Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Alarms dashboard. Modify exportAssets.py to export all references #117

Merged
merged 2 commits into from
Sep 23, 2019
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
41 changes: 41 additions & 0 deletions resources/dashboard:Alarms-Dashboard.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,41 @@
{
"migrationVersion": {
"dashboard": "7.0.0"
},
"references": [
{
"type": "visualization",
"name": "panel_0",
"id": "Total-Alarms-Fired-(Count)"
},
{
"type": "visualization",
"name": "panel_1",
"id": "Count-of-Total-Alarms-Fired-by-Name-(Bar-Chart)"
},
{
"type": "visualization",
"name": "panel_2",
"id": "Summary-of-Total-Alarms-Fired-(Pie-Chart)"
},
{
"type": "search",
"name": "panel_3",
"id": "Alarms-Table"
}
],
"type": "dashboard",
"dashboard": {
"hits": 0,
"timeRestore": false,
"description": "",
"title": "Alarms Dashboard",
"panelsJSON": "[{\"gridData\":{\"h\":12,\"i\":\"1\",\"w\":48,\"x\":0,\"y\":16},\"panelIndex\":\"1\",\"version\":\"7.2.0\",\"panelRefName\":\"panel_0\"},{\"gridData\":{\"h\":16,\"i\":\"2\",\"w\":24,\"x\":0,\"y\":0},\"panelIndex\":\"2\",\"version\":\"7.2.0\",\"panelRefName\":\"panel_1\"},{\"gridData\":{\"h\":16,\"i\":\"3\",\"w\":24,\"x\":24,\"y\":0},\"panelIndex\":\"3\",\"version\":\"7.2.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{\"columns\":[\"RuleName\",\"RuleSeverity\",\"Application\",\"Session\",\"SrcIP\",\"DestIP\",\"TotalBytes\"],\"sort\":[\"TimeUpdated\",\"desc\"]},\"gridData\":{\"h\":20,\"i\":\"4\",\"w\":48,\"x\":0,\"y\":28},\"panelIndex\":\"4\",\"version\":\"7.2.0\",\"panelRefName\":\"panel_3\"}]",
"optionsJSON": "{\"hidePanelTitles\":false,\"useMargins\":true}",
"version": 2,
"kibanaSavedObjectMeta": {
"searchSourceJSON": "{\"filter\":[],\"query\":{\"query\":\"*\",\"language\":\"lucene\"}}"
}
},
"updated_at": "2019-09-20T17:04:30.894Z"
}
4 changes: 2 additions & 2 deletions resources/dashboard:Capture-Dashboard.json
Original file line number Diff line number Diff line change
Expand Up @@ -44,8 +44,8 @@
"optionsJSON": "{\"hidePanelTitles\":false,\"useMargins\":true}",
"version": 1,
"kibanaSavedObjectMeta": {
"searchSourceJSON": "{\"filter\":[{\"meta\":{\"alias\":\"Pcap Captured\",\"negate\":false,\"type\":\"phrase\",\"key\":\"Captured\",\"value\":\"true\",\"params\":{\"query\":true},\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match\":{\"Captured\":{\"query\":true,\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"range\":{\"TimeStartRaw\":{\"gte\":\"1568688732\"}},\"meta\":{\"type\":\"range\",\"disabled\":false,\"negate\":false,\"alias\":\"Pcap Available on Disk\",\"key\":\"TimeStartRaw\",\"value\":\"1,566,770,100 to +\u221e\",\"params\":{\"gte\":\"1568688732\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"alias\":\"Pcap Written to Disk\",\"negate\":false,\"type\":\"phrase\",\"key\":\"Written\",\"value\":\"true\",\"params\":{\"query\":true},\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[2].meta.index\"},\"query\":{\"match\":{\"Written\":{\"query\":true,\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}],\"query\":{\"language\":\"lucene\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\",\"time_zone\":\"America/Denver\"}}}}"
"searchSourceJSON": "{\"filter\":[{\"meta\":{\"alias\":\"Pcap Captured\",\"negate\":false,\"type\":\"phrase\",\"key\":\"Captured\",\"value\":\"true\",\"params\":{\"query\":true},\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match\":{\"Captured\":{\"query\":true,\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}},{\"range\":{\"TimeStartRaw\":{\"gte\":\"1568951703\"}},\"meta\":{\"type\":\"range\",\"disabled\":false,\"negate\":false,\"alias\":\"Pcap Available on Disk\",\"key\":\"TimeStartRaw\",\"value\":\"1,566,770,100 to +\u221e\",\"params\":{\"gte\":\"1568688732\"},\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"$state\":{\"store\":\"appState\"}},{\"meta\":{\"alias\":\"Pcap Written to Disk\",\"negate\":false,\"type\":\"phrase\",\"key\":\"Written\",\"value\":\"true\",\"params\":{\"query\":true},\"disabled\":false,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[2].meta.index\"},\"query\":{\"match\":{\"Written\":{\"query\":true,\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}],\"query\":{\"language\":\"lucene\",\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\",\"time_zone\":\"America/Denver\"}}}}"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This and the File Reconstruction Dashboard currently have the captured timestamp of your dev box saved by default. We should change these references to TimeStartRaw: { gte: 0 } for the checked in versions.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed. Changes made.

}
},
"updated_at": "2019-09-16T21:43:45.043Z"
}
}
14 changes: 14 additions & 0 deletions resources/index-pattern:f655f660-db31-11e9-9a47-f1b6a93b3342.json

Large diffs are not rendered by default.

36 changes: 36 additions & 0 deletions resources/search:Alarms-Table.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
{
"migrationVersion": {
"search": "7.0.0"
},
"references": [
{
"type": "index-pattern",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"id": "f655f660-db31-11e9-9a47-f1b6a93b3342"
}
],
"search": {
"sort": [
"TimeUpdated",
"desc"
],
"hits": 0,
"description": "",
"title": "Alarms Table",
"version": 2,
"kibanaSavedObjectMeta": {
"searchSourceJSON": "{\"query\":{\"query\":{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"*\",\"time_zone\":\"America/Denver\"}},\"language\":\"lucene\"},\"highlight\":{\"pre_tags\":[\"@kibana-highlighted-field@\"],\"post_tags\":[\"@/kibana-highlighted-field@\"],\"fields\":{\"*\":{}},\"fragment_size\":2147483647},\"filter\":[],\"highlightAll\":true,\"version\":true,\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"
},
"columns": [
"RuleName",
"RuleSeverity",
"Application",
"Session",
"SrcIP",
"DestIP",
"TotalBytes"
]
},
"type": "search",
"updated_at": "2019-09-19T23:36:00.668Z"
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
{
"migrationVersion": {
"visualization": "7.2.0"
},
"visualization": {
"visState": "{\"title\":\"Count of Total Alarms Fired by Name (Bar Chart)\",\"type\":\"histogram\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"scale\":\"linear\",\"mode\":\"stacked\",\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{},\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\",\"setYExtents\":false,\"defaultYExtents\":false},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\"}],\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"TimeUpdated\",\"useNormalizedEsInterval\":true,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"group\",\"params\":{\"field\":\"RuleName.keyword\",\"order\":\"desc\",\"size\":20,\"orderBy\":\"1\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}",
"description": "",
"title": "Count of Total Alarms Fired by Name (Bar Chart)",
"uiStateJSON": "{}",
"version": 1,
"kibanaSavedObjectMeta": {
"searchSourceJSON": "{\"query\":{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"
}
},
"type": "visualization",
"updated_at": "2019-09-20T15:53:36.220Z",
"references": [
{
"type": "index-pattern",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"id": "f655f660-db31-11e9-9a47-f1b6a93b3342"
}
]
}
8 changes: 4 additions & 4 deletions resources/visualization:Sessions-Over-Time.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"visualization": "7.2.0"
},
"visualization": {
"visState": "{\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{}},\"aggs\":[{\"id\":\"1\",\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"TimeUpdated\",\"interval\":\"auto\",\"min_doc_count\":1,\"extended_bounds\":{}}}],\"listeners\":{}}",
"visState": "{\"title\":\"Sessions Over Time\",\"type\":\"line\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":false,\"showCircles\":true,\"smoothLines\":false,\"interpolate\":\"linear\",\"scale\":\"linear\",\"drawLinesBetweenPoints\":true,\"radiusRatio\":9,\"times\":[],\"addTimeMarker\":false,\"defaultYExtents\":false,\"setYExtents\":false,\"yAxis\":{},\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\",\"setYExtents\":false,\"defaultYExtents\":false},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true,\"interpolate\":\"linear\",\"radiusRatio\":9}],\"legendPosition\":\"right\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"schema\":\"segment\",\"params\":{\"field\":\"TimeUpdated\",\"useNormalizedEsInterval\":true,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}}}]}",
"description": "",
"title": "Sessions Over Time",
"uiStateJSON": "{}",
Expand All @@ -13,12 +13,12 @@
}
},
"type": "visualization",
"updated_at": "2019-09-10T15:48:45.439Z",
"updated_at": "2019-09-20T16:05:15.718Z",
"references": [
{
"type": "index-pattern",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index"
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b"
}
]
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
{
"migrationVersion": {
"visualization": "7.2.0"
},
"visualization": {
"visState": "{\"title\":\"Summary of Total Alarms Fired (Pie Chart)\",\"type\":\"pie\",\"params\":{\"shareYAxis\":true,\"addTooltip\":true,\"addLegend\":true,\"isDonut\":false,\"type\":\"pie\",\"legendPosition\":\"right\",\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"RuleSeverity.keyword\",\"order\":\"desc\",\"size\":3,\"orderBy\":\"1\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"RuleName.keyword\",\"order\":\"desc\",\"size\":10,\"orderBy\":\"1\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"Application.keyword\",\"order\":\"desc\",\"size\":10,\"orderBy\":\"1\",\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"}}]}",
"description": "",
"title": "Summary of Total Alarms Fired (Pie Chart)",
"uiStateJSON": "{}",
"version": 1,
"kibanaSavedObjectMeta": {
"searchSourceJSON": "{\"query\":{\"query\":{\"query_string\":{\"query\":\"*\",\"analyze_wildcard\":true}},\"language\":\"lucene\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"
}
},
"type": "visualization",
"updated_at": "2019-09-19T23:15:58.252Z",
"references": [
{
"type": "index-pattern",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"id": "f655f660-db31-11e9-9a47-f1b6a93b3342"
}
]
}
6 changes: 3 additions & 3 deletions resources/visualization:Top-10-Attachment-Names.json
Original file line number Diff line number Diff line change
Expand Up @@ -13,12 +13,12 @@
}
},
"type": "visualization",
"updated_at": "2019-09-10T15:48:45.439Z",
"updated_at": "2019-09-20T16:12:48.512Z",
"references": [
{
"type": "index-pattern",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index"
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b"
}
]
}
Original file line number Diff line number Diff line change
Expand Up @@ -13,12 +13,12 @@
}
},
"type": "visualization",
"updated_at": "2019-09-10T15:48:45.439Z",
"updated_at": "2019-09-20T16:13:03.905Z",
"references": [
{
"type": "index-pattern",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index"
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b"
}
]
}
6 changes: 3 additions & 3 deletions resources/visualization:Top-10-Attachment-Types-By-Count.json
Original file line number Diff line number Diff line change
Expand Up @@ -13,12 +13,12 @@
}
},
"type": "visualization",
"updated_at": "2019-09-10T15:48:45.439Z",
"updated_at": "2019-09-20T16:13:19.880Z",
"references": [
{
"type": "index-pattern",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index"
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b"
}
]
}
6 changes: 3 additions & 3 deletions resources/visualization:Top-10-Receivers-By-Count.json
Original file line number Diff line number Diff line change
Expand Up @@ -13,12 +13,12 @@
}
},
"type": "visualization",
"updated_at": "2019-09-10T15:48:45.439Z",
"updated_at": "2019-09-20T16:13:43.435Z",
"references": [
{
"type": "index-pattern",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index"
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b"
}
]
}
6 changes: 3 additions & 3 deletions resources/visualization:Top-10-Senders-By-Count.json
Original file line number Diff line number Diff line change
Expand Up @@ -13,12 +13,12 @@
}
},
"type": "visualization",
"updated_at": "2019-09-10T15:48:45.439Z",
"updated_at": "2019-09-20T16:14:38.098Z",
"references": [
{
"type": "index-pattern",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b",
"name": "kibanaSavedObjectMeta.searchSourceJSON.index"
"name": "kibanaSavedObjectMeta.searchSourceJSON.index",
"id": "361f5c00-b47c-11e9-86a0-cd3d7bf2f81b"
}
]
}
Loading