Created
September 26, 2024 13:40
-
-
Save Issif/608490eb42bdd321fd246060a6b7da42 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "annotations": { | |
| "list": [ | |
| { | |
| "builtIn": 1, | |
| "datasource": { | |
| "type": "grafana", | |
| "uid": "-- Grafana --" | |
| }, | |
| "enable": true, | |
| "hide": true, | |
| "iconColor": "rgba(0, 211, 255, 1)", | |
| "name": "Annotations & Alerts", | |
| "type": "dashboard" | |
| } | |
| ] | |
| }, | |
| "description": "Falco is a cloud-native security tool designed for Linux systems. It employs custom rules on kernel events, which are enriched with container and Kubernetes metadata, to provide real-time alerts. Falco helps you gain visibility into abnormal behavior, potential security threats, and compliance violations, contributing to comprehensive runtime security.", | |
| "editable": true, | |
| "fiscalYearStartMonth": 0, | |
| "graphTooltip": 1, | |
| "id": 41, | |
| "links": [], | |
| "panels": [ | |
| { | |
| "collapsed": false, | |
| "gridPos": { | |
| "h": 1, | |
| "w": 24, | |
| "x": 0, | |
| "y": 0 | |
| }, | |
| "id": 7, | |
| "panels": [], | |
| "title": "Events", | |
| "type": "row" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| } | |
| }, | |
| "mappings": [] | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 9, | |
| "w": 9, | |
| "x": 0, | |
| "y": 1 | |
| }, | |
| "id": 1, | |
| "options": { | |
| "displayLabels": [ | |
| "name" | |
| ], | |
| "legend": { | |
| "displayMode": "table", | |
| "placement": "bottom", | |
| "showLegend": false | |
| }, | |
| "pieType": "donut", | |
| "reduceOptions": { | |
| "calcs": [ | |
| "sum" | |
| ], | |
| "fields": "", | |
| "values": false | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "desc" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "sum by(rule_name) (idelta(falcosecurity_falco_rules_counters_total{source=~\"$source\", rule_name=~\"$rule\", priority=~\"$priority\"}[$__interval]))", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "legendFormat": "{{rule_name}}", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Rules", | |
| "type": "piechart" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| } | |
| }, | |
| "mappings": [], | |
| "unit": "none" | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 9, | |
| "w": 8, | |
| "x": 9, | |
| "y": 1 | |
| }, | |
| "id": 2, | |
| "options": { | |
| "displayLabels": [ | |
| "name" | |
| ], | |
| "legend": { | |
| "displayMode": "table", | |
| "placement": "bottom", | |
| "showLegend": false | |
| }, | |
| "pieType": "donut", | |
| "reduceOptions": { | |
| "calcs": [ | |
| "sum" | |
| ], | |
| "fields": "", | |
| "values": false | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "desc" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "sum by(source) (idelta(falcosecurity_falco_rules_counters_total{source=~\"$source\", rule_name=~\"$rule\", priority=~\"$priority\"}[$__interval]))", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": false, | |
| "instant": false, | |
| "legendFormat": "{{source}}", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Sources", | |
| "type": "piechart" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| } | |
| }, | |
| "fieldMinMax": false, | |
| "mappings": [], | |
| "unit": "none" | |
| }, | |
| "overrides": [ | |
| { | |
| "matcher": { | |
| "id": "byName", | |
| "options": "error" | |
| }, | |
| "properties": [ | |
| { | |
| "id": "color", | |
| "value": { | |
| "fixedColor": "semi-dark-red", | |
| "mode": "fixed" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "matcher": { | |
| "id": "byName", | |
| "options": "critical" | |
| }, | |
| "properties": [ | |
| { | |
| "id": "color", | |
| "value": { | |
| "fixedColor": "dark-orange", | |
| "mode": "fixed" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "matcher": { | |
| "id": "byName", | |
| "options": "notice" | |
| }, | |
| "properties": [ | |
| { | |
| "id": "color", | |
| "value": { | |
| "fixedColor": "semi-dark-blue", | |
| "mode": "fixed" | |
| } | |
| } | |
| ] | |
| } | |
| ] | |
| }, | |
| "gridPos": { | |
| "h": 9, | |
| "w": 7, | |
| "x": 17, | |
| "y": 1 | |
| }, | |
| "id": 3, | |
| "options": { | |
| "displayLabels": [ | |
| "name" | |
| ], | |
| "legend": { | |
| "displayMode": "table", | |
| "placement": "bottom", | |
| "showLegend": false | |
| }, | |
| "pieType": "donut", | |
| "reduceOptions": { | |
| "calcs": [ | |
| "sum" | |
| ], | |
| "fields": "", | |
| "values": false | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "desc" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "sum by(priority) (idelta(falcosecurity_falco_rules_counters_total{source=~\"$source\", rule_name=~\"$rule\", priority=~\"$priority\"}[$__interval]))", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "legendFormat": "{{priority}}", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Priorities", | |
| "transformations": [ | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "0", | |
| "renamePattern": "default" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "1", | |
| "renamePattern": "debug" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "2", | |
| "renamePattern": "informational" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "3", | |
| "renamePattern": "notice" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "4", | |
| "renamePattern": "warning" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "5", | |
| "renamePattern": "error" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "6", | |
| "renamePattern": "critical" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "7", | |
| "renamePattern": "alert" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "8", | |
| "renamePattern": "emergency" | |
| } | |
| } | |
| ], | |
| "type": "piechart" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "axisBorderShow": false, | |
| "axisCenteredZero": false, | |
| "axisColorMode": "text", | |
| "axisLabel": "", | |
| "axisPlacement": "auto", | |
| "barAlignment": 0, | |
| "barWidthFactor": 0.9, | |
| "drawStyle": "bars", | |
| "fillOpacity": 100, | |
| "gradientMode": "none", | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| }, | |
| "insertNulls": false, | |
| "lineInterpolation": "linear", | |
| "lineWidth": 1, | |
| "pointSize": 1, | |
| "scaleDistribution": { | |
| "type": "linear" | |
| }, | |
| "showPoints": "auto", | |
| "spanNulls": false, | |
| "stacking": { | |
| "group": "A", | |
| "mode": "normal" | |
| }, | |
| "thresholdsStyle": { | |
| "mode": "off" | |
| } | |
| }, | |
| "fieldMinMax": false, | |
| "mappings": [], | |
| "min": 0.01, | |
| "thresholds": { | |
| "mode": "absolute", | |
| "steps": [ | |
| { | |
| "color": "green", | |
| "value": null | |
| }, | |
| { | |
| "color": "red", | |
| "value": 80 | |
| } | |
| ] | |
| }, | |
| "unit": "none" | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 14, | |
| "w": 12, | |
| "x": 0, | |
| "y": 10 | |
| }, | |
| "id": 5, | |
| "options": { | |
| "legend": { | |
| "calcs": [ | |
| "max", | |
| "lastNotNull" | |
| ], | |
| "displayMode": "table", | |
| "placement": "right", | |
| "showLegend": true, | |
| "sortBy": "Max", | |
| "sortDesc": true | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "none" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "sum by(priority) (idelta(falcosecurity_falco_rules_counters_total{source=~\"$source\", priority=~\"$priority\", rule_name=~\"$rule\"}[$__interval]))", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "interval": "1m", | |
| "legendFormat": "__auto", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "by Priority over time", | |
| "transformations": [ | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "0", | |
| "renamePattern": "default" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "1", | |
| "renamePattern": "debug" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "2", | |
| "renamePattern": "informational" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "3", | |
| "renamePattern": "notice" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "4", | |
| "renamePattern": "warning" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "5", | |
| "renamePattern": "error" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "6", | |
| "renamePattern": "critical" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "7", | |
| "renamePattern": "alert" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "8", | |
| "renamePattern": "emergency" | |
| } | |
| } | |
| ], | |
| "type": "timeseries" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "axisBorderShow": false, | |
| "axisCenteredZero": false, | |
| "axisColorMode": "text", | |
| "axisLabel": "", | |
| "axisPlacement": "auto", | |
| "barAlignment": 0, | |
| "barWidthFactor": 0.9, | |
| "drawStyle": "bars", | |
| "fillOpacity": 100, | |
| "gradientMode": "none", | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| }, | |
| "insertNulls": false, | |
| "lineInterpolation": "linear", | |
| "lineWidth": 1, | |
| "pointSize": 1, | |
| "scaleDistribution": { | |
| "type": "linear" | |
| }, | |
| "showPoints": "auto", | |
| "spanNulls": false, | |
| "stacking": { | |
| "group": "A", | |
| "mode": "normal" | |
| }, | |
| "thresholdsStyle": { | |
| "mode": "off" | |
| } | |
| }, | |
| "decimals": 0, | |
| "fieldMinMax": false, | |
| "mappings": [], | |
| "min": 0.01, | |
| "thresholds": { | |
| "mode": "absolute", | |
| "steps": [ | |
| { | |
| "color": "green", | |
| "value": null | |
| }, | |
| { | |
| "color": "red", | |
| "value": 80 | |
| } | |
| ] | |
| }, | |
| "unit": "none" | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 14, | |
| "w": 12, | |
| "x": 12, | |
| "y": 10 | |
| }, | |
| "id": 18, | |
| "options": { | |
| "legend": { | |
| "calcs": [ | |
| "max", | |
| "lastNotNull" | |
| ], | |
| "displayMode": "table", | |
| "placement": "right", | |
| "showLegend": true | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "none" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "sum by(source) (idelta(falcosecurity_falco_rules_counters_total{source=~\"$source\", priority=~\"$priority\", rule_name=~\"$rule\"}[5m]))", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "interval": "1m", | |
| "legendFormat": "__auto", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "by Source over time", | |
| "transformations": [ | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "0", | |
| "renamePattern": "default" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "1", | |
| "renamePattern": "debug" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "2", | |
| "renamePattern": "informational" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "3", | |
| "renamePattern": "notice" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "4", | |
| "renamePattern": "warning" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "5", | |
| "renamePattern": "error" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "6", | |
| "renamePattern": "critical" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "7", | |
| "renamePattern": "alert" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "8", | |
| "renamePattern": "emergency" | |
| } | |
| } | |
| ], | |
| "type": "timeseries" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "axisBorderShow": false, | |
| "axisCenteredZero": false, | |
| "axisColorMode": "text", | |
| "axisLabel": "", | |
| "axisPlacement": "auto", | |
| "barAlignment": 0, | |
| "barWidthFactor": 0.9, | |
| "drawStyle": "bars", | |
| "fillOpacity": 100, | |
| "gradientMode": "none", | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| }, | |
| "insertNulls": false, | |
| "lineInterpolation": "linear", | |
| "lineWidth": 1, | |
| "pointSize": 1, | |
| "scaleDistribution": { | |
| "type": "linear" | |
| }, | |
| "showPoints": "auto", | |
| "spanNulls": false, | |
| "stacking": { | |
| "group": "A", | |
| "mode": "normal" | |
| }, | |
| "thresholdsStyle": { | |
| "mode": "off" | |
| } | |
| }, | |
| "fieldMinMax": false, | |
| "mappings": [], | |
| "min": 0.01, | |
| "thresholds": { | |
| "mode": "absolute", | |
| "steps": [ | |
| { | |
| "color": "green", | |
| "value": null | |
| }, | |
| { | |
| "color": "red", | |
| "value": 80 | |
| } | |
| ] | |
| }, | |
| "unit": "none" | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 15, | |
| "w": 24, | |
| "x": 0, | |
| "y": 24 | |
| }, | |
| "id": 19, | |
| "options": { | |
| "legend": { | |
| "calcs": [ | |
| "max", | |
| "lastNotNull" | |
| ], | |
| "displayMode": "table", | |
| "placement": "right", | |
| "showLegend": true, | |
| "sortBy": "Max", | |
| "sortDesc": true | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "desc" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "sum by(rule_name) (idelta(falcosecurity_falco_rules_counters_total{source=~\"$source\", priority=~\"$priority\", rule_name=~\"$rule\"}[5m]))", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "interval": "1m", | |
| "legendFormat": "__auto", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "by Rule over time", | |
| "transformations": [ | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "0", | |
| "renamePattern": "default" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "1", | |
| "renamePattern": "debug" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "2", | |
| "renamePattern": "informational" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "3", | |
| "renamePattern": "notice" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "4", | |
| "renamePattern": "warning" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "5", | |
| "renamePattern": "error" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "6", | |
| "renamePattern": "critical" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "7", | |
| "renamePattern": "alert" | |
| } | |
| }, | |
| { | |
| "id": "renameByRegex", | |
| "options": { | |
| "regex": "8", | |
| "renamePattern": "emergency" | |
| } | |
| } | |
| ], | |
| "type": "timeseries" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "grafanacloud-prom" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "thresholds" | |
| }, | |
| "custom": { | |
| "align": "auto", | |
| "cellOptions": { | |
| "type": "auto" | |
| }, | |
| "inspect": false | |
| }, | |
| "mappings": [], | |
| "thresholds": { | |
| "mode": "absolute", | |
| "steps": [ | |
| { | |
| "color": "green", | |
| "value": null | |
| }, | |
| { | |
| "color": "red", | |
| "value": 80 | |
| } | |
| ] | |
| } | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 12, | |
| "w": 24, | |
| "x": 0, | |
| "y": 39 | |
| }, | |
| "id": 20, | |
| "options": { | |
| "cellHeight": "sm", | |
| "footer": { | |
| "countRows": false, | |
| "fields": "", | |
| "reducer": [ | |
| "sum" | |
| ], | |
| "show": false | |
| }, | |
| "showHeader": true, | |
| "sortBy": [ | |
| { | |
| "desc": true, | |
| "displayName": "Value" | |
| } | |
| ] | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "exemplar": false, | |
| "expr": "sum by(tags) (falcosecurity_falco_rules_counters_total{source=~\"$source\", priority=~\"$priority\", rule_name=~\"$rule\"})", | |
| "format": "table", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": true, | |
| "legendFormat": "__auto", | |
| "range": false, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Tags", | |
| "transformations": [ | |
| { | |
| "id": "organize", | |
| "options": { | |
| "excludeByName": { | |
| "Time": true, | |
| "Value": false, | |
| "__name__": true, | |
| "cluster": true, | |
| "endpoint": true, | |
| "instance": true, | |
| "job": true, | |
| "namespace": true, | |
| "pod": true, | |
| "priority": true, | |
| "prometheus": true, | |
| "prometheus_replica": true, | |
| "raw_name": true, | |
| "rule_name": true, | |
| "service": true, | |
| "source": true | |
| }, | |
| "includeByName": {}, | |
| "indexByName": {}, | |
| "renameByName": { | |
| "Value": "" | |
| } | |
| } | |
| }, | |
| { | |
| "disabled": true, | |
| "id": "transpose", | |
| "options": {} | |
| } | |
| ], | |
| "type": "table" | |
| }, | |
| { | |
| "collapsed": false, | |
| "gridPos": { | |
| "h": 1, | |
| "w": 24, | |
| "x": 0, | |
| "y": 51 | |
| }, | |
| "id": 8, | |
| "panels": [], | |
| "title": "Performances", | |
| "type": "row" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "axisBorderShow": false, | |
| "axisCenteredZero": false, | |
| "axisColorMode": "text", | |
| "axisLabel": "", | |
| "axisPlacement": "auto", | |
| "barAlignment": 0, | |
| "barWidthFactor": 0.6, | |
| "drawStyle": "line", | |
| "fillOpacity": 0, | |
| "gradientMode": "none", | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| }, | |
| "insertNulls": false, | |
| "lineInterpolation": "linear", | |
| "lineWidth": 1, | |
| "pointSize": 1, | |
| "scaleDistribution": { | |
| "type": "linear" | |
| }, | |
| "showPoints": "auto", | |
| "spanNulls": false, | |
| "stacking": { | |
| "group": "A", | |
| "mode": "none" | |
| }, | |
| "thresholdsStyle": { | |
| "mode": "off" | |
| } | |
| }, | |
| "mappings": [], | |
| "thresholds": { | |
| "mode": "absolute", | |
| "steps": [ | |
| { | |
| "color": "green", | |
| "value": null | |
| }, | |
| { | |
| "color": "red", | |
| "value": 80 | |
| } | |
| ] | |
| } | |
| }, | |
| "overrides": [ | |
| { | |
| "matcher": { | |
| "id": "byName", | |
| "options": "total" | |
| }, | |
| "properties": [ | |
| { | |
| "id": "color", | |
| "value": { | |
| "fixedColor": "dark-red", | |
| "mode": "fixed" | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "matcher": { | |
| "id": "byName", | |
| "options": "total" | |
| }, | |
| "properties": [ | |
| { | |
| "id": "custom.lineStyle", | |
| "value": { | |
| "dash": [ | |
| 10, | |
| 10 | |
| ], | |
| "fill": "dash" | |
| } | |
| } | |
| ] | |
| } | |
| ] | |
| }, | |
| "gridPos": { | |
| "h": 10, | |
| "w": 24, | |
| "x": 0, | |
| "y": 52 | |
| }, | |
| "id": 9, | |
| "options": { | |
| "legend": { | |
| "calcs": [ | |
| "min", | |
| "max", | |
| "lastNotNull" | |
| ], | |
| "displayMode": "table", | |
| "placement": "bottom", | |
| "showLegend": true | |
| }, | |
| "tooltip": { | |
| "mode": "single", | |
| "sort": "none" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "exemplar": false, | |
| "expr": "sum by(pod) (idelta(falcosecurity_falco_n_evts_total[$__interval]))", | |
| "fullMetaSearch": false, | |
| "hide": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "interval": "1m", | |
| "legendFormat": "{{pod}}", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "prometheus" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "exemplar": false, | |
| "expr": "sum(irate(falcosecurity_falco_n_evts_total[$__interval]))", | |
| "fullMetaSearch": false, | |
| "hide": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "interval": "1m", | |
| "legendFormat": "total", | |
| "range": true, | |
| "refId": "B", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Syscalls by instance over time", | |
| "type": "timeseries" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "axisBorderShow": false, | |
| "axisCenteredZero": false, | |
| "axisColorMode": "text", | |
| "axisLabel": "", | |
| "axisPlacement": "auto", | |
| "barAlignment": 0, | |
| "barWidthFactor": 0.6, | |
| "drawStyle": "line", | |
| "fillOpacity": 0, | |
| "gradientMode": "none", | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| }, | |
| "insertNulls": false, | |
| "lineInterpolation": "linear", | |
| "lineWidth": 1, | |
| "pointSize": 5, | |
| "scaleDistribution": { | |
| "type": "linear" | |
| }, | |
| "showPoints": "auto", | |
| "spanNulls": false, | |
| "stacking": { | |
| "group": "A", | |
| "mode": "none" | |
| }, | |
| "thresholdsStyle": { | |
| "mode": "off" | |
| } | |
| }, | |
| "mappings": [], | |
| "thresholds": { | |
| "mode": "absolute", | |
| "steps": [ | |
| { | |
| "color": "green", | |
| "value": null | |
| }, | |
| { | |
| "color": "red", | |
| "value": 80 | |
| } | |
| ] | |
| }, | |
| "unit": "decbytes" | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 12, | |
| "w": 12, | |
| "x": 0, | |
| "y": 62 | |
| }, | |
| "id": 10, | |
| "options": { | |
| "legend": { | |
| "calcs": [ | |
| "min", | |
| "max", | |
| "mean", | |
| "last" | |
| ], | |
| "displayMode": "table", | |
| "placement": "bottom", | |
| "showLegend": true | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "none" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "avg by(pod, raw_name) (falcosecurity_falco_memory_rss_bytes)", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "legendFormat": "{{pod}} - {{raw_name}}", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Memory RSS", | |
| "type": "timeseries" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "axisBorderShow": false, | |
| "axisCenteredZero": false, | |
| "axisColorMode": "text", | |
| "axisLabel": "", | |
| "axisPlacement": "auto", | |
| "barAlignment": 0, | |
| "barWidthFactor": 0.6, | |
| "drawStyle": "line", | |
| "fillOpacity": 0, | |
| "gradientMode": "none", | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| }, | |
| "insertNulls": false, | |
| "lineInterpolation": "linear", | |
| "lineWidth": 1, | |
| "pointSize": 5, | |
| "scaleDistribution": { | |
| "type": "linear" | |
| }, | |
| "showPoints": "auto", | |
| "spanNulls": false, | |
| "stacking": { | |
| "group": "A", | |
| "mode": "none" | |
| }, | |
| "thresholdsStyle": { | |
| "mode": "off" | |
| } | |
| }, | |
| "mappings": [], | |
| "thresholds": { | |
| "mode": "absolute", | |
| "steps": [ | |
| { | |
| "color": "green", | |
| "value": null | |
| }, | |
| { | |
| "color": "red", | |
| "value": 80 | |
| } | |
| ] | |
| }, | |
| "unit": "decbytes" | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 12, | |
| "w": 12, | |
| "x": 12, | |
| "y": 62 | |
| }, | |
| "id": 13, | |
| "options": { | |
| "legend": { | |
| "calcs": [ | |
| "min", | |
| "max", | |
| "mean", | |
| "last" | |
| ], | |
| "displayMode": "table", | |
| "placement": "bottom", | |
| "showLegend": true, | |
| "sortBy": "Last", | |
| "sortDesc": true | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "none" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "avg by(pod, raw_name) (falcosecurity_falco_memory_vsz_bytes)", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "legendFormat": "{{pod}} - {{raw_name}}", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "avg by(pod, raw_name) (falcosecurity_falco_memory_vsz_bytes)", | |
| "fullMetaSearch": false, | |
| "hide": true, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "legendFormat": "{{pod}} - {{raw_name}}", | |
| "range": true, | |
| "refId": "B", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Memory VSZ", | |
| "type": "timeseries" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "axisBorderShow": false, | |
| "axisCenteredZero": false, | |
| "axisColorMode": "text", | |
| "axisLabel": "", | |
| "axisPlacement": "auto", | |
| "barAlignment": 0, | |
| "barWidthFactor": 0.6, | |
| "drawStyle": "line", | |
| "fillOpacity": 0, | |
| "gradientMode": "none", | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| }, | |
| "insertNulls": false, | |
| "lineInterpolation": "linear", | |
| "lineWidth": 1, | |
| "pointSize": 5, | |
| "scaleDistribution": { | |
| "type": "linear" | |
| }, | |
| "showPoints": "auto", | |
| "spanNulls": false, | |
| "stacking": { | |
| "group": "A", | |
| "mode": "none" | |
| }, | |
| "thresholdsStyle": { | |
| "mode": "off" | |
| } | |
| }, | |
| "mappings": [], | |
| "thresholds": { | |
| "mode": "absolute", | |
| "steps": [ | |
| { | |
| "color": "green", | |
| "value": null | |
| }, | |
| { | |
| "color": "red", | |
| "value": 80 | |
| } | |
| ] | |
| }, | |
| "unit": "percent" | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 12, | |
| "w": 24, | |
| "x": 0, | |
| "y": 74 | |
| }, | |
| "id": 11, | |
| "options": { | |
| "legend": { | |
| "calcs": [ | |
| "min", | |
| "max", | |
| "mean", | |
| "last" | |
| ], | |
| "displayMode": "table", | |
| "placement": "bottom", | |
| "showLegend": true | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "none" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "avg by(pod) (falcosecurity_falco_cpu_usage_ratio)", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "legendFormat": "{{pod}}", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "CPU", | |
| "type": "timeseries" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "axisBorderShow": false, | |
| "axisCenteredZero": false, | |
| "axisColorMode": "text", | |
| "axisLabel": "", | |
| "axisPlacement": "auto", | |
| "barAlignment": 0, | |
| "barWidthFactor": 0.6, | |
| "drawStyle": "line", | |
| "fillOpacity": 0, | |
| "gradientMode": "none", | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| }, | |
| "insertNulls": false, | |
| "lineInterpolation": "linear", | |
| "lineWidth": 1, | |
| "pointSize": 5, | |
| "scaleDistribution": { | |
| "type": "linear" | |
| }, | |
| "showPoints": "auto", | |
| "spanNulls": false, | |
| "stacking": { | |
| "group": "A", | |
| "mode": "none" | |
| }, | |
| "thresholdsStyle": { | |
| "mode": "off" | |
| } | |
| }, | |
| "mappings": [], | |
| "thresholds": { | |
| "mode": "absolute", | |
| "steps": [ | |
| { | |
| "color": "green", | |
| "value": null | |
| }, | |
| { | |
| "color": "red", | |
| "value": 80 | |
| } | |
| ] | |
| }, | |
| "unit": "none" | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 12, | |
| "w": 24, | |
| "x": 0, | |
| "y": 86 | |
| }, | |
| "id": 14, | |
| "options": { | |
| "legend": { | |
| "calcs": [ | |
| "min", | |
| "max", | |
| "mean", | |
| "last" | |
| ], | |
| "displayMode": "table", | |
| "placement": "bottom", | |
| "showLegend": true | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "none" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "sum by(pod) (idelta(falcosecurity_falco_n_drops_total[$__interval]))", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "instant": false, | |
| "legendFormat": "{{pod}}", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Drops total", | |
| "type": "timeseries" | |
| }, | |
| { | |
| "collapsed": false, | |
| "gridPos": { | |
| "h": 1, | |
| "w": 24, | |
| "x": 0, | |
| "y": 98 | |
| }, | |
| "id": 15, | |
| "panels": [], | |
| "title": "Fleet", | |
| "type": "row" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| } | |
| }, | |
| "mappings": [] | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 9, | |
| "w": 6, | |
| "x": 0, | |
| "y": 99 | |
| }, | |
| "id": 16, | |
| "options": { | |
| "displayLabels": [ | |
| "name", | |
| "value" | |
| ], | |
| "legend": { | |
| "displayMode": "list", | |
| "placement": "bottom", | |
| "showLegend": true, | |
| "values": [] | |
| }, | |
| "pieType": "pie", | |
| "reduceOptions": { | |
| "calcs": [ | |
| "lastNotNull" | |
| ], | |
| "fields": "", | |
| "values": false | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "none" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "count by(version) (falcosecurity_falco_version_info)", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "legendFormat": "__auto", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Versions", | |
| "type": "piechart" | |
| }, | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "fieldConfig": { | |
| "defaults": { | |
| "color": { | |
| "mode": "palette-classic" | |
| }, | |
| "custom": { | |
| "hideFrom": { | |
| "legend": false, | |
| "tooltip": false, | |
| "viz": false | |
| } | |
| }, | |
| "mappings": [] | |
| }, | |
| "overrides": [] | |
| }, | |
| "gridPos": { | |
| "h": 9, | |
| "w": 6, | |
| "x": 6, | |
| "y": 99 | |
| }, | |
| "id": 17, | |
| "options": { | |
| "displayLabels": [ | |
| "name", | |
| "value" | |
| ], | |
| "legend": { | |
| "displayMode": "list", | |
| "placement": "bottom", | |
| "showLegend": true, | |
| "values": [] | |
| }, | |
| "pieType": "pie", | |
| "reduceOptions": { | |
| "calcs": [ | |
| "lastNotNull" | |
| ], | |
| "fields": "", | |
| "values": false | |
| }, | |
| "tooltip": { | |
| "mode": "multi", | |
| "sort": "none" | |
| } | |
| }, | |
| "pluginVersion": "11.3.0-75826", | |
| "targets": [ | |
| { | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "disableTextWrap": false, | |
| "editorMode": "builder", | |
| "expr": "count by(engine_name) (falcosecurity_scap_engine_name_info)", | |
| "fullMetaSearch": false, | |
| "includeNullMetadata": true, | |
| "legendFormat": "__auto", | |
| "range": true, | |
| "refId": "A", | |
| "useBackend": false | |
| } | |
| ], | |
| "title": "Engines", | |
| "type": "piechart" | |
| } | |
| ], | |
| "preload": false, | |
| "refresh": "", | |
| "schemaVersion": 39, | |
| "tags": [ | |
| "falco", | |
| "kubernetes", | |
| "security" | |
| ], | |
| "templating": { | |
| "list": [ | |
| { | |
| "current": { | |
| "text": "grafanacloud-issif-prom", | |
| "value": "grafanacloud-prom" | |
| }, | |
| "name": "datasource", | |
| "options": [], | |
| "query": "prometheus", | |
| "refresh": 1, | |
| "regex": "", | |
| "type": "datasource" | |
| }, | |
| { | |
| "current": { | |
| "text": [ | |
| "k8s_audit", | |
| "syscall" | |
| ], | |
| "value": [ | |
| "k8s_audit", | |
| "syscall" | |
| ] | |
| }, | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "definition": "label_values(falcosecurity_falco_rules_counters_total,source)", | |
| "includeAll": true, | |
| "label": "source", | |
| "multi": true, | |
| "name": "source", | |
| "options": [], | |
| "query": { | |
| "qryType": 1, | |
| "query": "label_values(falcosecurity_falco_rules_counters_total,source)", | |
| "refId": "PrometheusVariableQueryEditor-VariableQuery" | |
| }, | |
| "refresh": 2, | |
| "regex": "", | |
| "sort": 1, | |
| "type": "query" | |
| }, | |
| { | |
| "current": { | |
| "text": "All", | |
| "value": "$__all" | |
| }, | |
| "datasource": { | |
| "type": "prometheus", | |
| "uid": "${datasource}" | |
| }, | |
| "definition": "label_values(falcosecurity_falco_rules_counters_total{source=~\"$source\"},priority)", | |
| "includeAll": true, | |
| "label": "priority", | |
| "multi": true, | |
| "name": "priority", | |
| "options": [], | |
| "query": { | |
| "qryType": 1, | |
| "query": "label_values(falcosecurity_falco_rules_counters_total{source=~\"$source\"},priority)", | |
| "refId": "PrometheusVariableQueryEditor-VariableQuery" | |
| }, | |
| "refresh": 2, | |
| "regex": "", | |
| "type": "query" | |
| } | |
| ] | |
| }, | |
| "time": { | |
| "from": "2024-09-13T19:53:02.224Z", | |
| "to": "2024-09-18T19:07:10.632Z" | |
| }, | |
| "timepicker": {}, | |
| "timezone": "browser", | |
| "title": "Falco", | |
| "uid": "ddwe2ug4nfi0wb", | |
| "version": 24, | |
| "weekStart": "" | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment