarthur,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":501,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=jgross,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":495,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=ecantrell,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":486,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=glynn,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":484,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=tlott,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":483,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=lbusby,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":478,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=ppadilla,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":472,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=cmustafa,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":468,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=dmiranda,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":468,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=erhodes,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":468,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=hkline,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":467,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=rwu,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":467,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cn=jduffield,ou=users,ou=group policy ou,dc=acme,dc=internal"],"values":[{"key":["count()"],"value":466,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":17078,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":17078,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"1ca21123-be19-491d-9ffc-158aa1efb039":{"name":"chart","id":"1ca21123-be19-491d-9ffc-158aa1efb039","rows":[{"key":[],"values":[{"key":["count()"],"value":2822,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":2822,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"203d3836-e66a-44d4-afdb-ba84fa42a14c":{"name":"chart","id":"203d3836-e66a-44d4-afdb-ba84fa42a14c","rows":[{"key":["group member added"],"values":[{"key":["count()"],"value":8199,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["group member removed"],"values":[{"key":["count()"],"value":8114,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["group properties modified"],"values":[{"key":["count()"],"value":6786,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["administrative password reset"],"values":[{"key":["count()"],"value":3818,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["password change"],"values":[{"key":["count()"],"value":3649,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["account modified"],"values":[{"key":["count()"],"value":3638,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["account renamed"],"values":[{"key":["count()"],"value":765,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":34969,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":34969,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"9f5b2059-efa0-4390-a679-90d3fadc6dc4":{"name":"trend","id":"9f5b2059-efa0-4390-a679-90d3fadc6dc4","rows":[{"key":[],"values":[{"key":["count()"],"value":2893,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":2893,"type":"pivot","effective_timerange":{"from":"2023-11-28T07:21:46.542Z","to":"2023-11-29T07:21:46.542Z","type":"absolute"}},"0362927a-9421-43d5-94da-9c191125e18b":{"name":"trend","id":"0362927a-9421-43d5-94da-9c191125e18b","rows":[{"key":[],"values":[{"key":["count()"],"value":62869,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":62869,"type":"pivot","effective_timerange":{"from":"2023-11-28T07:21:46.542Z","to":"2023-11-29T07:21:46.542Z","type":"absolute"}},"93f0da96-11e3-4e81-9269-f0e7fd1151d5":{"name":"chart","id":"93f0da96-11e3-4e81-9269-f0e7fd1151d5","rows":[{"key":["lbusby"],"values":[{"key":["count()"],"value":23,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["hguerra"],"values":[{"key":["count()"],"value":22,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["mcottrell"],"values":[{"key":["count()"],"value":21,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["kpearson"],"values":[{"key":["count()"],"value":19,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["mgray"],"values":[{"key":["count()"],"value":19,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["asheppard"],"values":[{"key":["count()"],"value":18,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["jdawson"],"values":[{"key":["count()"],"value":18,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["jduffield"],"values":[{"key":["count()"],"value":18,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["jgross"],"values":[{"key":["count()"],"value":18,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["dmiranda"],"values":[{"key":["count()"],"value":17,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["gsadler"],"values":[{"key":["count()"],"value":17,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["glynn"],"values":[{"key":["count()"],"value":16,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["abritt"],"values":[{"key":["count()"],"value":15,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["adelarosa"],"values":[{"key":["count()"],"value":15,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cmcknight"],"values":[{"key":["count()"],"value":15,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":532,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":532,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}},"0599f94e-96a2-48cd-9ebc-2f69e033c656":{"name":"chart","id":"0599f94e-96a2-48cd-9ebc-2f69e033c656","rows":[{"key":["workstationusers"],"values":[{"key":["count()"],"value":9676,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["serverusers"],"values":[{"key":["count()"],"value":9654,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["administrators"],"values":[{"key":["count()"],"value":3769,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["lbates"],"values":[{"key":["count()"],"value":362,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["tfarley"],"values":[{"key":["count()"],"value":360,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["mgray"],"values":[{"key":["count()"],"value":347,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["lbusby"],"values":[{"key":["count()"],"value":344,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["rferry"],"values":[{"key":["count()"],"value":339,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["tfry"],"values":[{"key":["count()"],"value":337,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cmcknight"],"values":[{"key":["count()"],"value":335,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["tlott"],"values":[{"key":["count()"],"value":335,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["ecantrell"],"values":[{"key":["count()"],"value":332,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["hkline"],"values":[{"key":["count()"],"value":332,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["jdawson"],"values":[{"key":["count()"],"value":331,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["adelarosa"],"values":[{"key":["count()"],"value":325,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":34969,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":34969,"type":"pivot","effective_timerange":{"from":"2023-11-29T07:21:46.542Z","to":"2023-11-30T07:21:46.542Z","type":"absolute"}}},"errors":[],"state":"COMPLETED"}},"id":"656838090548c879277ba61e","owner":"admin","search_id":"656510c70548c8792779eea9"}'),y=[{positionX:"67%",positionY:"260px",description:"Quickly see if you have concerning trends in failed logons."},{positionX:"40%",positionY:"500px",description:"Logon successes and failures by user can help you spot problem accounts and unusual activity."},{positionX:"70%",positionY:"500px",description:"These are the top 15 user accounts generating high alerts!"},{positionX:"40%",positionY:"940px",description:"What are the most common identity and access control changes made in your environment?"},{positionX:"50%",positionY:"1300px",description:"Know the target of the most frequent access control changes."}],m=()=>t.createElement(r.Qc,{title:"User activity"},t.createElement(v.A,{viewJson:l,searchJson:f,searchJobResult:p,hotspots:y}))},q5MWReSo:(g,n,e)=>{e.d(n,{A:()=>R});var t=e("Z7aTuO5B"),r=e("J6y4/h8P"),v=e("r0DwUTl9"),l=e("6j4Sgo2g");const f=80,p=(0,r.keyframes)`
  0% {
    transform: scale(.5);
    opacity: 1;
  }
  100% {
    transform: scale(1.5);
    opacity: 0;
  }
`,y=r.default.button(({theme:o})=>(0,r.css)`
  && {
    border-radius: 50%;
    height: ${f}px;
    width: ${f}px;
    background: ${o.colors.variant.warning};
    color: ${o.utils.contrastingColor(o.colors.variant.warning)};
    border: 0;
    font-size: ${o.fonts.size.huge};

    &:hover {
      background: ${o.colors.variant.warning};
      color: ${o.utils.contrastingColor(o.colors.variant.warning)};
    }
  }
  
  &::before {
    background: ${o.colors.variant.warning};
    content: "";
    width: 100%;
    height: 100%;
    position: absolute;
    z-index: -1;
    opacity: 0;
    animation: ${p} 2s infinite;
    border-radius: 50%;
    left: 0;
    top: 0;
  }
`),_=r.default.div(({$positionX:o,$positionY:a})=>(0,r.css)`
  position: absolute;
  top: ${a};
  left: calc(${o} - ${f/2}px);
`),h=({children:o,positionX:a,positionY:c,index:s})=>{const[u,i]=(0,t.useState)(!1),d=(0,t.useRef)(),P=(0,t.useRef)(),b=()=>i(!0),k=()=>i(!1);return t.createElement(_,{$positionX:a,$positionY:c,ref:P},t.createElement(l.A,{opened:u,position:"bottom",id:"session-badge-details",width:275},t.createElement(l.A.Target,null,t.createElement(y,{onMouseOver:b,onMouseOut:k,onFocus:b,onBlur:k,ref:d},s+1)),t.createElement(l.A.Dropdown,null,o)))};var w=e("DjctQb+S"),A=e("0eB11aFj"),D=e("wi0Y4c9s"),N=e("Qv8wg03E"),x=e("MDn/VShH"),q=e("/coHI+Jz"),T=e("UmnljV2q"),O=e("53I4yQGE"),E=e("AMSn1A3N");const j=E.A.empty(),S=({searchJson:o,viewJson:a,searchJobResult:c})=>{const s=(0,t.useMemo)(()=>{const d=q.A.fromJSON(o);return T.A.fromJSON(a).toBuilder().search(d).build()},[o,a]),u=(0,t.useMemo)(()=>({result:new O.A(c),widgetMapping:s.widgetMapping}),[c,s.widgetMapping]),i=(0,t.useMemo)(()=>({execute:async()=>u,parse:async()=>j,resultMapper:d=>d}),[u]);return t.createElement(N.A.Provider,{value:i},t.createElement(x.A,{view:Promise.resolve(s),isNew:!1,searchResult:u}))},M=(0,r.default)(A.A)`
  .page-content-grid {
    position: relative;
  }
`,Z=r.default.div`
  position: absolute;
  top: 0;
  left: 0;
  right: 0;
  height: 100%;
  background: transparent;
  z-index: 1;
`,z=o=>({children:a})=>t.createElement(M,null,t.createElement(Z,null,o.map(({description:c,positionX:s,positionY:u},i)=>t.createElement(h,{positionX:s,positionY:u,index:i,key:`hotspot-${i}`},c))),t.createElement("div",{inert:""},a)),R=({searchJson:o,viewJson:a,searchJobResult:c,hotspots:s})=>{const u=(0,t.useMemo)(()=>({sidebar:{isShown:!1},viewActions:w.GI,searchAreaContainer:{component:z(s)}}),[s]);return t.createElement(D.A,{value:u},t.createElement(S,{searchJson:o,viewJson:a,searchJobResult:c}))}},wi0Y4c9s:(g,n,e)=>{e.d(n,{A:()=>p});var t=e("Z7aTuO5B"),r=e("wXrUUKFq"),v=e.n(r),l=e("DjctQb+S");const p=({children:y,value:_})=>{const m=(0,t.useMemo)(()=>v()({},l.Ke,_),[_]);return t.createElement(l.Ay.Provider,{value:m},y)}}}]);})();

//# sourceMappingURL=bb8c8232-1774.1fd67a6c13c14ec41a15.js.map