Last active
August 29, 2015 14:02
-
-
Save clay584/fc0ef894ac8150c158ce to your computer and use it in GitHub Desktop.
network-dashboard
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"title": "Network Dashboard", | |
"services": { | |
"query": { | |
"list": { | |
"0": { | |
"query": "Action=allow", | |
"alias": "allow", | |
"color": "#508642", | |
"id": 0, | |
"pin": true, | |
"type": "lucene", | |
"enable": true | |
}, | |
"1": { | |
"id": 1, | |
"color": "#890F02", | |
"alias": "deny", | |
"pin": true, | |
"type": "lucene", | |
"enable": true, | |
"query": "Action=deny" | |
}, | |
"2": { | |
"id": 2, | |
"color": "#6ED0E0", | |
"alias": "tcp", | |
"pin": true, | |
"type": "lucene", | |
"enable": true, | |
"query": "IPProtocol=tcp" | |
}, | |
"3": { | |
"id": 3, | |
"color": "#EF843C", | |
"alias": "udp", | |
"pin": true, | |
"type": "lucene", | |
"enable": true, | |
"query": "IPProtocol=udp" | |
}, | |
"4": { | |
"id": 4, | |
"color": "#584477", | |
"alias": "icmp", | |
"pin": true, | |
"type": "lucene", | |
"enable": true, | |
"query": "IPProtocol=icmp" | |
}, | |
"5": { | |
"id": 5, | |
"color": "#EA6460", | |
"alias": "Site A Firewall", | |
"pin": true, | |
"type": "lucene", | |
"enable": true, | |
"query": "asa_unknown" | |
}, | |
"6": { | |
"id": 6, | |
"color": "#BA43A9", | |
"alias": "Site B Firewall", | |
"pin": true, | |
"type": "lucene", | |
"enable": true, | |
"query": "Site_B_Profile" | |
}, | |
"7": { | |
"id": 7, | |
"color": "#CFFAFF", | |
"alias": "Site C Firewall", | |
"pin": true, | |
"type": "lucene", | |
"enable": true, | |
"query": "LogAction=Site_C_Profile" | |
}, | |
"8": { | |
"id": 8, | |
"color": "#508642", | |
"alias": "Site D Firewall", | |
"pin": true, | |
"type": "lucene", | |
"enable": true, | |
"query": "Site_D_Profile" | |
} | |
}, | |
"ids": [ | |
0, | |
1, | |
2, | |
3, | |
4, | |
5, | |
6, | |
7, | |
8 | |
] | |
}, | |
"filter": { | |
"list": { | |
"0": { | |
"type": "time", | |
"field": "@timestamp", | |
"from": "now-15m", | |
"to": "now", | |
"mandate": "must", | |
"active": true, | |
"alias": "", | |
"id": 0 | |
} | |
}, | |
"ids": [ | |
0 | |
] | |
} | |
}, | |
"rows": [ | |
{ | |
"title": "Trends", | |
"height": "350px", | |
"editable": true, | |
"collapse": false, | |
"collapsable": true, | |
"panels": [ | |
{ | |
"error": false, | |
"span": 2, | |
"editable": true, | |
"type": "terms", | |
"loadingEditor": false, | |
"field": "SourceAddress", | |
"exclude": [], | |
"missing": false, | |
"other": false, | |
"size": 10, | |
"order": "count", | |
"style": { | |
"font-size": "10pt" | |
}, | |
"donut": false, | |
"tilt": false, | |
"labels": true, | |
"arrangement": "horizontal", | |
"chart": "table", | |
"counter_pos": "above", | |
"spyable": true, | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
0, | |
1 | |
] | |
}, | |
"tmode": "terms", | |
"tstat": "total", | |
"valuefield": "", | |
"title": "Top N Sources" | |
}, | |
{ | |
"error": false, | |
"span": 3, | |
"editable": true, | |
"type": "terms", | |
"loadingEditor": false, | |
"field": "DestinationAddress", | |
"exclude": [], | |
"missing": false, | |
"other": false, | |
"size": 10, | |
"order": "count", | |
"style": { | |
"font-size": "10pt" | |
}, | |
"donut": false, | |
"tilt": false, | |
"labels": true, | |
"arrangement": "horizontal", | |
"chart": "table", | |
"counter_pos": "above", | |
"spyable": true, | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
0, | |
1 | |
] | |
}, | |
"tmode": "terms", | |
"tstat": "total", | |
"valuefield": "", | |
"title": "Top N Destinations" | |
}, | |
{ | |
"error": false, | |
"span": 4, | |
"editable": true, | |
"type": "terms", | |
"loadingEditor": false, | |
"field": "Application", | |
"exclude": [], | |
"missing": false, | |
"other": false, | |
"size": 10, | |
"order": "count", | |
"style": { | |
"font-size": "10pt" | |
}, | |
"donut": true, | |
"tilt": false, | |
"labels": false, | |
"arrangement": "horizontal", | |
"chart": "pie", | |
"counter_pos": "above", | |
"spyable": true, | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
0, | |
1 | |
] | |
}, | |
"tmode": "terms", | |
"tstat": "total", | |
"valuefield": "", | |
"title": "Traffic Profile" | |
}, | |
{ | |
"error": false, | |
"span": 3, | |
"editable": true, | |
"type": "column", | |
"loadingEditor": false, | |
"panels": [ | |
{ | |
"type": "stats", | |
"mode": "total", | |
"field": "Bytes", | |
"unit": "", | |
"format": "bytes", | |
"display_breakdown": "yes", | |
"label_name": "Firewall", | |
"value_name": "Throughput", | |
"height": "150px", | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
6, | |
7, | |
8 | |
] | |
}, | |
"style": { | |
"font-size": "24pt" | |
}, | |
"sort_field": "", | |
"sort_reverse": false, | |
"spyable": true, | |
"title": "Firewall Throughput", | |
"show": { | |
"count": false, | |
"min": false, | |
"max": false, | |
"mean": false, | |
"std_deviation": false, | |
"sum_of_squares": false, | |
"total": true, | |
"variance": false | |
} | |
}, | |
{ | |
"loading": false, | |
"sizeable": false, | |
"draggable": false, | |
"removable": false, | |
"span": 10, | |
"height": "150px", | |
"editable": true, | |
"type": "trends", | |
"ago": "15m", | |
"arrangement": "vertical", | |
"spyable": true, | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
0, | |
1, | |
2, | |
3, | |
4 | |
] | |
}, | |
"style": { | |
"font-size": "14pt" | |
}, | |
"reverse": false | |
} | |
], | |
"title": "Traffic Volume" | |
} | |
], | |
"notice": false | |
}, | |
{ | |
"title": "Graph", | |
"height": "350px", | |
"editable": true, | |
"collapse": false, | |
"collapsable": true, | |
"panels": [ | |
{ | |
"span": 12, | |
"editable": true, | |
"group": [ | |
"default" | |
], | |
"type": "histogram", | |
"mode": "count", | |
"time_field": "@timestamp", | |
"value_field": null, | |
"auto_int": true, | |
"resolution": 100, | |
"interval": "10s", | |
"fill": 3, | |
"linewidth": 3, | |
"timezone": "browser", | |
"spyable": true, | |
"zoomlinks": true, | |
"bars": false, | |
"stack": false, | |
"points": false, | |
"lines": true, | |
"legend": true, | |
"x-axis": true, | |
"y-axis": true, | |
"percentage": true, | |
"interactive": true, | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
0, | |
1, | |
2, | |
3, | |
4 | |
] | |
}, | |
"title": "Events over time", | |
"intervals": [ | |
"auto", | |
"1s", | |
"1m", | |
"5m", | |
"10m", | |
"30m", | |
"1h", | |
"3h", | |
"12h", | |
"1d", | |
"1w", | |
"1M", | |
"1y" | |
], | |
"options": true, | |
"tooltip": { | |
"value_type": "cumulative", | |
"query_as_alias": true | |
}, | |
"scale": 1, | |
"y_format": "none", | |
"grid": { | |
"max": null, | |
"min": 0 | |
}, | |
"annotate": { | |
"enable": false, | |
"query": "*", | |
"size": 20, | |
"field": "_type", | |
"sort": [ | |
"_score", | |
"desc" | |
] | |
}, | |
"pointradius": 5, | |
"show_query": true, | |
"legend_counts": true, | |
"zerofill": true, | |
"derivative": false | |
} | |
], | |
"notice": false | |
}, | |
{ | |
"title": "Events", | |
"height": "350px", | |
"editable": true, | |
"collapse": false, | |
"collapsable": true, | |
"panels": [ | |
{ | |
"error": false, | |
"span": 4, | |
"editable": true, | |
"type": "terms", | |
"loadingEditor": false, | |
"field": "SourceZone", | |
"exclude": [ | |
"new" | |
], | |
"missing": false, | |
"other": false, | |
"size": 10, | |
"order": "count", | |
"style": { | |
"font-size": "10pt" | |
}, | |
"donut": false, | |
"tilt": false, | |
"labels": true, | |
"arrangement": "horizontal", | |
"chart": "bar", | |
"counter_pos": "below", | |
"spyable": true, | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
6 | |
] | |
}, | |
"tmode": "terms", | |
"tstat": "total", | |
"valuefield": "", | |
"title": "Zone Distribution - Site B" | |
}, | |
{ | |
"error": false, | |
"span": 4, | |
"editable": true, | |
"type": "terms", | |
"loadingEditor": false, | |
"field": "SourceZone", | |
"exclude": [ | |
"" | |
], | |
"missing": false, | |
"other": false, | |
"size": 10, | |
"order": "count", | |
"style": { | |
"font-size": "10pt" | |
}, | |
"donut": false, | |
"tilt": false, | |
"labels": true, | |
"arrangement": "horizontal", | |
"chart": "bar", | |
"counter_pos": "below", | |
"spyable": true, | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
7 | |
] | |
}, | |
"tmode": "terms", | |
"tstat": "total", | |
"valuefield": "", | |
"title": "Zone Distribution - Site C" | |
}, | |
{ | |
"error": false, | |
"span": 4, | |
"editable": true, | |
"type": "terms", | |
"loadingEditor": false, | |
"field": "SourceZone", | |
"exclude": [], | |
"missing": false, | |
"other": false, | |
"size": 10, | |
"order": "count", | |
"style": { | |
"font-size": "10pt" | |
}, | |
"donut": false, | |
"tilt": false, | |
"labels": true, | |
"arrangement": "horizontal", | |
"chart": "bar", | |
"counter_pos": "below", | |
"spyable": true, | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
8 | |
] | |
}, | |
"tmode": "terms", | |
"tstat": "total", | |
"valuefield": "", | |
"title": "Zone Distribution - Site D" | |
} | |
], | |
"notice": false | |
}, | |
{ | |
"title": "", | |
"height": "150px", | |
"editable": true, | |
"collapse": false, | |
"collapsable": true, | |
"panels": [ | |
{ | |
"error": false, | |
"span": 12, | |
"editable": true, | |
"type": "table", | |
"loadingEditor": false, | |
"size": 100, | |
"pages": 5, | |
"offset": 0, | |
"sort": [ | |
"_score", | |
"desc" | |
], | |
"overflow": "min-height", | |
"fields": [ | |
"@timestamp", | |
"SourceZone", | |
"SourceAddress", | |
"SourcePort", | |
"DestinationAddress", | |
"DestinationPort", | |
"IPProtocol", | |
"DestinationZone", | |
"Application", | |
"User", | |
"Action", | |
"Rule" | |
], | |
"highlight": [], | |
"sortable": true, | |
"header": true, | |
"paging": true, | |
"field_list": false, | |
"all_fields": false, | |
"trimFactor": 300, | |
"localTime": false, | |
"timeField": "@timestamp", | |
"spyable": true, | |
"queries": { | |
"mode": "selected", | |
"ids": [ | |
0, | |
1 | |
] | |
}, | |
"style": { | |
"font-size": "9pt" | |
}, | |
"normTimes": true, | |
"title": "Records" | |
} | |
], | |
"notice": false | |
} | |
], | |
"editable": true, | |
"failover": false, | |
"index": { | |
"interval": "day", | |
"pattern": "[logstash-]YYYY.MM.DD", | |
"default": "NO_TIME_FILTER_OR_INDEX_PATTERN_NOT_MATCHED", | |
"warm_fields": true | |
}, | |
"style": "dark", | |
"panel_hints": true, | |
"pulldowns": [ | |
{ | |
"type": "query", | |
"collapse": true, | |
"notice": false, | |
"query": "*", | |
"pinned": true, | |
"history": [ | |
"PARPA001_LF_Profile", | |
"LogAction=Charlotte_Log_Profile", | |
"SARPA001_LF_Profile", | |
"asa_unknown", | |
"IPProtocol=icmp", | |
"IPProtocol=udp", | |
"IPProtocol=tcp", | |
"Action=deny", | |
"Action=allow" | |
], | |
"remember": 10, | |
"enable": true | |
}, | |
{ | |
"type": "filtering", | |
"collapse": true, | |
"notice": true, | |
"enable": true | |
} | |
], | |
"nav": [ | |
{ | |
"type": "timepicker", | |
"collapse": false, | |
"notice": false, | |
"status": "Stable", | |
"time_options": [ | |
"5m", | |
"15m", | |
"1h", | |
"6h", | |
"12h", | |
"24h", | |
"2d", | |
"7d", | |
"30d" | |
], | |
"refresh_intervals": [ | |
"5s", | |
"10s", | |
"30s", | |
"1m", | |
"5m", | |
"15m", | |
"30m", | |
"1h", | |
"2h", | |
"1d" | |
], | |
"timefield": "@timestamp", | |
"now": true, | |
"filter_id": 0, | |
"enable": true | |
} | |
], | |
"loader": { | |
"save_gist": false, | |
"save_elasticsearch": true, | |
"save_local": true, | |
"save_default": true, | |
"save_temp": true, | |
"save_temp_ttl_enable": true, | |
"save_temp_ttl": "30d", | |
"load_gist": true, | |
"load_elasticsearch": true, | |
"load_elasticsearch_size": 20, | |
"load_local": true, | |
"hide": false | |
}, | |
"refresh": "1m" | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment