From 80f99a8304014cf33a0d01b07d62cdf6bf6c1a8c Mon Sep 17 00:00:00 2001
From: Marc Guasch <marc-gr@users.noreply.github.com>
Date: Tue, 9 Mar 2021 16:30:16 +0100
Subject: [PATCH] [Filebeat] Fix pensando viz (#24275)

* Fix dashboard visualization

* Remove TODO from docs
---
 filebeat/docs/modules/pensando.asciidoc                |  4 ----
 filebeat/module/pensando/_meta/docs.asciidoc           |  4 ----
 .../kibana/7/dashboard/pensando-dfw-overview.json      | 10 +++++-----
 3 files changed, 5 insertions(+), 13 deletions(-)

diff --git a/filebeat/docs/modules/pensando.asciidoc b/filebeat/docs/modules/pensando.asciidoc
index 88c2924a8f10..ce6300e174d3 100644
--- a/filebeat/docs/modules/pensando.asciidoc
+++ b/filebeat/docs/modules/pensando.asciidoc
@@ -37,10 +37,6 @@ file to listen for firewall logs sent from the Pensando DSC(s) on port 5514 (def
 
 include::../include/config-option-intro.asciidoc[]
 
-TODO: document the variables from each fileset. If you're describing a variable
-that's common to other modules, you can reuse shared descriptions by including
-the relevant file. For example:
-
 [float]
 ==== `dfw` log fileset settings
 
diff --git a/filebeat/module/pensando/_meta/docs.asciidoc b/filebeat/module/pensando/_meta/docs.asciidoc
index 611ccdf01ca2..58300205e0d3 100644
--- a/filebeat/module/pensando/_meta/docs.asciidoc
+++ b/filebeat/module/pensando/_meta/docs.asciidoc
@@ -32,10 +32,6 @@ file to listen for firewall logs sent from the Pensando DSC(s) on port 5514 (def
 
 include::../include/config-option-intro.asciidoc[]
 
-TODO: document the variables from each fileset. If you're describing a variable
-that's common to other modules, you can reuse shared descriptions by including
-the relevant file. For example:
-
 [float]
 ==== `dfw` log fileset settings
 
diff --git a/filebeat/module/pensando/_meta/kibana/7/dashboard/pensando-dfw-overview.json b/filebeat/module/pensando/_meta/kibana/7/dashboard/pensando-dfw-overview.json
index 33ebc169841b..bbc7b1283b6e 100644
--- a/filebeat/module/pensando/_meta/kibana/7/dashboard/pensando-dfw-overview.json
+++ b/filebeat/module/pensando/_meta/kibana/7/dashboard/pensando-dfw-overview.json
@@ -1093,13 +1093,13 @@
         "kibanaSavedObjectMeta": {
           "searchSourceJSON": {
             "filter": [],
+            "indexRefName": "kibanaSavedObjectMeta.searchSourceJSON.index",
             "query": {
               "language": "kuery",
               "query": ""
             }
           }
         },
-        "savedSearchRefName": "search_0",
         "title": "Top Destination IPs [Filebeat Pensando]",
         "uiStateJSON": {},
         "version": 1,
@@ -1123,7 +1123,7 @@
                 "orderBy": "1",
                 "otherBucket": true,
                 "otherBucketLabel": "Other",
-                "size": 10
+                "size": 25
               },
               "schema": "segment",
               "type": "terms"
@@ -1152,9 +1152,9 @@
       },
       "references": [
         {
-          "id": "0d0216f0-2fe0-11e7-9d02-3f49bde5c1d5",
-          "name": "search_0",
-          "type": "search"
+          "id": "filebeat-*",
+          "name": "kibanaSavedObjectMeta.searchSourceJSON.index",
+          "type": "index-pattern"
         }
       ],
       "type": "visualization",