{"name":"Meraki content pack","description":"Contains:\n- Input\n- Extractors\n- Stream\n- Performance dashboard\n- Warnings & errors dashboard\n","category":"Meraki, wireless, AP","inputs":[{"id":"5aa69d7843818f07221d4fee","title":"VMWare-syslog","configuration":{"expand_structured_data":false,"recv_buffer_size":262144,"port":514,"override_source":null,"force_rdns":false,"allow_override_date":true,"bind_address":"0.0.0.0","store_full_message":false},"static_fields":{},"type":"org.graylog2.inputs.syslog.udp.SyslogUDPInput","global":true,"extractors":[{"title":"General - Category","type":"REGEX","cursor_strategy":"COPY","target_field":"Category","source_field":"message","configuration":{"regex_value":"\\b+(\\S+):"},"converters":[],"condition_type":"REGEX","condition_value":"\\b+(\\S+):","order":0},{"title":"General - Host process (Klopt dat?)","type":"REGEX","cursor_strategy":"COPY","target_field":"host_process","source_field":"message","configuration":{"regex_value":":\\s(.+)\\s\\["},"converters":[],"condition_type":"REGEX","condition_value":":\\s(.+)\\s\\[","order":0},{"title":"General - Originator","type":"REGEX","cursor_strategy":"COPY","target_field":"Originator","source_field":"message","configuration":{"regex_value":"\\].*?\\[(.+)\\]"},"converters":[],"condition_type":"REGEX","condition_value":"\\].*?\\[(.+)\\]","order":0},{"title":"VmKernel - Vmotion bandwidth","type":"REGEX","cursor_strategy":"COPY","target_field":"vmotion_bandwidth","source_field":"message","configuration":{"regex_value":"bandwidth\\D+(\\d+\\.\\d+)"},"converters":[],"condition_type":"REGEX","condition_value":"VMotion.*bandwidth","order":0},{"title":"Save isolated log message","type":"REGEX","cursor_strategy":"COPY","target_field":"log_message","source_field":"message","configuration":{"regex_value":"(?!.*])(.+)"},"converters":[],"condition_type":"REGEX","condition_value":"(?!.*])(.+)","order":0},{"title":"General - Source address","type":"REGEX","cursor_strategy":"COPY","target_field":"source_address","source_field":"message","configuration":{"regex_value":"(\\S+)"},"converters":[],"condition_type":"REGEX","condition_value":"^[^-]\\S+","order":0},{"title":"Source address when led by dashes","type":"REGEX","cursor_strategy":"COPY","target_field":"source_address","source_field":"message","configuration":{"regex_value":"-.+\\sEarly\\sinit\\slogs\\sZ\\s(\\S+)"},"converters":[],"condition_type":"REGEX","condition_value":"-.+\\sEarly\\sinit\\slogs\\sZ\\s","order":0}]}],"streams":[{"id":"5aa6a30e43818f2439eee4be","title":"VMware devices","description":"VMware ESX host logging","disabled":false,"matching_type":"AND","stream_rules":[{"type":"EXACT","field":"gl2_source_input","value":"5aa69d7843818f07221d4fee","inverted":false,"description":""}],"outputs":[],"default_stream":false}],"outputs":[],"dashboards":[{"title":"VMware - ESXi hosts - Performance","description":"ESXi Performance statistics","dashboard_widgets":[{"description":"Average VMotion bandwidth","type":"FIELD_CHART","cache_time":10,"configuration":{"valuetype":"mean","renderer":"area","interpolation":"basis","timerange":{"type":"relative","range":86400},"rangeType":"relative","field":"vmotion_bandwidth","stream_id":"5aa6a30e43818f2439eee4be","query":"_exists_:vmotion_bandwidth","interval":"hour","relative":1800},"col":1,"row":2,"height":1,"width":2},{"description":"Vmotion events (past week)","type":"SEARCH_RESULT_CHART","cache_time":10,"configuration":{"timerange":{"type":"relative","range":432000},"interval":"day","stream_id":"5aa6a30e43818f2439eee4be","query":"_exists_:vmotion_bandwidth"},"col":1,"row":1,"height":1,"width":2},{"description":"Minimum VMotion bandwidth","type":"FIELD_CHART","cache_time":10,"configuration":{"valuetype":"min","renderer":"bar","interpolation":"linear","timerange":{"type":"relative","range":86400},"rangeType":"relative","field":"vmotion_bandwidth","stream_id":"5aa6a30e43818f2439eee4be","query":"_exists_:vmotion_bandwidth","interval":"hour","relative":86400},"col":3,"row":1,"height":1,"width":2},{"description":"Maximum VMotion bandwidth (24h)","type":"FIELD_CHART","cache_time":10,"configuration":{"valuetype":"max","renderer":"bar","interpolation":"linear","timerange":{"type":"relative","range":86400},"rangeType":"relative","field":"vmotion_bandwidth","stream_id":"5aa6a30e43818f2439eee4be","query":"_exists_:vmotion_bandwidth","interval":"hour","relative":86400},"col":3,"row":2,"height":1,"width":2}]},{"title":"VMware - ESXi hosts - Warnings & errors","description":"Summary of warnings and errors","dashboard_widgets":[{"description":"Top error generating hosts","type":"QUICKVALUES","cache_time":10,"configuration":{"timerange":{"type":"relative","range":86400},"field":"source_address","stream_id":"5aa6a30e43818f2439eee4be","query":"level:[1 TO 3]","show_data_table":true,"limit":5,"show_pie_chart":true,"sort_order":"desc","stacked_fields":"","data_table_limit":50},"col":3,"row":2,"height":3,"width":1},{"description":"Total warnings by time of day","type":"SEARCH_RESULT_CHART","cache_time":10,"configuration":{"timerange":{"type":"relative","range":86400},"interval":"hour","stream_id":"5aa6a30e43818f2439eee4be","query":"level:4"},"col":1,"row":1,"height":1,"width":2},{"description":"Total errors by time of day","type":"SEARCH_RESULT_CHART","cache_time":10,"configuration":{"timerange":{"type":"relative","range":86400},"interval":"hour","stream_id":"5aa6a30e43818f2439eee4be","query":"level:[1 TO 3]"},"col":3,"row":1,"height":1,"width":2},{"description":"Top warning generating hosts","type":"QUICKVALUES","cache_time":10,"configuration":{"timerange":{"type":"relative","range":86400},"field":"source_address","stream_id":"5aa6a30e43818f2439eee4be","query":"level:4","show_data_table":true,"limit":5,"show_pie_chart":true,"sort_order":"desc","stacked_fields":"","data_table_limit":50},"col":1,"row":2,"height":3,"width":1},{"description":"Total warnings (last 24H)","type":"STREAM_SEARCH_RESULT_COUNT","cache_time":10,"configuration":{"timerange":{"type":"relative","range":86400},"stream_id":"5aa6a30e43818f2439eee4be","trend":true,"query":"level:4","interval":"hour","lower_is_better":true},"col":2,"row":2,"height":1,"width":1},{"description":"Total errors (last 24H)","type":"STREAM_SEARCH_RESULT_COUNT","cache_time":10,"configuration":{"timerange":{"type":"relative","range":86400},"stream_id":"5aa6a30e43818f2439eee4be","trend":true,"query":"level:[1 TO 3]","interval":"hour","lower_is_better":true},"col":4,"row":2,"height":1,"width":1},{"description":"Warnings - long term trend","type":"SEARCH_RESULT_CHART","cache_time":10,"configuration":{"interval":"hour","timerange":{"type":"relative","range":0},"query":"source:mld-traps0*.mooiland.nl AND level:4"},"col":0,"row":0,"height":0,"width":0}]}],"grok_patterns":[],"lookup_tables":[],"lookup_caches":[],"lookup_data_adapters":[]}