Skip to content

Commit 8cd510c

Browse files
mmguerommguero
committed
for #780, first stab at integrating vadr dashboards
1 parent b0356fa commit 8cd510c

13 files changed

Lines changed: 351 additions & 350 deletions

‎dashboards/dashboards/navigation.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@
1515
[Signatures](#/dashboard/665d1610-523d-11e9-a30e-e3576242f3ed)
1616
[Suricata Alerts](#/dashboard/5694ca60-cbdf-11ec-a50a-5fedd672f5c5)
1717
[Asset Interaction Analysis](#/dashboard/677ee170-809e-11ed-8d5b-07069f823b6f)
18+
[Validated Architecture Design Review](#/dashboard/d16105d0-2b75-11f0-92dc-5f54cacd4f4e)
1819
[↪ NetBox](/netbox/)
1920
[↪ Arkime](/arkime/)
2021

‎dashboards/dashboards/vadr/0f52b420-9e08-11ef-8358-f36ccc4ae837.json‎

Lines changed: 57 additions & 57 deletions
Large diffs are not rendered by default.

‎dashboards/dashboards/vadr/0fb588c0-2d0f-11f0-af4f-052f357bea07.json‎

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"
99
},
1010
"optionsJSON": "{\"useMargins\":true,\"hidePanelTitles\":false}",
11-
"panelsJSON": "[{\"version\":\"2.19.1\",\"gridData\":{\"x\":0,\"y\":0,\"w\":6,\"h\":22,\"i\":\"ab0a921b-62b2-4595-b14a-17cf6826529b\"},\"panelIndex\":\"ab0a921b-62b2-4595-b14a-17cf6826529b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.19.1\",\"gridData\":{\"x\":6,\"y\":0,\"w\":23,\"h\":29,\"i\":\"f6058551-3712-4eed-8d06-f22666deae8c\"},\"panelIndex\":\"f6058551-3712-4eed-8d06-f22666deae8c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.19.1\",\"gridData\":{\"x\":29,\"y\":0,\"w\":18,\"h\":29,\"i\":\"e2003a79-da15-4775-8f29-fedd1f3cc693\"},\"panelIndex\":\"e2003a79-da15-4775-8f29-fedd1f3cc693\",\"embeddableConfig\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":6,\"direction\":\"desc\"}},\"columnsWidth\":[{\"colIndex\":0,\"width\":68.85714285714286},{\"colIndex\":1,\"width\":90.35714285714286},{\"colIndex\":4,\"width\":97.35714285714283},{\"colIndex\":5,\"width\":125.60714285714286},{\"colIndex\":6,\"width\":137.27380952380952}]},\"table\":null},\"panelRefName\":\"panel_2\"},{\"version\":\"2.19.1\",\"gridData\":{\"x\":0,\"y\":29,\"w\":47,\"h\":37,\"i\":\"ca1dad74-5da5-471e-b352-2449affbb433\"},\"panelIndex\":\"ca1dad74-5da5-471e-b352-2449affbb433\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"}]",
11+
"panelsJSON": "[{\"version\":\"3.2.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":6,\"h\":29,\"i\":\"ab0a921b-62b2-4595-b14a-17cf6826529b\"},\"panelIndex\":\"ab0a921b-62b2-4595-b14a-17cf6826529b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"3.2.0\",\"gridData\":{\"x\":6,\"y\":0,\"w\":24,\"h\":29,\"i\":\"f6058551-3712-4eed-8d06-f22666deae8c\"},\"panelIndex\":\"f6058551-3712-4eed-8d06-f22666deae8c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"3.2.0\",\"gridData\":{\"x\":30,\"y\":0,\"w\":18,\"h\":29,\"i\":\"e2003a79-da15-4775-8f29-fedd1f3cc693\"},\"panelIndex\":\"e2003a79-da15-4775-8f29-fedd1f3cc693\",\"embeddableConfig\":{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":6,\"direction\":\"desc\"}},\"columnsWidth\":[{\"colIndex\":0,\"width\":68.85714285714286},{\"colIndex\":1,\"width\":90.35714285714286},{\"colIndex\":4,\"width\":97.35714285714283},{\"colIndex\":5,\"width\":125.60714285714286},{\"colIndex\":6,\"width\":137.27380952380952}]},\"table\":null},\"panelRefName\":\"panel_2\"},{\"version\":\"3.2.0\",\"gridData\":{\"x\":0,\"y\":29,\"w\":48,\"h\":37,\"i\":\"ca1dad74-5da5-471e-b352-2449affbb433\"},\"panelIndex\":\"ca1dad74-5da5-471e-b352-2449affbb433\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"}]",
1212
"timeRestore": false,
1313
"title": "VADR - Sankey",
1414
"version": 1
@@ -43,8 +43,8 @@
4343
}
4444
],
4545
"type": "dashboard",
46-
"updated_at": "2025-09-22T22:01:44.786Z",
47-
"version": "WzExNTgsMV0="
46+
"updated_at": "2025-09-22T23:06:49.465Z",
47+
"version": "WzEyNzcsMV0="
4848
},
4949
{
5050
"attributes": {
@@ -66,8 +66,8 @@
6666
],
6767
"references": [],
6868
"type": "visualization",
69-
"updated_at": "2025-09-22T22:01:44.786Z",
70-
"version": "WzExNDAsMV0="
69+
"updated_at": "2025-09-22T22:51:14.045Z",
70+
"version": "WzI0MiwxXQ=="
7171
},
7272
{
7373
"attributes": {
@@ -89,8 +89,8 @@
8989
],
9090
"references": [],
9191
"type": "visualization",
92-
"updated_at": "2025-09-22T21:57:01.392Z",
93-
"version": "WzQ1OCwxXQ=="
92+
"updated_at": "2025-09-22T22:51:52.331Z",
93+
"version": "WzcwNCwxXQ=="
9494
},
9595
{
9696
"attributes": {
@@ -119,8 +119,8 @@
119119
}
120120
],
121121
"type": "visualization",
122-
"updated_at": "2025-09-22T21:57:01.392Z",
123-
"version": "WzQ1NiwxXQ=="
122+
"updated_at": "2025-09-22T22:51:52.331Z",
123+
"version": "WzcwMiwxXQ=="
124124
},
125125
{
126126
"attributes": {
@@ -149,8 +149,8 @@
149149
}
150150
],
151151
"type": "visualization",
152-
"updated_at": "2025-09-22T22:01:44.786Z",
153-
"version": "WzExMzksMV0="
152+
"updated_at": "2025-09-22T23:08:14.460Z",
153+
"version": "WzEyNzksMV0="
154154
},
155155
{
156156
"attributes": {
@@ -181,8 +181,8 @@
181181
}
182182
],
183183
"type": "search",
184-
"updated_at": "2025-09-22T21:57:01.392Z",
185-
"version": "WzQ3MiwxXQ=="
184+
"updated_at": "2025-09-22T22:51:52.331Z",
185+
"version": "WzcxOCwxXQ=="
186186
},
187187
{
188188
"attributes": {
@@ -225,8 +225,8 @@
225225
}
226226
],
227227
"type": "search",
228-
"updated_at": "2025-09-22T21:57:44.795Z",
229-
"version": "Wzk3NiwxXQ=="
228+
"updated_at": "2025-09-22T22:52:35.597Z",
229+
"version": "WzEyMjIsMV0="
230230
}
231231
],
232232
"version": "3.2.0"

‎dashboards/dashboards/vadr/11cd7300-fc34-11ee-a696-1ddfa039ab2d.json‎

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
"searchSourceJSON": "{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"
99
},
1010
"optionsJSON": "{\"hidePanelTitles\":false,\"useMargins\":true}",
11-
"panelsJSON": "[{\"embeddableConfig\":{},\"gridData\":{\"h\":32,\"i\":\"6ef04251-4987-4a5c-9202-a0997fd1ef95\",\"w\":40,\"x\":8,\"y\":0},\"panelIndex\":\"6ef04251-4987-4a5c-9202-a0997fd1ef95\",\"version\":\"2.19.1\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"be01d1a6-070e-48e8-b23f-2c996befd61b\",\"w\":8,\"x\":0,\"y\":0},\"panelIndex\":\"be01d1a6-070e-48e8-b23f-2c996befd61b\",\"version\":\"2.19.1\",\"panelRefName\":\"panel_1\"}]",
11+
"panelsJSON": "[{\"version\":\"3.2.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":8,\"h\":47,\"i\":\"be01d1a6-070e-48e8-b23f-2c996befd61b\"},\"panelIndex\":\"be01d1a6-070e-48e8-b23f-2c996befd61b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"3.2.0\",\"gridData\":{\"x\":8,\"y\":0,\"w\":40,\"h\":47,\"i\":\"6ef04251-4987-4a5c-9202-a0997fd1ef95\"},\"panelIndex\":\"6ef04251-4987-4a5c-9202-a0997fd1ef95\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"}]",
1212
"timeRestore": false,
1313
"title": "VADR - NAVV",
1414
"version": 1
@@ -22,72 +22,72 @@
2222
],
2323
"references": [
2424
{
25-
"id": "eeb31a60-fc37-11ee-a696-1ddfa039ab2d",
25+
"id": "4fdd16a0-3334-11ef-94c9-09db3014d49a",
2626
"name": "panel_0",
2727
"type": "visualization"
2828
},
2929
{
30-
"id": "4fdd16a0-3334-11ef-94c9-09db3014d49a",
30+
"id": "eeb31a60-fc37-11ee-a696-1ddfa039ab2d",
3131
"name": "panel_1",
3232
"type": "visualization"
3333
}
3434
],
3535
"type": "dashboard",
36-
"updated_at": "2025-09-22T22:01:44.786Z",
37-
"version": "WzExNDEsMV0="
36+
"updated_at": "2025-09-22T23:08:37.658Z",
37+
"version": "WzEyODAsMV0="
3838
},
3939
{
4040
"attributes": {
4141
"description": "",
4242
"kibanaSavedObjectMeta": {
43-
"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"
43+
"searchSourceJSON": "{\"query\":{\"query\":{\"query_string\":{\"query\":\"*\"}},\"language\":\"lucene\"},\"filter\":[]}"
4444
},
45-
"savedSearchRefName": "search_0",
46-
"title": "NAVV_1.0",
47-
"uiStateJSON": "{\"vis\":{\"sortColumn\":{\"colIndex\":10,\"direction\":\"desc\"}}}",
45+
"title": "VADR Network Logs",
46+
"uiStateJSON": "{}",
4847
"version": 1,
49-
"visState": "{\"title\":\"NAVV_1.0\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.oui\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"-\",\"customLabel\":\"Source MAC\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.segment.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"-\",\"customLabel\":\"Source Network\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.segment.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"-\",\"customLabel\":\"Destination Network\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Destination IP\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.oui\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"-\",\"customLabel\":\"Destination MAC\"},\"schema\":\"bucket\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.port\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Port\"},\"schema\":\"bucket\"},{\"id\":\"9\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"network.protocol\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Unmapped\",\"customLabel\":\"Service\"},\"schema\":\"bucket\"},{\"id\":\"10\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"protocol\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Protocol\",\"customLabel\":\"Protocol\"},\"schema\":\"bucket\"},{\"id\":\"11\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"zeek.conn.conn_state_description\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Conn State\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":100,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"
48+
"visState": "{\"title\":\"VADR Network Logs\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"markdown\":\"### VADR Toolkit \\n[Inventory](#/dashboard/d16105d0-2b75-11f0-92dc-5f54cacd4f4e) \\n[Misconfigurations](#dashboard/f75511b0-2b79-11f0-92dc-5f54cacd4f4e) \\n[Outdated/Insecure Services](#/dashboard/62ac0aa0-2b9c-11f0-bb82-8ffd215e5a91) \\n[External Communications](#/dashboard/5cd4b680-2b8e-11f0-92dc-5f54cacd4f4e) \\n[Domain Queries](#/dashboard/82e4ebe0-2d11-11f0-af4f-052f357bea07) \\n[Remote Access](#/dashboard/985cb6a0-2ba0-11f0-bb82-8ffd215e5a91) \\n[Intrusion Detection Alerts](#/dashboard/8444dee0-3023-11f0-af4f-052f357bea07) \\n[Segment Examiner](#/dashboard/0f52b420-9e08-11ef-8358-f36ccc4ae837) \\n[Sankey Tool](#/dashboard/0fb588c0-2d0f-11f0-af4f-052f357bea07) \\n[Force Directed Tool - Beta](#/dashboard/ac8b32c0-be66-11ef-9ff5-ff2a2927176e) \\n[NAVV](#/dashboard/11cd7300-fc34-11ee-a696-1ddfa039ab2d) \\n[Legacy Analysis](#/dashboard/590fcc10-fe8f-11ee-99f0-3db6323f1fae) \\n\\nMALCOLM_NAVIGATION_MARKDOWN_REPLACER\",\"type\":\"markdown\",\"fontSize\":10,\"openLinksInNewTab\":false}}"
5049
},
51-
"id": "eeb31a60-fc37-11ee-a696-1ddfa039ab2d",
50+
"id": "4fdd16a0-3334-11ef-94c9-09db3014d49a",
5251
"migrationVersion": {
5352
"visualization": "7.10.0"
5453
},
5554
"namespaces": [
5655
"default"
5756
],
58-
"references": [
59-
{
60-
"id": "52570870-e9d4-444f-a3df-e44c6757ed9f",
61-
"name": "search_0",
62-
"type": "search"
63-
}
64-
],
57+
"references": [],
6558
"type": "visualization",
66-
"updated_at": "2025-09-22T22:01:44.786Z",
67-
"version": "WzExMzksMV0="
59+
"updated_at": "2025-09-22T22:51:14.045Z",
60+
"version": "WzI0MiwxXQ=="
6861
},
6962
{
7063
"attributes": {
7164
"description": "",
7265
"kibanaSavedObjectMeta": {
73-
"searchSourceJSON": "{\"query\":{\"query\":{\"query_string\":{\"query\":\"*\"}},\"language\":\"lucene\"},\"filter\":[]}"
66+
"searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"
7467
},
75-
"title": "VADR Network Logs",
76-
"uiStateJSON": "{}",
68+
"savedSearchRefName": "search_0",
69+
"title": "NAVV_1.0",
70+
"uiStateJSON": "{\"vis\":{\"sortColumn\":{\"colIndex\":10,\"direction\":\"desc\"}}}",
7771
"version": 1,
78-
"visState": "{\"title\":\"VADR Network Logs\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"markdown\":\"### VADR Toolkit \\n[Inventory](#/dashboard/d16105d0-2b75-11f0-92dc-5f54cacd4f4e) \\n[Misconfigurations](#dashboard/f75511b0-2b79-11f0-92dc-5f54cacd4f4e) \\n[Outdated/Insecure Services](#/dashboard/62ac0aa0-2b9c-11f0-bb82-8ffd215e5a91) \\n[External Communications](#/dashboard/5cd4b680-2b8e-11f0-92dc-5f54cacd4f4e) \\n[Domain Queries](#/dashboard/82e4ebe0-2d11-11f0-af4f-052f357bea07) \\n[Remote Access](#/dashboard/985cb6a0-2ba0-11f0-bb82-8ffd215e5a91) \\n[Intrusion Detection Alerts](#/dashboard/8444dee0-3023-11f0-af4f-052f357bea07) \\n[Segment Examiner](#/dashboard/0f52b420-9e08-11ef-8358-f36ccc4ae837) \\n[Sankey Tool](#/dashboard/0fb588c0-2d0f-11f0-af4f-052f357bea07) \\n[Force Directed Tool - Beta](#/dashboard/ac8b32c0-be66-11ef-9ff5-ff2a2927176e) \\n[NAVV](#/dashboard/11cd7300-fc34-11ee-a696-1ddfa039ab2d) \\n[Legacy Analysis](#/dashboard/590fcc10-fe8f-11ee-99f0-3db6323f1fae) \\n\\nMALCOLM_NAVIGATION_MARKDOWN_REPLACER\",\"type\":\"markdown\",\"fontSize\":10,\"openLinksInNewTab\":false}}"
72+
"visState": "{\"title\":\"NAVV_1.0\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.oui\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"-\",\"customLabel\":\"Source MAC\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.segment.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"-\",\"customLabel\":\"Source Network\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.segment.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"-\",\"customLabel\":\"Destination Network\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Destination IP\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.oui\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"-\",\"customLabel\":\"Destination MAC\"},\"schema\":\"bucket\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"destination.port\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Port\"},\"schema\":\"bucket\"},{\"id\":\"9\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"network.protocol\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Unmapped\",\"customLabel\":\"Service\"},\"schema\":\"bucket\"},{\"id\":\"10\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"protocol\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Protocol\",\"customLabel\":\"Protocol\"},\"schema\":\"bucket\"},{\"id\":\"11\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"zeek.conn.conn_state_description\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Conn State\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":100,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"row\":true}}"
7973
},
80-
"id": "4fdd16a0-3334-11ef-94c9-09db3014d49a",
74+
"id": "eeb31a60-fc37-11ee-a696-1ddfa039ab2d",
8175
"migrationVersion": {
8276
"visualization": "7.10.0"
8377
},
8478
"namespaces": [
8579
"default"
8680
],
87-
"references": [],
81+
"references": [
82+
{
83+
"id": "52570870-e9d4-444f-a3df-e44c6757ed9f",
84+
"name": "search_0",
85+
"type": "search"
86+
}
87+
],
8888
"type": "visualization",
89-
"updated_at": "2025-09-22T22:01:44.786Z",
90-
"version": "WzExNDAsMV0="
89+
"updated_at": "2025-09-22T23:08:14.460Z",
90+
"version": "WzEyNzksMV0="
9191
},
9292
{
9393
"attributes": {
@@ -130,8 +130,8 @@
130130
}
131131
],
132132
"type": "search",
133-
"updated_at": "2025-09-22T21:57:44.795Z",
134-
"version": "Wzk3NiwxXQ=="
133+
"updated_at": "2025-09-22T22:52:35.597Z",
134+
"version": "WzEyMjIsMV0="
135135
}
136136
],
137137
"version": "3.2.0"

0 commit comments

Comments
 (0)