{"attributes":{"fieldAttrs":"{\"destination.ip\":{\"count\":1},\"dns.answers.name\":{\"count\":1},\"suricata.eve.src_ip\":{\"count\":1},\"@timestamp\":{\"count\":1},\"o365.audit.ClientIP\":{\"count\":1},\"o365.audit.OrganizationName\":{\"count\":1},\"o365.audit.Parameters.DeleteMessage\":{\"count\":1},\"o365.audit.Parameters.From\":{\"count\":1},\"o365.audit.Parameters.Name\":{\"count\":1},\"source.geo.country_iso_code\":{\"count\":1},\"user.id\":{\"count\":1}}","fields":"[]","runtimeFieldMap":"{}","title":"*:filebeat-*","typeMeta":"{}"},"coreMigrationVersion":"7.14.2","id":"42d53d30-06ae-11ec-a844-47b60f729eac","migrationVersion":{"index-pattern":"7.11.0"},"references":[],"type":"index-pattern","updated_at":"2021-09-23T17:18:49.229Z","version":"WzEzNTg2LDJd"}
{"attributes":{"columns":["@timestamp","user.id","source.geo.country_iso_code","o365.audit.ClientIP","o365.audit.OrganizationName","o365.audit.Parameters.Name","o365.audit.Parameters.DeleteMessage","o365.audit.Parameters.From"],"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"event.action:\\\"New-InboxRule\\\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[],"title":"New-Inbox-Rules","version":1},"coreMigrationVersion":"7.14.2","id":"7e174560-1c92-11ec-9e93-e39cc173a723","migrationVersion":{"search":"7.9.3"},"references":[{"id":"42d53d30-06ae-11ec-a844-47b60f729eac","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","updated_at":"2021-09-23T17:20:04.802Z","version":"WzEzNTg3LDJd"}
{"excludedObjects":[],"excludedObjectsCount":0,"exportedCount":2,"missingRefCount":0,"missingReferences":[]}