• Home
• org.graylog2
• graylog2-server
• 6.0.5
• source code
• bb8c8232-3803.78e5f8f9e48483998e2b.js

×

Project download

Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $

You can buy this project and download/modify it how often you want.

web-interface.assets.bb8c8232-3803.78e5f8f9e48483998e2b.js Maven / Gradle / Ivy

"use strict";(()=>{(self.webpackChunkgraylog_web_interface=self.webpackChunkgraylog_web_interface||[]).push([["bb8c8232-3803"],{NrDFOwc8:(g,n,e)=>{e.r(n),e.d(n,{default:()=>m});var t=e("Z7aTuO5B"),o=e("IOI9nV80"),d=e("q5MWReSo");const s=JSON.parse('{"id":"graylog-security-views__overview","type":"DASHBOARD","title":"Overview","summary":"Read Only Overview","description":"in development","search_id":"656510c70548c8792779eea7","properties":[],"state":{"73018ceb-e1c0-4ac1-9af9-1264b0ff567b":{"selected_fields":null,"formatting":{"highlighting":[]},"titles":{"tab":{"title":"Overview"},"widget":{"0158561e-7807-4d47-80a1-dbafabf71e40":"High Illuminate Alerts by alert_signature (Top 15)","c7d9d7f9-7431-47d1-ae7a-5e958aa89906":"Msg Count by gim_event_subcategory (Top 15)","b92598f2-7ffd-45bd-bb4a-6df8d7bf69ac":"High Illuminate Alerts","67b16271-7591-4c54-8b41-e56b1e3d63b8":"Logon Attempts","bbd6f20c-fb4a-4c44-b4a2-bb4e06d6f369":"High Illuminate Alerts by event_source (Top 15)","7b3035f8-b363-46bc-b3f8-dd62a67be4b6":"High Illuminate Alerts by event_source_product (Top 15)","3cc84937-9207-4a02-b826-4793763c1355":"Logon Attempts by event_source_product (top 15)","22b924fe-61a0-48ed-bf16-46d7dd1275a8":"High Illuminate Alerts by user_name (Top 15)","6c72064e-c73a-4d41-b102-868eedfebfb0":"Authentication Msgs: Success","819ae1b2-c3a9-40fe-8a1b-35ecb3ee1aaa":"Msg Count by event_source_product (Top 15)","7e7fbc8e-4ddf-4d5f-86d5-c6983a2781c3":"Message Count","748ce594-2965-4322-83ec-88c0258550fe":"Logon Failures","3c193653-3d7f-4915-b786-361e33c17f91":"Msg Count by event_source  (Top 15)"}},"widgets":[{"id":"7b3035f8-b363-46bc-b3f8-dd62a67be4b6","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#bf360c"}]},"rollup":true,"row_pivots":[{"fields":["event_source_product"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND event_source_product) AND alert_severity:(high OR critical)"},"streams":[]},{"id":"819ae1b2-c3a9-40fe-8a1b-35ecb3ee1aaa","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#758085"}]},"rollup":true,"row_pivots":[{"fields":["event_source_product"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":""},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:event_source_product"},"streams":[]},{"id":"748ce594-2965-4322-83ec-88c0258550fe","type":"aggregation","config":{"column_pivots":[],"rollup":true,"row_pivots":[],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"numeric","visualization_config":{"trend":true,"trend_preference":"LOWER"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[]},{"id":"b92598f2-7ffd-45bd-bb4a-6df8d7bf69ac","type":"aggregation","config":{"column_pivots":[],"rollup":true,"row_pivots":[],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"numeric","visualization_config":{"trend":true,"trend_preference":"LOWER"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity) AND alert_severity:(high OR critical)"},"streams":[]},{"id":"3c193653-3d7f-4915-b786-361e33c17f91","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#758085"}]},"rollup":true,"row_pivots":[{"fields":["event_source"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_source AND gim_event_subcategory)"},"streams":[]},{"id":"3cc84937-9207-4a02-b826-4793763c1355","type":"aggregation","config":{"column_pivots":[{"fields":["event_outcome"],"type":"values","config":{"limit":0}}],"formatting_settings":{"chart_colors":[{"field_name":"failure","chart_color":"#ff943f"},{"field_name":"success","chart_color":"#4b6ab7"}]},"rollup":false,"row_pivots":[{"fields":["event_source_product"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"stack","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_category) AND _exists_:(event_source_product AND event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[]},{"id":"7e7fbc8e-4ddf-4d5f-86d5-c6983a2781c3","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#4c575d"}]},"rollup":true,"row_pivots":[{"fields":["timestamp"],"type":"time","config":{"interval":{"type":"auto","scaling":1}}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"area","visualization_config":{"interpolation":"linear","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code OR anomaly_detector_name) AND _exists_:(timestamp)"},"streams":[]},{"id":"c7d9d7f9-7431-47d1-ae7a-5e958aa89906","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#758085"}]},"rollup":true,"row_pivots":[{"fields":["gim_event_subcategory"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(gim_event_subcategory)"},"streams":[]},{"id":"67b16271-7591-4c54-8b41-e56b1e3d63b8","type":"aggregation","config":{"column_pivots":[],"rollup":true,"row_pivots":[],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"numeric","visualization_config":{"trend":true,"trend_preference":"NEUTRAL"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[]},{"id":"22b924fe-61a0-48ed-bf16-46d7dd1275a8","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#bf360c"}]},"rollup":true,"row_pivots":[{"fields":["user_name"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND user_name) AND alert_severity:(high OR critical)"},"streams":[]},{"id":"bbd6f20c-fb4a-4c44-b4a2-bb4e06d6f369","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#bf360c"}]},"rollup":true,"row_pivots":[{"fields":["event_source"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND event_source) AND alert_severity:(high OR critical)"},"streams":[]},{"id":"0158561e-7807-4d47-80a1-dbafabf71e40","type":"aggregation","config":{"column_pivots":[],"formatting_settings":{"chart_colors":[{"field_name":"count()","chart_color":"#bf360c"}]},"rollup":true,"row_pivots":[{"fields":["alert_signature"],"type":"values","config":{"limit":0}}],"series":[{"config":{"name":null},"function":"count()"}],"sort":[],"visualization":"bar","visualization_config":{"barmode":"group","axis_type":"linear"},"event_annotation":false},"filters":[],"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND alert_signature) AND alert_severity:(high OR critical)"},"streams":[]}],"widget_mapping":{"0158561e-7807-4d47-80a1-dbafabf71e40":["7d34455e-9680-47b7-b781-7fe648461fa3"],"c7d9d7f9-7431-47d1-ae7a-5e958aa89906":["e8bd4945-b4dd-49ef-83aa-479e638b0957"],"b92598f2-7ffd-45bd-bb4a-6df8d7bf69ac":["fb0aa7b5-9bac-429f-ae3d-c6206d81e2b5","cf0149a8-906d-4a29-b0f6-6cc22b3f0d30"],"67b16271-7591-4c54-8b41-e56b1e3d63b8":["cb1c4108-ec60-434d-8811-93d52aee5510","d131d892-f0dc-4c12-a1d0-8a0e5a603755"],"bbd6f20c-fb4a-4c44-b4a2-bb4e06d6f369":["de1e5a85-4947-48e2-b8a2-88c99e6133e5"],"7b3035f8-b363-46bc-b3f8-dd62a67be4b6":["4a6d4d7e-0cce-48a9-89cb-f2d1fd822c91"],"3cc84937-9207-4a02-b826-4793763c1355":["6ffb5cda-7534-4eaf-b9fe-5aba76a720dc"],"22b924fe-61a0-48ed-bf16-46d7dd1275a8":["1af3fa21-0856-4e40-b6bb-d3770c7b405f"],"819ae1b2-c3a9-40fe-8a1b-35ecb3ee1aaa":["55b21db0-c39a-4824-a791-419c62d7c0de"],"7e7fbc8e-4ddf-4d5f-86d5-c6983a2781c3":["c89d6eca-ea11-43cd-b931-8d3b96e43226"],"748ce594-2965-4322-83ec-88c0258550fe":["9246abe7-14b7-427c-abc8-ed48b36a4061","0374d9ce-61dc-43d9-9715-45a2f8691193"],"3c193653-3d7f-4915-b786-361e33c17f91":["3a78178a-18c7-48ad-9cfc-b55f4bb3cd73"]},"positions":{"0158561e-7807-4d47-80a1-dbafabf71e40":{"col":7,"row":84,"height":4,"width":6},"c7d9d7f9-7431-47d1-ae7a-5e958aa89906":{"col":1,"row":88,"height":4,"width":6},"b92598f2-7ffd-45bd-bb4a-6df8d7bf69ac":{"col":9,"row":74,"height":2,"width":4},"67b16271-7591-4c54-8b41-e56b1e3d63b8":{"col":1,"row":74,"height":2,"width":4},"bbd6f20c-fb4a-4c44-b4a2-bb4e06d6f369":{"col":7,"row":76,"height":4,"width":6},"7b3035f8-b363-46bc-b3f8-dd62a67be4b6":{"col":7,"row":80,"height":4,"width":6},"3cc84937-9207-4a02-b826-4793763c1355":{"col":1,"row":80,"height":4,"width":6},"22b924fe-61a0-48ed-bf16-46d7dd1275a8":{"col":7,"row":88,"height":4,"width":6},"819ae1b2-c3a9-40fe-8a1b-35ecb3ee1aaa":{"col":1,"row":84,"height":4,"width":6},"7e7fbc8e-4ddf-4d5f-86d5-c6983a2781c3":{"col":1,"row":71,"height":3,"width":"Infinity"},"748ce594-2965-4322-83ec-88c0258550fe":{"col":5,"row":74,"height":2,"width":4},"3c193653-3d7f-4915-b786-361e33c17f91":{"col":1,"row":76,"height":4,"width":6}}}},"created_at":"2021-03-15T20:32:50.170Z","owner":"john.hartley","requires":[],"favorite":false}'),f=JSON.parse('{"id":"656510c70548c8792779eea7","queries":[{"id":"73018ceb-e1c0-4ac1-9af9-1264b0ff567b","query":{"type":"elasticsearch","query_string":""},"timerange":{"from":300,"type":"relative"},"filter":null,"filters":[],"search_types":[{"timerange":{"source":"search_type","id":"cb1c4108-ec60-434d-8811-93d52aee5510","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"d131d892-f0dc-4c12-a1d0-8a0e5a603755","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"9246abe7-14b7-427c-abc8-ed48b36a4061","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[],"id":"0374d9ce-61dc-43d9-9715-45a2f8691193","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"fb0aa7b5-9bac-429f-ae3d-c6206d81e2b5","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity) AND alert_severity:(high OR critical)"},"streams":[],"id":"cf0149a8-906d-4a29-b0f6-6cc22b3f0d30","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code OR anomaly_detector_name) AND _exists_:(timestamp)"},"streams":[],"id":"c89d6eca-ea11-43cd-b931-8d3b96e43226","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"time","fields":["timestamp"],"interval":{"type":"auto","scaling":1}}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND event_source) AND alert_severity:(high OR critical)"},"streams":[],"id":"de1e5a85-4947-48e2-b8a2-88c99e6133e5","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_category) AND _exists_:(event_source_product AND event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"6ffb5cda-7534-4eaf-b9fe-5aba76a720dc","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":false,"type":"pivot","row_groups":[{"type":"values","fields":["event_source_product"],"limit":15,"skip_empty_values":false}],"column_groups":[{"type":"values","fields":["event_outcome"],"limit":15,"skip_empty_values":false}],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND user_name) AND alert_severity:(high OR critical)"},"streams":[],"id":"1af3fa21-0856-4e40-b6bb-d3770c7b405f","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(gim_event_subcategory)"},"streams":[],"id":"e8bd4945-b4dd-49ef-83aa-479e638b0957","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["gim_event_subcategory"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"cb1c4108-ec60-434d-8811-93d52aee5510","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity) AND alert_severity:(high OR critical)"},"streams":[],"id":"fb0aa7b5-9bac-429f-ae3d-c6206d81e2b5","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_source AND gim_event_subcategory)"},"streams":[],"id":"3a78178a-18c7-48ad-9cfc-b55f4bb3cd73","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:event_source_product"},"streams":[],"id":"55b21db0-c39a-4824-a791-419c62d7c0de","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source_product"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[],"id":"9246abe7-14b7-427c-abc8-ed48b36a4061","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND alert_signature) AND alert_severity:(high OR critical)"},"streams":[],"id":"7d34455e-9680-47b7-b781-7fe648461fa3","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["alert_signature"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND event_source_product) AND alert_severity:(high OR critical)"},"streams":[],"id":"4a6d4d7e-0cce-48a9-89cb-f2d1fd822c91","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source_product"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]}]}],"parameters":[]}'),y=JSON.parse('{"execution":{"done":true,"cancelled":false,"completed_exceptionally":false},"errors":[],"results":{"73018ceb-e1c0-4ac1-9af9-1264b0ff567b":{"query":{"id":"73018ceb-e1c0-4ac1-9af9-1264b0ff567b","timerange":{"from":300,"type":"relative"},"filter":{"type":"or","filters":[{"type":"stream","id":"653972ed4062770d2af9d2c9"},{"type":"stream","id":"000000000000000000000001"},{"type":"stream","id":"653972eb4062770d2af9d298"},{"type":"stream","id":"653972ec4062770d2af9d2b7"},{"type":"stream","id":"653972fe4062770d2af9d36f"},{"type":"stream","id":"653972ec4062770d2af9d2ae"},{"type":"stream","id":"653980454062770d2af9fd86"},{"type":"stream","id":"655634e28cca23167c7dfdce"},{"type":"stream","id":"653972ec4062770d2af9d2a5"},{"type":"stream","id":"653972ed4062770d2af9d2c0"}]},"filters":[],"query":{"type":"elasticsearch","query_string":""},"search_types":[{"timerange":{"source":"search_type","id":"cb1c4108-ec60-434d-8811-93d52aee5510","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"d131d892-f0dc-4c12-a1d0-8a0e5a603755","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"9246abe7-14b7-427c-abc8-ed48b36a4061","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[],"id":"0374d9ce-61dc-43d9-9715-45a2f8691193","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"source":"search_type","id":"fb0aa7b5-9bac-429f-ae3d-c6206d81e2b5","offset":"1i","type":"offset"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity) AND alert_severity:(high OR critical)"},"streams":[],"id":"cf0149a8-906d-4a29-b0f6-6cc22b3f0d30","name":"trend","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code OR anomaly_detector_name) AND _exists_:(timestamp)"},"streams":[],"id":"c89d6eca-ea11-43cd-b931-8d3b96e43226","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"time","fields":["timestamp"],"interval":{"type":"auto","scaling":1}}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND event_source) AND alert_severity:(high OR critical)"},"streams":[],"id":"de1e5a85-4947-48e2-b8a2-88c99e6133e5","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_category) AND _exists_:(event_source_product AND event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"6ffb5cda-7534-4eaf-b9fe-5aba76a720dc","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":false,"type":"pivot","row_groups":[{"type":"values","fields":["event_source_product"],"limit":15,"skip_empty_values":false}],"column_groups":[{"type":"values","fields":["event_outcome"],"limit":15,"skip_empty_values":false}],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND user_name) AND alert_severity:(high OR critical)"},"streams":[],"id":"1af3fa21-0856-4e40-b6bb-d3770c7b405f","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["user_name"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(gim_event_subcategory)"},"streams":[],"id":"e8bd4945-b4dd-49ef-83aa-479e638b0957","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["gim_event_subcategory"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(success OR failure)"},"streams":[],"id":"cb1c4108-ec60-434d-8811-93d52aee5510","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity) AND alert_severity:(high OR critical)"},"streams":[],"id":"fb0aa7b5-9bac-429f-ae3d-c6206d81e2b5","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_source AND gim_event_subcategory)"},"streams":[],"id":"3a78178a-18c7-48ad-9cfc-b55f4bb3cd73","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:event_source_product"},"streams":[],"id":"55b21db0-c39a-4824-a791-419c62d7c0de","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source_product"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(event_outcome AND gim_event_type) AND gim_event_type:(logon) AND event_outcome:(failure)"},"streams":[],"id":"9246abe7-14b7-427c-abc8-ed48b36a4061","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND alert_signature) AND alert_severity:(high OR critical)"},"streams":[],"id":"7d34455e-9680-47b7-b781-7fe648461fa3","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["alert_signature"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]},{"timerange":{"from":86400,"type":"relative"},"query":{"type":"elasticsearch","query_string":"_exists_:(gim_event_type_code) AND _exists_:(alert_severity AND event_source_product) AND alert_severity:(high OR critical)"},"streams":[],"id":"4a6d4d7e-0cce-48a9-89cb-f2d1fd822c91","name":"chart","series":[{"type":"count","id":"count()","field":null}],"sort":[],"rollup":true,"type":"pivot","row_groups":[{"type":"values","fields":["event_source_product"],"limit":15,"skip_empty_values":false}],"column_groups":[],"filter":null,"filters":[]}]},"execution_stats":{"duration":2323,"timestamp":"2023-11-29T13:57:36.944Z","effective_timerange":{"from":"2023-11-29T13:52:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"search_types":{"9246abe7-14b7-427c-abc8-ed48b36a4061":{"name":"chart","id":"9246abe7-14b7-427c-abc8-ed48b36a4061","rows":[{"key":[],"values":[{"key":["count()"],"value":2834,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":2834,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"c89d6eca-ea11-43cd-b931-8d3b96e43226":{"name":"chart","id":"c89d6eca-ea11-43cd-b931-8d3b96e43226","rows":[{"key":["2023-11-28T13:30:00.000Z"],"values":[{"key":["count()"],"value":1041,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T14:00:00.000Z"],"values":[{"key":["count()"],"value":17581,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T14:30:00.000Z"],"values":[{"key":["count()"],"value":17657,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T15:00:00.000Z"],"values":[{"key":["count()"],"value":14704,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T15:30:00.000Z"],"values":[{"key":["count()"],"value":14697,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T16:00:00.000Z"],"values":[{"key":["count()"],"value":10316,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T16:30:00.000Z"],"values":[{"key":["count()"],"value":29576,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T17:00:00.000Z"],"values":[{"key":["count()"],"value":17636,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T17:30:00.000Z"],"values":[{"key":["count()"],"value":17570,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T18:00:00.000Z"],"values":[{"key":["count()"],"value":14678,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T18:30:00.000Z"],"values":[{"key":["count()"],"value":14676,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T19:00:00.000Z"],"values":[{"key":["count()"],"value":14661,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T19:30:00.000Z"],"values":[{"key":["count()"],"value":14695,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T20:00:00.000Z"],"values":[{"key":["count()"],"value":14577,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T20:30:00.000Z"],"values":[{"key":["count()"],"value":14696,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T21:00:00.000Z"],"values":[{"key":["count()"],"value":14632,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T21:30:00.000Z"],"values":[{"key":["count()"],"value":14626,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T22:00:00.000Z"],"values":[{"key":["count()"],"value":14699,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T22:30:00.000Z"],"values":[{"key":["count()"],"value":14691,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T23:00:00.000Z"],"values":[{"key":["count()"],"value":14683,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-28T23:30:00.000Z"],"values":[{"key":["count()"],"value":14704,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T00:00:00.000Z"],"values":[{"key":["count()"],"value":14722,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T00:30:00.000Z"],"values":[{"key":["count()"],"value":14620,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T01:00:00.000Z"],"values":[{"key":["count()"],"value":14658,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T01:30:00.000Z"],"values":[{"key":["count()"],"value":14685,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T02:00:00.000Z"],"values":[{"key":["count()"],"value":14685,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T02:30:00.000Z"],"values":[{"key":["count()"],"value":14626,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T03:00:00.000Z"],"values":[{"key":["count()"],"value":14691,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T03:30:00.000Z"],"values":[{"key":["count()"],"value":14650,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T04:00:00.000Z"],"values":[{"key":["count()"],"value":14647,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T04:30:00.000Z"],"values":[{"key":["count()"],"value":14753,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T05:00:00.000Z"],"values":[{"key":["count()"],"value":14700,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T05:30:00.000Z"],"values":[{"key":["count()"],"value":14662,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T06:00:00.000Z"],"values":[{"key":["count()"],"value":14696,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T06:30:00.000Z"],"values":[{"key":["count()"],"value":14686,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T07:00:00.000Z"],"values":[{"key":["count()"],"value":14692,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T07:30:00.000Z"],"values":[{"key":["count()"],"value":14637,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T08:00:00.000Z"],"values":[{"key":["count()"],"value":16187,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T08:30:00.000Z"],"values":[{"key":["count()"],"value":16179,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T09:00:00.000Z"],"values":[{"key":["count()"],"value":19065,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T09:30:00.000Z"],"values":[{"key":["count()"],"value":19059,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T10:00:00.000Z"],"values":[{"key":["count()"],"value":19017,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T10:30:00.000Z"],"values":[{"key":["count()"],"value":19068,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T11:00:00.000Z"],"values":[{"key":["count()"],"value":16129,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T11:30:00.000Z"],"values":[{"key":["count()"],"value":16129,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T12:00:00.000Z"],"values":[{"key":["count()"],"value":10219,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T12:30:00.000Z"],"values":[{"key":["count()"],"value":10295,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T13:00:00.000Z"],"values":[{"key":["count()"],"value":13214,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["2023-11-29T13:30:00.000Z"],"values":[{"key":["count()"],"value":12137,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":738304,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":738304,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"cb1c4108-ec60-434d-8811-93d52aee5510":{"name":"chart","id":"cb1c4108-ec60-434d-8811-93d52aee5510","rows":[{"key":[],"values":[{"key":["count()"],"value":62902,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":62902,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"6ffb5cda-7534-4eaf-b9fe-5aba76a720dc":{"name":"chart","id":"6ffb5cda-7534-4eaf-b9fe-5aba76a720dc","rows":[{"key":["windows"],"values":[{"key":["success","count()"],"value":53372,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":748,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["PAN"],"values":[{"key":["success","count()"],"value":5200,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":1032,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["CISCO-ASA"],"values":[{"key":["success","count()"],"value":1478,"rollup":false,"source":"col-leaf"},{"key":["failure","count()"],"value":1031,"rollup":false,"source":"col-leaf"}],"source":"leaf"},{"key":["watchguard_firebox"],"values":[{"key":["failure","count()"],"value":23,"rollup":false,"source":"col-leaf"},{"key":["success","count()"],"value":18,"rollup":false,"source":"col-leaf"}],"source":"leaf"}],"total":62902,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"55b21db0-c39a-4824-a791-419c62d7c0de":{"name":"chart","id":"55b21db0-c39a-4824-a791-419c62d7c0de","rows":[{"key":["Fortigate"],"values":[{"key":["count()"],"value":235911,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["CISCO-ASA"],"values":[{"key":["count()"],"value":175880,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["PAN"],"values":[{"key":["count()"],"value":175871,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["windows"],"values":[{"key":["count()"],"value":150561,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["watchguard_firebox"],"values":[{"key":["count()"],"value":41,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":738264,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":738264,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"7d34455e-9680-47b7-b781-7fe648461fa3":{"name":"chart","id":"7d34455e-9680-47b7-b781-7fe648461fa3","rows":[{"key":["URL blocked by malicious-url-list"],"values":[{"key":["count()"],"value":516,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["W32_EMAILADDRESSPRO_A"],"values":[{"key":["count()"],"value":206,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["EICAR_TEST_FILE"],"values":[{"key":["count()"],"value":167,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["MSIL_EMAIL_GQ_TR"],"values":[{"key":["count()"],"value":159,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":1048,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":1048,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"3a78178a-18c7-48ad-9cfc-b55f4bb3cd73":{"name":"chart","id":"3a78178a-18c7-48ad-9cfc-b55f4bb3cd73","rows":[{"key":["DEV01"],"values":[{"key":["count()"],"value":235395,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-vpn-fw1"],"values":[{"key":["count()"],"value":35269,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-dmzouter-fw2"],"values":[{"key":["count()"],"value":35250,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-dmzinner-fw2"],"values":[{"key":["count()"],"value":35187,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-dmzinner-fw1"],"values":[{"key":["count()"],"value":35153,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-dmzouter-fw1"],"values":[{"key":["count()"],"value":35021,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["DC01.acme.local"],"values":[{"key":["count()"],"value":10619,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["DC02.acme.local"],"values":[{"key":["count()"],"value":10528,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["DC03.acme.local"],"values":[{"key":["count()"],"value":10507,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["DESKTOP-HMVU4PF.testlab.internal"],"values":[{"key":["count()"],"value":8820,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["lbusby-dsktp"],"values":[{"key":["count()"],"value":6550,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["hkline-dsktp"],"values":[{"key":["count()"],"value":6544,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["tfarley-dsktp"],"values":[{"key":["count()"],"value":6542,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["abritt-dsktp"],"values":[{"key":["count()"],"value":6500,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["tlott-dsktp"],"values":[{"key":["count()"],"value":6426,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":568625,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":568625,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"de1e5a85-4947-48e2-b8a2-88c99e6133e5":{"name":"chart","id":"de1e5a85-4947-48e2-b8a2-88c99e6133e5","rows":[{"key":["DEV01"],"values":[{"key":["count()"],"value":532,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["DSD2934LKJH234"],"values":[{"key":["count()"],"value":516,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-dmzinner-fw2"],"values":[{"key":["count()"],"value":114,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-dmzouter-fw1"],"values":[{"key":["count()"],"value":111,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-dmzinner-fw1"],"values":[{"key":["count()"],"value":104,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-vpn-fw1"],"values":[{"key":["count()"],"value":100,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["acme-dmzouter-fw2"],"values":[{"key":["count()"],"value":86,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":1563,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":1563,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"1af3fa21-0856-4e40-b6bb-d3770c7b405f":{"name":"chart","id":"1af3fa21-0856-4e40-b6bb-d3770c7b405f","rows":[{"key":["lbates"],"values":[{"key":["count()"],"value":22,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["mgray"],"values":[{"key":["count()"],"value":22,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["jduffield"],"values":[{"key":["count()"],"value":21,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["abritt"],"values":[{"key":["count()"],"value":20,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["dmiranda"],"values":[{"key":["count()"],"value":20,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["dbenitez"],"values":[{"key":["count()"],"value":18,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["ecantrell"],"values":[{"key":["count()"],"value":18,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["hguerra"],"values":[{"key":["count()"],"value":18,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["tfry"],"values":[{"key":["count()"],"value":18,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["adelarosa"],"values":[{"key":["count()"],"value":17,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["lbusby"],"values":[{"key":["count()"],"value":17,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["amcarthur"],"values":[{"key":["count()"],"value":16,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["jdawson"],"values":[{"key":["count()"],"value":16,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["mcottrell"],"values":[{"key":["count()"],"value":16,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["cmcknight"],"values":[{"key":["count()"],"value":15,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":515,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":515,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"e8bd4945-b4dd-49ef-83aa-479e638b0957":{"name":"chart","id":"e8bd4945-b4dd-49ef-83aa-479e638b0957","rows":[{"key":["message"],"values":[{"key":["count()"],"value":248385,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["network.network connection"],"values":[{"key":["count()"],"value":177033,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["authentication.kerberos request"],"values":[{"key":["count()"],"value":76474,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["authentication.logon"],"values":[{"key":["count()"],"value":62911,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["network.default"],"values":[{"key":["count()"],"value":60247,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["network.close"],"values":[{"key":["count()"],"value":52228,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["network.open"],"values":[{"key":["count()"],"value":52198,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["iam.object modify"],"values":[{"key":["count()"],"value":35331,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["authentication.credential validation"],"values":[{"key":["count()"],"value":10076,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["authentication.access notice"],"values":[{"key":["count()"],"value":4091,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["authentication.logoff"],"values":[{"key":["count()"],"value":937,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["iam.object enable"],"values":[{"key":["count()"],"value":736,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["alert.default"],"values":[{"key":["count()"],"value":532,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["alert.network alert"],"values":[{"key":["count()"],"value":516,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["process.execute"],"values":[{"key":["count()"],"value":123,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":738264,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":738264,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"fb0aa7b5-9bac-429f-ae3d-c6206d81e2b5":{"name":"chart","id":"fb0aa7b5-9bac-429f-ae3d-c6206d81e2b5","rows":[{"key":[],"values":[{"key":["count()"],"value":1563,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":1563,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}},"0374d9ce-61dc-43d9-9715-45a2f8691193":{"name":"trend","id":"0374d9ce-61dc-43d9-9715-45a2f8691193","rows":[{"key":[],"values":[{"key":["count()"],"value":2959,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":2959,"type":"pivot","effective_timerange":{"from":"2023-11-27T13:57:39.267Z","to":"2023-11-28T13:57:39.267Z","type":"absolute"}},"d131d892-f0dc-4c12-a1d0-8a0e5a603755":{"name":"trend","id":"d131d892-f0dc-4c12-a1d0-8a0e5a603755","rows":[{"key":[],"values":[{"key":["count()"],"value":61975,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":61975,"type":"pivot","effective_timerange":{"from":"2023-11-27T13:57:39.267Z","to":"2023-11-28T13:57:39.267Z","type":"absolute"}},"cf0149a8-906d-4a29-b0f6-6cc22b3f0d30":{"name":"trend","id":"cf0149a8-906d-4a29-b0f6-6cc22b3f0d30","rows":[{"key":[],"values":[{"key":["count()"],"value":1655,"rollup":true,"source":"row-leaf"}],"source":"leaf"}],"total":1655,"type":"pivot","effective_timerange":{"from":"2023-11-27T13:57:39.267Z","to":"2023-11-28T13:57:39.267Z","type":"absolute"}},"4a6d4d7e-0cce-48a9-89cb-f2d1fd822c91":{"name":"chart","id":"4a6d4d7e-0cce-48a9-89cb-f2d1fd822c91","rows":[{"key":["Fortigate"],"values":[{"key":["count()"],"value":1048,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":["CISCO-ASA"],"values":[{"key":["count()"],"value":515,"rollup":true,"source":"row-leaf"}],"source":"leaf"},{"key":[],"values":[{"key":["count()"],"value":1563,"rollup":true,"source":"row-inner"}],"source":"non-leaf"}],"total":1563,"type":"pivot","effective_timerange":{"from":"2023-11-28T13:57:39.267Z","to":"2023-11-29T13:57:39.267Z","type":"absolute"}}},"errors":[],"state":"COMPLETED"}},"id":"656743500548c879277b1753","owner":"admin","search_id":"656510c70548c8792779eea7"}'),p=[{positionX:"15%",positionY:"50px",description:"Quickly find your most critical security info in the Overview tab."},{positionX:"50%",positionY:"350px",description:"Find high alerts, top event sources, and more that give you insight into your security posture."},{positionX:"75%",positionY:"580px",description:"Hover these tool tips throughout this page to learn more about features of Graylog Security"}],m=()=>t.createElement(o.Qc,{title:"Overview"},t.createElement(d.A,{viewJson:s,searchJson:f,searchJobResult:y,hotspots:p}))},q5MWReSo:(g,n,e)=>{e.d(n,{A:()=>M});var t=e("Z7aTuO5B"),o=e("J6y4/h8P"),d=e("r0DwUTl9"),s=e("6j4Sgo2g");const f=80,y=(0,o.keyframes)`
  0% {
    transform: scale(.5);
    opacity: 1;
  }
  100% {
    transform: scale(1.5);
    opacity: 0;
  }
`,p=o.default.button(({theme:r})=>(0,o.css)`
  && {
    border-radius: 50%;
    height: ${f}px;
    width: ${f}px;
    background: ${r.colors.variant.warning};
    color: ${r.utils.contrastingColor(r.colors.variant.warning)};
    border: 0;
    font-size: ${r.fonts.size.huge};

    &:hover {
      background: ${r.colors.variant.warning};
      color: ${r.utils.contrastingColor(r.colors.variant.warning)};
    }
  }
  
  &::before {
    background: ${r.colors.variant.warning};
    content: "";
    width: 100%;
    height: 100%;
    position: absolute;
    z-index: -1;
    opacity: 0;
    animation: ${y} 2s infinite;
    border-radius: 50%;
    left: 0;
    top: 0;
  }
`),_=o.default.div(({$positionX:r,$positionY:a})=>(0,o.css)`
  position: absolute;
  top: ${a};
  left: calc(${r} - ${f/2}px);
`),w=({children:r,positionX:a,positionY:c,index:l})=>{const[u,i]=(0,t.useState)(!1),v=(0,t.useRef)(),C=(0,t.useRef)(),b=()=>i(!0),k=()=>i(!1);return t.createElement(_,{$positionX:a,$positionY:c,ref:C},t.createElement(s.A,{opened:u,position:"bottom",id:"session-badge-details",width:275},t.createElement(s.A.Target,null,t.createElement(p,{onMouseOver:b,onMouseOut:k,onFocus:b,onBlur:k,ref:v},l+1)),t.createElement(s.A.Dropdown,null,r)))};var h=e("DjctQb+S"),A=e("0eB11aFj"),D=e("wi0Y4c9s"),N=e("Qv8wg03E"),T=e("MDn/VShH"),x=e("/coHI+Jz"),Z=e("UmnljV2q"),q=e("53I4yQGE"),O=e("AMSn1A3N");const S=O.A.empty(),E=({searchJson:r,viewJson:a,searchJobResult:c})=>{const l=(0,t.useMemo)(()=>{const v=x.A.fromJSON(r);return Z.A.fromJSON(a).toBuilder().search(v).build()},[r,a]),u=(0,t.useMemo)(()=>({result:new q.A(c),widgetMapping:l.widgetMapping}),[c,l.widgetMapping]),i=(0,t.useMemo)(()=>({execute:async()=>u,parse:async()=>S,resultMapper:v=>v}),[u]);return t.createElement(N.A.Provider,{value:i},t.createElement(T.A,{view:Promise.resolve(l),isNew:!1,searchResult:u}))},R=(0,o.default)(A.A)`
  .page-content-grid {
    position: relative;
  }
`,z=o.default.div`
  position: absolute;
  top: 0;
  left: 0;
  right: 0;
  height: 100%;
  background: transparent;
  z-index: 1;
`,P=r=>({children:a})=>t.createElement(R,null,t.createElement(z,null,r.map(({description:c,positionX:l,positionY:u},i)=>t.createElement(w,{positionX:l,positionY:u,index:i,key:`hotspot-${i}`},c))),t.createElement("div",{inert:""},a)),M=({searchJson:r,viewJson:a,searchJobResult:c,hotspots:l})=>{const u=(0,t.useMemo)(()=>({sidebar:{isShown:!1},viewActions:h.GI,searchAreaContainer:{component:P(l)}}),[l]);return t.createElement(D.A,{value:u},t.createElement(E,{searchJson:r,viewJson:a,searchJobResult:c}))}},wi0Y4c9s:(g,n,e)=>{e.d(n,{A:()=>y});var t=e("Z7aTuO5B"),o=e("wXrUUKFq"),d=e.n(o),s=e("DjctQb+S");const y=({children:p,value:_})=>{const m=(0,t.useMemo)(()=>d()({},s.Ke,_),[_]);return t.createElement(s.Ay.Provider,{value:m},p)}}}]);})();

//# sourceMappingURL=bb8c8232-3803.78e5f8f9e48483998e2b.js.map