{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ElastiFlow (flow): NAV - Overview","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow: NAV - Overview\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"last_value\",\"id\":\"61ca57f0-469d-11e7-af02-69e470af7417\",\"type\":\"markdown\",\"series\":[{\"time_range_mode\":\"entire_time_range\",\"id\":\"61ca57f1-469d-11e7-af02-69e470af7417\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"split_color_mode\":\"kibana\",\"metrics\":[{\"id\":\"61ca57f2-469d-11e7-af02-69e470af7417\",\"type\":\"count\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"offset_time\":\"-5y\"}],\"time_field\":\"@timestamp\",\"index_pattern\":\"elastiflow-*-codex-*\",\"interval\":\"\",\"axis_position\":\"left\",\"axis_formatter\":\"number\",\"axis_scale\":\"normal\",\"show_legend\":1,\"show_grid\":1,\"tooltip_mode\":\"show_all\",\"isModelInvalid\":false,\"markdown\":\"[**Overview**](#/dashboard/4a608bc0-3d3e-11eb-bc2c-c5758316d788) | [Top-N](#/dashboard/a000b640-3d3e-11eb-bc2c-c5758316d788) | [Core Services](#/dashboard/61bf2aa0-9b2b-11ec-a4df-e940aaa4214d) | [Threats](#/dashboard/f7fbc0b0-3d3e-11eb-bc2c-c5758316d788) | [Flows](#/dashboard/090f3e40-3d3f-11eb-bc2c-c5758316d788) | [Graph](#/dashboard/589bc1f0-a01a-11ed-8918-ff88f1042f36) | [Geo IP](#/dashboard/3b3adf00-3d3f-11eb-bc2c-c5758316d788) | [AS Traffic](#/dashboard/5f59d990-3d3f-11eb-bc2c-c5758316d788) | [Exporters](#/dashboard/6fa91cc0-3d3f-11eb-bc2c-c5758316d788) | [Traffic Details](#/dashboard/8ae6d630-3d3f-11eb-bc2c-c5758316d788) | [Flow Records](#/dashboard/abfed250-3d3f-11eb-bc2c-c5758316d788)\\n***\",\"markdown_css\":\"p{color:#aaaaaa;margin-top:0;margin-bottom:12px} p a{color:#888888;font-size:14px;font-weight:bold;text-decoration:none} p a strong{color:#1ba9f5;font-weight:bold} hr{background-color:#aaaaaa;margin:0;height:1px} a:hover{opacity:.7}\",\"markdown_vertical_align\":\"middle\",\"use_kibana_indexes\":false,\"hide_last_value_indicator\":true,\"drop_last_bucket\":1,\"truncate_legend\":1,\"max_lines_legend\":1}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"1db06be0-3d3e-11eb-bc2c-c5758316d788","managed":false,"references":[],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUxMiwxXQ=="}
{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ElastiFlow: Logo","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow: Logo\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":12,\"openLinksInNewTab\":false,\"markdown\":\"[![ElastiFlow](data:image/png;base64,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)](https://www.elastiflow.com)\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"faba99f0-3d3b-11eb-bc2c-c5758316d788","managed":false,"references":[],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUxMywxXQ=="}
{"attributes":{"allowHidden":false,"fieldAttrs":"{\"flow.client.ip.addr\":{\"count\":1},\"flow.community.id\":{\"count\":2},\"flow.dst.ip.addr\":{\"count\":18},\"flow.export.host.name\":{\"count\":3},\"flow.in.netif.index\":{\"count\":1},\"flow.in.netif.name\":{\"count\":4},\"flow.isServer\":{\"count\":1},\"flow.out.netif.index\":{\"count\":2},\"flow.out.netif.name\":{\"count\":4},\"flow.server.ip.addr\":{\"count\":1},\"flow.src.ip.addr\":{\"count\":51},\"l4.proto.name\":{\"count\":1},\"netif.descr\":{\"count\":1},\"sflow.sample_type.name\":{\"count\":2},\"tcp.flags.bits\":{\"count\":1},\"vlan.c_tag.dei.state\":{\"count\":2},\"vlan.c_tag.id\":{\"count\":1},\"vlan.c_tag.pcp.name\":{\"count\":1},\"index\":{\"count\":2},\"netif.packets.discard.in\":{\"count\":1},\"flow.meter.bytes_drop\":{\"count\":1}}","fieldFormatMap":"{\"bgp.next_hop.ip.addr\":{\"id\":\"url\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/management/kibana/objects\",\"basePath\":\"\"},\"urlTemplate\":\"https://elastiflow.com/netintel/search?ip={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"cace.local.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"cace.remote.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"calix.netif.bytes.down\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.netif.bytes.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.olt.ibont.bytes.down\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.olt.ibont.bytes.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.olt.internet.bytes.down\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.olt.internet.bytes.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.olt.pon.bytes.assured.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.olt.pon.bytes.excess.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.olt.pon.bytes.fixed.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.olt.soho.bytes.down\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.olt.soho.bytes.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.ethernet.payload.bytes.down\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.ethernet.payload.bytes.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.pon.bytes.down\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.pon.bytes.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.pon.bytes_green\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.pon.bytes_yellow\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.pon.fec.bytes.corrected.down\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.pon.fec.bytes.corrected.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.uni.bytes_green\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.uni.bytes_red\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.uni.bytes_red_discard\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"calix.ont.uni.bytes_yellow\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.appqoe.tls.bytes_read\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.appqoe.tls.bytes_write\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.appqoe.tls.decrypt.bytes_read\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.appqoe.tls.decrypt.bytes_write\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.appqoe.tls.encrypt.bytes_read\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.appqoe.tls.encrypt.bytes_write\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.ioam.bytes_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.ioam.cs0.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.ioam.cs1.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.ioam.cs2.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.ioam.cs3.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.ioam.cs4.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.ioam.cs5.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.ioam.cs6.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.ioam.cs7.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.l4r.server.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"cisco.pbhk.mapped.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"cisco.sc.attack.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"cisco.sc.bytes.down\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.sc.bytes.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.sc.sess.bytes.down\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.sc.sess.bytes.up\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.sdwan.bytes_drop\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.waas.bytes.optimised\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"cisco.waas.bytes.orig\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*/field/flow.in.bytes\",\"basePath\":\"\"}}},\"flow.bytes_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.client.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.client.bytes_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.client.ip.addr\":{\"id\":\"url\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/management/kibana/objects\",\"basePath\":\"\"},\"urlTemplate\":\"https://elastiflow.com/netintel/search?ip={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"flow.client.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.client.nat.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.dst.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.dst.ip.addr\":{\"id\":\"url\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/management/kibana/objects\",\"basePath\":\"\"},\"urlTemplate\":\"https://elastiflow.com/netintel/search?ip={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"flow.dst.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.dst.nat.ip.addr\":{\"id\":\"url\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/management/kibana/objects\",\"basePath\":\"\"},\"urlTemplate\":\"https://elastiflow.com/netintel/search?ip={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"flow.dst.nat.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.export.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.export.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.in.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*/field/flow.in.bytes\",\"basePath\":\"\"}}},\"flow.in.bytes_retrans\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.in.bytes_sumsqrs\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.in.bytes_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.in.bytes_total_sumsqrs\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.in.l2.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.in.l2.bytes_sumsqrs\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.in.l2.bytes_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.in.l2.bytes_total_sumsqrs\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.in.l4.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.meter.bytes_drop\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.meter.bytes_ignore\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.meter.flow_select.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.meter.l2.bytes_drop\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.meter.l2.bytes_ignore\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.bytes_mcast\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.bytes_mcast_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.bytes_retrans\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.bytes_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.l2.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.l2.bytes_mcast\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.l2.bytes_mcast_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.l2.bytes_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.out.l4.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.packets\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/monitoring\",\"basePath\":\"\"},\"pattern\":\"0,0.[0]a\"}},\"flow.server.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.server.bytes_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.server.ip.addr\":{\"id\":\"url\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/management/kibana/objects\",\"basePath\":\"\"},\"urlTemplate\":\"https://elastiflow.com/netintel/search?ip={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"flow.server.l4.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.server.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.server.nat.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.src.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.src.ip.addr\":{\"id\":\"url\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/management/kibana/objects\",\"basePath\":\"\"},\"urlTemplate\":\"https://elastiflow.com/netintel/search?ip={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"flow.src.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.src.nat.ip.addr\":{\"id\":\"url\",\"params\":{\"parsedUrl\":{\"origin\":\"http://192.168.9.17:5601\",\"pathname\":\"/app/management/kibana/objects\",\"basePath\":\"\"},\"urlTemplate\":\"https://elastiflow.com/netintel/search?ip={{value}}\",\"labelTemplate\":\"{{value}}\"}},\"flow.src.nat.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.treatment.bytes_drop\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"flow.treatment.bytes_drop_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"l2.bytes_drop\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"l2.bytes_drop_total\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"l4.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"masaryk.tunnel.dst.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"masaryk.tunnel.src.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"mem.avail.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"mem.buffers.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"mem.cached.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"mem.commit.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"mem.free.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"mem.total.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"mem.used.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"mem.util.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"mem.util.bytes_max\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"msexch.total_bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.bytes.in\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.bytes.out\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.bytes.in\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.1024_1518_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.128_255_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.1519_2047_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.2048_4095_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.256_511_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.4096_9216_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.512_1023_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.65_127_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.9217_16383_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netif.ethernet.packets.to_64_bytes.in\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"netscaler.ica.clientside.bytes_in\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"ntop.entropy.client.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"ntop.entropy.server.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"ntop.sip.rtp.dst.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"ntop.sip.rtp.src.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"ntop.untunnel.dst.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"ntop.untunnel.src.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"pim.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"redsocks.dst.orig.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"redsocks.src.orig.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"riverbed.cfe.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"riverbed.outer.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"riverbed.sfe.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"sonicwall.db.proc.mem.commit.bytes\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"tcp.bytes_retrans\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"tunnel.client.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"tunnel.dst.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"tunnel.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"tunnel.server.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"tunnel.src.l4.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/management/kibana/indexPatterns/patterns/elastiflow-flow-codex-*\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"wifi.afd.bytes_accept\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"wifi.afd.bytes_drop\":{\"id\":\"bytes\",\"params\":{\"parsedUrl\":{\"origin\":\"http://codex.demo.elastiflow.com\",\"pathname\":\"/s/light/app/dashboards\",\"basePath\":\"/s/light\"}}},\"sonicwall.svc.port_begin\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/dashboards\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"sonicwall.svc.port_end\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/dashboards\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.server.k8s.svc.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/dashboards\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"flow.dst.k8s.svc.port.id\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/dashboards\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"ericsson.nat.external.port.end\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/dashboards\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}},\"ericsson.nat.external.port.start\":{\"id\":\"number\",\"params\":{\"parsedUrl\":{\"origin\":\"http://es710.dev.elastiflow.com\",\"pathname\":\"/s/codex-light/app/dashboards\",\"basePath\":\"/s/codex-light\"},\"pattern\":\"0\"}}}","fields":"[]","name":"elastiflow-flow-codex-*","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"elastiflow-flow-codex-*","typeMeta":"{}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"elastiflow-flow-codex-*","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUxNCwxXQ=="}
{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ElastiFlow (flow): Client/Server - input list","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow: Client/Server - input list\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1607868729183\",\"fieldName\":\"flow.export.host.name\",\"parent\":\"\",\"label\":\"Flow Exporter\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":false,\"dynamicOptions\":false,\"size\":1000,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1607868774014\",\"fieldName\":\"flow.client.host.name\",\"parent\":\"\",\"label\":\"Client\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":false,\"dynamicOptions\":false,\"size\":5000,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1607868810362\",\"fieldName\":\"flow.server.host.name\",\"parent\":\"\",\"label\":\"Server\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":false,\"dynamicOptions\":false,\"size\":5000,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"},{\"id\":\"1607868835824\",\"fieldName\":\"flow.server.l4.port.name\",\"parent\":\"\",\"label\":\"Service\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":false,\"dynamicOptions\":false,\"size\":1000,\"order\":\"desc\"},\"indexPatternRefName\":\"control_3_index_pattern\"},{\"id\":\"1619032196248\",\"fieldName\":\"l4.session.established\",\"parent\":\"\",\"label\":\"Session Established\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":false,\"size\":3,\"order\":\"desc\"},\"indexPatternRefName\":\"control_4_index_pattern\"}],\"updateFiltersOnChange\":true,\"useTimeFilter\":true,\"pinFilters\":true}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"944a8560-3d4d-11eb-bc2c-c5758316d788","managed":false,"references":[{"id":"elastiflow-flow-codex-*","name":"control_0_index_pattern","type":"index-pattern"},{"id":"elastiflow-flow-codex-*","name":"control_1_index_pattern","type":"index-pattern"},{"id":"elastiflow-flow-codex-*","name":"control_2_index_pattern","type":"index-pattern"},{"id":"elastiflow-flow-codex-*","name":"control_3_index_pattern","type":"index-pattern"},{"id":"elastiflow-flow-codex-*","name":"control_4_index_pattern","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUxNSwxXQ=="}
{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ElastiFlow (flow): Servers and Clients (bytes) - donut","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow (flow): Servers and Clients (bytes) - donut\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"flow.bytes\",\"customLabel\":\"Bytes\",\"emptyAsNull\":false},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"flow.server.host.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Server\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"flow.client.host.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Client\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"palette\":{\"type\":\"palette\",\"name\":\"kibana_palette\"},\"distinctColors\":true,\"nestedLegend\":true,\"legendDisplay\":\"show\",\"truncateLegend\":true,\"maxLegendLines\":1,\"emptySizeRatio\":0.3,\"legendSize\":\"xlarge\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"a5d7def0-3d2e-11eb-bc2c-c5758316d788","managed":false,"references":[{"id":"elastiflow-flow-codex-*","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUxNiwxXQ=="}
{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ElastiFlow (flow): Services (bytes) - donut","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow (flow): Services (bytes) - donut\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"flow.bytes\",\"customLabel\":\"Bytes\",\"emptyAsNull\":false},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"flow.server.l4.port.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Service\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"palette\":{\"type\":\"palette\",\"name\":\"kibana_palette\"},\"distinctColors\":true,\"legendDisplay\":\"show\",\"nestedLegend\":false,\"truncateLegend\":true,\"maxLegendLines\":1,\"emptySizeRatio\":0.3,\"legendSize\":\"xlarge\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"dd32df90-3d32-11eb-bc2c-c5758316d788","managed":false,"references":[{"id":"elastiflow-flow-codex-*","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUxNywxXQ=="}
{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ElastiFlow (flow): TCP Flags (records) - tag cloud","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow: TCP Flags (records) - tag cloud\",\"type\":\"tagcloud\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"tcp.flags.tags\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":16,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"scale\":\"linear\",\"orientation\":\"single\",\"minFontSize\":16,\"maxFontSize\":48,\"showLabel\":false,\"palette\":{\"type\":\"palette\",\"name\":\"kibana_palette\"}}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"0262fbf0-3df7-11eb-bc2c-c5758316d788","managed":false,"references":[{"id":"elastiflow-flow-codex-*","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUxOCwxXQ=="}
{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ElastiFlow (flow): Threats (records) - tag cloud","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow: Threats (records) - tag cloud\",\"type\":\"tagcloud\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"sec.threat.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":16,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"scale\":\"linear\",\"orientation\":\"single\",\"minFontSize\":12,\"maxFontSize\":32,\"showLabel\":false,\"palette\":{\"type\":\"palette\",\"name\":\"kibana_palette\"}}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"99c9add0-6d73-11eb-8c14-238bcf08bfa6","managed":false,"references":[{"id":"elastiflow-flow-codex-*","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUxOSwxXQ=="}
{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ElastiFlow (flow): Autonomous Systems (bytes) - donut","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow (flow): Autonomous Systems (bytes) - donut\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"flow.bytes\",\"customLabel\":\"Bytes\",\"emptyAsNull\":false},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"as.label\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"AS\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"palette\":{\"type\":\"palette\",\"name\":\"kibana_palette\"},\"distinctColors\":true,\"legendDisplay\":\"show\",\"nestedLegend\":false,\"truncateLegend\":true,\"maxLegendLines\":1,\"emptySizeRatio\":0.3,\"legendSize\":\"xlarge\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"145281b0-3d33-11eb-bc2c-c5758316d788","managed":false,"references":[{"id":"elastiflow-flow-codex-*","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUyMCwxXQ=="}
{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ElastiFlow (flow): IP Versions and Protocols (bytes) - donut","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow (flow): IP Versions and Protocols (bytes) - donut\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"flow.bytes\",\"customLabel\":\"Bytes\",\"emptyAsNull\":false},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"ip.version.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"IP Version\"},\"schema\":\"segment\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"l4.proto.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Layer-4 Protocol\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"palette\":{\"type\":\"palette\",\"name\":\"kibana_palette\"},\"distinctColors\":true,\"nestedLegend\":true,\"legendDisplay\":\"show\",\"truncateLegend\":true,\"maxLegendLines\":1,\"emptySizeRatio\":0.3,\"legendSize\":\"xlarge\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"f618c320-3d2e-11eb-bc2c-c5758316d788","managed":false,"references":[{"id":"elastiflow-flow-codex-*","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUyMSwxXQ=="}
{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ElastiFlow: BLANK","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ElastiFlow: BLANK\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":12,\"openLinksInNewTab\":false,\"markdown\":\"\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"676103d0-3d3e-11eb-bc2c-c5758316d788","managed":false,"references":[],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUyMiwxXQ=="}
{"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":0,\"w\":43,\"h\":4,\"i\":\"d5e06153-1b9c-45db-87e7-31ee8930ba55\"},\"panelIndex\":\"d5e06153-1b9c-45db-87e7-31ee8930ba55\",\"embeddableConfig\":{\"hidePanelTitles\":true,\"enhancements\":{}},\"panelRefName\":\"panel_d5e06153-1b9c-45db-87e7-31ee8930ba55\"},{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":43,\"y\":0,\"w\":5,\"h\":4,\"i\":\"e57c863c-11e8-43d8-a2b8-20a63217371e\"},\"panelIndex\":\"e57c863c-11e8-43d8-a2b8-20a63217371e\",\"embeddableConfig\":{\"hidePanelTitles\":true,\"enhancements\":{}},\"panelRefName\":\"panel_e57c863c-11e8-43d8-a2b8-20a63217371e\"},{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":4,\"w\":48,\"h\":5,\"i\":\"99194307-37ba-48b7-82e9-a31b9c396610\"},\"panelIndex\":\"99194307-37ba-48b7-82e9-a31b9c396610\",\"embeddableConfig\":{\"hidePanelTitles\":true,\"enhancements\":{}},\"panelRefName\":\"panel_99194307-37ba-48b7-82e9-a31b9c396610\"},{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":9,\"w\":16,\"h\":16,\"i\":\"0c0401c3-8cf7-4ddf-a598-710489ea06f5\"},\"panelIndex\":\"0c0401c3-8cf7-4ddf-a598-710489ea06f5\",\"embeddableConfig\":{\"hidePanelTitles\":false,\"enhancements\":{},\"vis\":{\"legendOpen\":true}},\"title\":\"Servers and Clients (bytes)\",\"panelRefName\":\"panel_0c0401c3-8cf7-4ddf-a598-710489ea06f5\"},{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":16,\"y\":9,\"w\":16,\"h\":16,\"i\":\"065164eb-2e9f-4bc9-9108-de49eec5b788\"},\"panelIndex\":\"065164eb-2e9f-4bc9-9108-de49eec5b788\",\"embeddableConfig\":{\"hidePanelTitles\":false,\"enhancements\":{},\"vis\":{\"legendOpen\":true}},\"title\":\"Services (bytes)\",\"panelRefName\":\"panel_065164eb-2e9f-4bc9-9108-de49eec5b788\"},{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":32,\"y\":9,\"w\":16,\"h\":10,\"i\":\"59aa493e-b902-4055-b736-047a382df472\"},\"panelIndex\":\"59aa493e-b902-4055-b736-047a382df472\",\"embeddableConfig\":{\"hidePanelTitles\":true,\"enhancements\":{}},\"panelRefName\":\"panel_59aa493e-b902-4055-b736-047a382df472\"},{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":32,\"y\":19,\"w\":16,\"h\":22,\"i\":\"4fb75a57-5569-4c4f-9fbf-15ba651dc98b\"},\"panelIndex\":\"4fb75a57-5569-4c4f-9fbf-15ba651dc98b\",\"embeddableConfig\":{\"hidePanelTitles\":true,\"enhancements\":{}},\"panelRefName\":\"panel_4fb75a57-5569-4c4f-9fbf-15ba651dc98b\"},{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":25,\"w\":16,\"h\":16,\"i\":\"8f52881b-8b3f-4357-a1d4-9af0de96d23f\"},\"panelIndex\":\"8f52881b-8b3f-4357-a1d4-9af0de96d23f\",\"embeddableConfig\":{\"hidePanelTitles\":false,\"enhancements\":{},\"vis\":{\"legendOpen\":true}},\"title\":\"Autonomous Systems (bytes)\",\"panelRefName\":\"panel_8f52881b-8b3f-4357-a1d4-9af0de96d23f\"},{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":16,\"y\":25,\"w\":16,\"h\":16,\"i\":\"83bd57d5-df16-4718-b481-d0bee94cc606\"},\"panelIndex\":\"83bd57d5-df16-4718-b481-d0bee94cc606\",\"embeddableConfig\":{\"hidePanelTitles\":false,\"enhancements\":{},\"vis\":{\"legendOpen\":true}},\"title\":\"IP Versions and Protocols (bytes)\",\"panelRefName\":\"panel_83bd57d5-df16-4718-b481-d0bee94cc606\"},{\"version\":\"7.14.0\",\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":41,\"w\":48,\"h\":1,\"i\":\"24057ec4-107c-42eb-92cd-c2cd6a3d3cda\"},\"panelIndex\":\"24057ec4-107c-42eb-92cd-c2cd6a3d3cda\",\"embeddableConfig\":{\"hidePanelTitles\":true,\"enhancements\":{}},\"panelRefName\":\"panel_24057ec4-107c-42eb-92cd-c2cd6a3d3cda\"}]","timeRestore":false,"title":"ElastiFlow (flow): Overview","version":1},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"4a608bc0-3d3e-11eb-bc2c-c5758316d788","managed":false,"references":[{"id":"1db06be0-3d3e-11eb-bc2c-c5758316d788","name":"d5e06153-1b9c-45db-87e7-31ee8930ba55:panel_d5e06153-1b9c-45db-87e7-31ee8930ba55","type":"visualization"},{"id":"faba99f0-3d3b-11eb-bc2c-c5758316d788","name":"e57c863c-11e8-43d8-a2b8-20a63217371e:panel_e57c863c-11e8-43d8-a2b8-20a63217371e","type":"visualization"},{"id":"944a8560-3d4d-11eb-bc2c-c5758316d788","name":"99194307-37ba-48b7-82e9-a31b9c396610:panel_99194307-37ba-48b7-82e9-a31b9c396610","type":"visualization"},{"id":"a5d7def0-3d2e-11eb-bc2c-c5758316d788","name":"0c0401c3-8cf7-4ddf-a598-710489ea06f5:panel_0c0401c3-8cf7-4ddf-a598-710489ea06f5","type":"visualization"},{"id":"dd32df90-3d32-11eb-bc2c-c5758316d788","name":"065164eb-2e9f-4bc9-9108-de49eec5b788:panel_065164eb-2e9f-4bc9-9108-de49eec5b788","type":"visualization"},{"id":"0262fbf0-3df7-11eb-bc2c-c5758316d788","name":"59aa493e-b902-4055-b736-047a382df472:panel_59aa493e-b902-4055-b736-047a382df472","type":"visualization"},{"id":"99c9add0-6d73-11eb-8c14-238bcf08bfa6","name":"4fb75a57-5569-4c4f-9fbf-15ba651dc98b:panel_4fb75a57-5569-4c4f-9fbf-15ba651dc98b","type":"visualization"},{"id":"145281b0-3d33-11eb-bc2c-c5758316d788","name":"8f52881b-8b3f-4357-a1d4-9af0de96d23f:panel_8f52881b-8b3f-4357-a1d4-9af0de96d23f","type":"visualization"},{"id":"f618c320-3d2e-11eb-bc2c-c5758316d788","name":"83bd57d5-df16-4718-b481-d0bee94cc606:panel_83bd57d5-df16-4718-b481-d0bee94cc606","type":"visualization"},{"id":"676103d0-3d3e-11eb-bc2c-c5758316d788","name":"24057ec4-107c-42eb-92cd-c2cd6a3d3cda:panel_24057ec4-107c-42eb-92cd-c2cd6a3d3cda","type":"visualization"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUyMywxXQ=="}
{"attributes":{"allowHidden":false,"fieldAttrs":"{}","fieldFormatMap":"{}","fields":"[]","name":"elastiflow-log-codex-*","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"elastiflow-log-codex-*"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:29:55.264Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"294c3454-7e97-454d-8fea-ca98c2aca95a","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2025-06-10T15:29:55.264Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzUzNiwxXQ=="}
{"attributes":{"description":"","state":{"adHocDataViews":{},"datasourceStates":{"formBased":{"layers":{"793beee0-dc55-4625-87c8-87a7be461a7e":{"columnOrder":["b2e4e3d4-829b-4714-affb-539b39d01cdb","ad824eaa-7e4f-4194-be51-47adee4d8a71"],"columns":{"ad824eaa-7e4f-4194-be51-47adee4d8a71":{"customLabel":true,"dataType":"number","isBucketed":false,"label":"Records","operationType":"count","params":{"emptyAsNull":true,"format":{"id":"number","params":{"decimals":0}}},"scale":"ratio","sourceField":"system.ip.addr"},"b2e4e3d4-829b-4714-affb-539b39d01cdb":{"dataType":"ip","isBucketed":true,"label":"Top 20 values of system.ip.addr","operationType":"terms","params":{"exclude":[],"excludeIsRegex":false,"include":[],"includeIsRegex":false,"missingBucket":false,"orderBy":{"columnId":"ad824eaa-7e4f-4194-be51-47adee4d8a71","type":"column"},"orderDirection":"desc","otherBucket":true,"parentFormat":{"id":"terms"},"size":20},"scale":"ordinal","sourceField":"system.ip.addr"}},"ignoreGlobalFilters":false,"incompleteColumns":{},"sampling":1}}},"indexpattern":{"layers":{}},"textBased":{"layers":{}}},"filters":[],"internalReferences":[],"query":{"language":"kuery","query":""},"visualization":{"layers":[{"categoryDisplay":"hide","colorMapping":{"assignments":[],"colorMode":{"type":"categorical"},"paletteId":"eui_amsterdam_color_blind","specialAssignments":[{"color":{"type":"loop"},"rule":{"type":"other"},"touched":false}]},"emptySizeRatio":0.3,"layerId":"793beee0-dc55-4625-87c8-87a7be461a7e","layerType":"data","legendDisplay":"show","legendSize":"large","metrics":["ad824eaa-7e4f-4194-be51-47adee4d8a71"],"nestedLegend":false,"numberDisplay":"percent","primaryGroups":["b2e4e3d4-829b-4714-affb-539b39d01cdb"]}],"shape":"donut"}},"title":"ElastiFlow (logs): Top Systems (records) - Lens (donut)","visualizationType":"lnsPie"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:31:26.509Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"c678bb05-67f4-4d35-a44b-1f564ff4e7b2","managed":false,"references":[{"id":"294c3454-7e97-454d-8fea-ca98c2aca95a","name":"indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e","type":"index-pattern"}],"type":"lens","typeMigrationVersion":"8.9.0","updated_at":"2025-06-10T15:31:26.509Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU0MywxXQ=="}
{"attributes":{"allowHidden":false,"fieldAttrs":"{\"event.category.name\":{\"count\":1},\"event.message\":{\"count\":1},\"origin.agent.name\":{\"count\":1},\"system.ip.addr\":{},\"event.severity.level\":{\"count\":0}}","fieldFormatMap":"{\"event.severity.level\":{\"id\":\"color\",\"params\":{\"parsedUrl\":{\"origin\":\"http://control1:5601\",\"pathname\":\"/s/codex/app/management\",\"basePath\":\"/s/codex\"},\"fieldType\":\"string\",\"colors\":[{\"range\":\"-Infinity:Infinity\",\"regex\":\"Emergency\",\"text\":\"#bf1b00\",\"background\":\"\"},{\"range\":\"-Infinity:Infinity\",\"regex\":\"Alert\",\"text\":\"#e24d42\",\"background\":\"\"},{\"range\":\"-Infinity:Infinity\",\"regex\":\"Critical\",\"text\":\"#f9934e\",\"background\":\"\"},{\"range\":\"-Infinity:Infinity\",\"regex\":\"Error\",\"text\":\"#f2c96d\",\"background\":\"\"},{\"range\":\"-Infinity:Infinity\",\"regex\":\"Warning\",\"text\":\"#64b0ee\",\"background\":\"\"},{\"range\":\"-Infinity:Infinity\",\"regex\":\"Notice\",\"text\":\"#806eb7\",\"background\":\"\"},{\"range\":\"-Infinity:Infinity\",\"regex\":\"Informational\",\"text\":\"#7eb26d\",\"background\":\"\"},{\"range\":\"-Infinity:Infinity\",\"regex\":\"Debug\",\"text\":\"#888888\",\"background\":\"\"}]}}}","fields":"[]","name":"elastiflow-log-codex-2.4-*","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"elastiflow-log-codex-2.4-*"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"20d52dc9-7fda-4e78-8477-8793678dc71f","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2025-06-10T15:26:30.742Z","version":"WzUyNCwxXQ=="}
{"attributes":{"description":"","state":{"adHocDataViews":{},"datasourceStates":{"formBased":{"layers":{"793beee0-dc55-4625-87c8-87a7be461a7e":{"columnOrder":["b2e4e3d4-829b-4714-affb-539b39d01cdb","ad824eaa-7e4f-4194-be51-47adee4d8a71"],"columns":{"ad824eaa-7e4f-4194-be51-47adee4d8a71":{"customLabel":true,"dataType":"number","isBucketed":false,"label":"Records","operationType":"count","params":{"emptyAsNull":true,"format":{"id":"number","params":{"decimals":0}}},"scale":"ratio","sourceField":"system.ip.addr"},"b2e4e3d4-829b-4714-affb-539b39d01cdb":{"customLabel":true,"dataType":"string","isBucketed":true,"label":"Category","operationType":"terms","params":{"exclude":[],"excludeIsRegex":false,"include":[],"includeIsRegex":false,"missingBucket":false,"orderBy":{"columnId":"ad824eaa-7e4f-4194-be51-47adee4d8a71","type":"column"},"orderDirection":"desc","otherBucket":true,"parentFormat":{"id":"terms"},"secondaryFields":[],"size":20},"scale":"ordinal","sourceField":"event.category.name"}},"ignoreGlobalFilters":false,"incompleteColumns":{},"sampling":1}}},"indexpattern":{"layers":{}},"textBased":{"layers":{}}},"filters":[],"internalReferences":[],"query":{"language":"kuery","query":""},"visualization":{"layers":[{"categoryDisplay":"hide","colorMapping":{"assignments":[{"color":{"colorIndex":0,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Error"]},"touched":false},{"color":{"colorIndex":1,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Warning"]},"touched":false},{"color":{"colorIndex":2,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Informational"]},"touched":false},{"color":{"colorIndex":3,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Emergency"]},"touched":false},{"color":{"colorIndex":4,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Alert"]},"touched":false},{"color":{"colorIndex":5,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Critical"]},"touched":false},{"color":{"colorIndex":6,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Notice"]},"touched":false},{"color":{"colorIndex":7,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Debug"]},"touched":false}],"colorMode":{"type":"categorical"},"paletteId":"eui_amsterdam_color_blind","specialAssignments":[{"color":{"type":"loop"},"rule":{"type":"other"},"touched":false}]},"emptySizeRatio":0.3,"layerId":"793beee0-dc55-4625-87c8-87a7be461a7e","layerType":"data","legendDisplay":"show","legendSize":"large","metrics":["ad824eaa-7e4f-4194-be51-47adee4d8a71"],"nestedLegend":false,"numberDisplay":"percent","primaryGroups":["b2e4e3d4-829b-4714-affb-539b39d01cdb"]}],"shape":"donut"}},"title":"ElastiFlow (logs): Top Categories (records) - Lens (donut)","visualizationType":"lnsPie"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:31:40.163Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"b39d3f1a-f042-4359-9682-5474a9b8c455","managed":false,"references":[{"id":"294c3454-7e97-454d-8fea-ca98c2aca95a","name":"indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e","type":"index-pattern"}],"type":"lens","typeMigrationVersion":"8.9.0","updated_at":"2025-06-10T15:31:40.163Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU0NiwxXQ=="}
{"attributes":{"description":"","state":{"adHocDataViews":{},"datasourceStates":{"formBased":{"layers":{"793beee0-dc55-4625-87c8-87a7be461a7e":{"columnOrder":["b2e4e3d4-829b-4714-affb-539b39d01cdb","ad824eaa-7e4f-4194-be51-47adee4d8a71"],"columns":{"ad824eaa-7e4f-4194-be51-47adee4d8a71":{"customLabel":true,"dataType":"number","isBucketed":false,"label":"Records","operationType":"count","params":{"emptyAsNull":true,"format":{"id":"number","params":{"decimals":0}}},"scale":"ratio","sourceField":"system.ip.addr"},"b2e4e3d4-829b-4714-affb-539b39d01cdb":{"customLabel":true,"dataType":"string","isBucketed":true,"label":"Severity","operationType":"terms","params":{"exclude":[],"excludeIsRegex":false,"include":[],"includeIsRegex":false,"missingBucket":false,"orderBy":{"columnId":"ad824eaa-7e4f-4194-be51-47adee4d8a71","type":"column"},"orderDirection":"desc","otherBucket":true,"parentFormat":{"id":"terms"},"secondaryFields":[],"size":8},"scale":"ordinal","sourceField":"event.severity.level"}},"ignoreGlobalFilters":false,"incompleteColumns":{},"sampling":1}}},"indexpattern":{"layers":{}},"textBased":{"layers":{}}},"filters":[],"internalReferences":[],"query":{"language":"kuery","query":""},"visualization":{"layers":[{"categoryDisplay":"hide","colorMapping":{"assignments":[{"color":{"colorCode":"#f2c96d","type":"colorCode"},"rule":{"type":"matchExactly","values":["Error"]},"touched":true},{"color":{"colorCode":"#64b0ee","type":"colorCode"},"rule":{"type":"matchExactly","values":["Warning"]},"touched":true},{"color":{"colorCode":"#7eb26d","type":"colorCode"},"rule":{"type":"matchExactly","values":["Informational"]},"touched":true},{"color":{"colorCode":"#bf1b00","type":"colorCode"},"rule":{"type":"matchExactly","values":["Emergency"]},"touched":true},{"color":{"colorCode":"#e24d42","type":"colorCode"},"rule":{"type":"matchExactly","values":["Alert"]},"touched":true},{"color":{"colorCode":"#f9934e","type":"colorCode"},"rule":{"type":"matchExactly","values":["Critical"]},"touched":true},{"color":{"colorCode":"#806eb7","type":"colorCode"},"rule":{"type":"matchExactly","values":["Notice"]},"touched":true},{"color":{"colorCode":"#888888","type":"colorCode"},"rule":{"type":"matchExactly","values":["Debug"]},"touched":true}],"colorMode":{"type":"categorical"},"paletteId":"kibana_v7_legacy","specialAssignments":[{"color":{"type":"loop"},"rule":{"type":"other"},"touched":false}]},"emptySizeRatio":0.3,"layerId":"793beee0-dc55-4625-87c8-87a7be461a7e","layerType":"data","legendDisplay":"show","legendSize":"large","metrics":["ad824eaa-7e4f-4194-be51-47adee4d8a71"],"nestedLegend":false,"numberDisplay":"percent","primaryGroups":["b2e4e3d4-829b-4714-affb-539b39d01cdb"]}],"shape":"donut"}},"title":"ElastiFlow (logs): Top Severities (records) - Lens (donut)","visualizationType":"lnsPie"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:31:48.089Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"f0e3f745-e633-40bf-ab16-3689eaf22114","managed":false,"references":[{"id":"294c3454-7e97-454d-8fea-ca98c2aca95a","name":"indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e","type":"index-pattern"}],"type":"lens","typeMigrationVersion":"8.9.0","updated_at":"2025-06-10T15:31:48.089Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU0OCwxXQ=="}
{"attributes":{"description":"","state":{"adHocDataViews":{},"datasourceStates":{"formBased":{"layers":{"793beee0-dc55-4625-87c8-87a7be461a7e":{"columnOrder":["b2e4e3d4-829b-4714-affb-539b39d01cdb","ad824eaa-7e4f-4194-be51-47adee4d8a71"],"columns":{"ad824eaa-7e4f-4194-be51-47adee4d8a71":{"customLabel":true,"dataType":"number","isBucketed":false,"label":"Records","operationType":"count","params":{"emptyAsNull":true,"format":{"id":"number","params":{"decimals":0}}},"scale":"ratio","sourceField":"system.ip.addr"},"b2e4e3d4-829b-4714-affb-539b39d01cdb":{"customLabel":true,"dataType":"string","isBucketed":true,"label":"Manager","operationType":"terms","params":{"exclude":[],"excludeIsRegex":false,"include":[],"includeIsRegex":false,"missingBucket":false,"orderBy":{"columnId":"ad824eaa-7e4f-4194-be51-47adee4d8a71","type":"column"},"orderDirection":"desc","otherBucket":true,"parentFormat":{"id":"terms"},"secondaryFields":[],"size":20},"scale":"ordinal","sourceField":"origin.manager.name"}},"ignoreGlobalFilters":false,"incompleteColumns":{},"sampling":1}}},"indexpattern":{"layers":{}},"textBased":{"layers":{}}},"filters":[],"internalReferences":[],"query":{"language":"kuery","query":""},"visualization":{"layers":[{"categoryDisplay":"hide","colorMapping":{"assignments":[{"color":{"colorIndex":0,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Error"]},"touched":false},{"color":{"colorIndex":1,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Warning"]},"touched":false},{"color":{"colorIndex":2,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Informational"]},"touched":false},{"color":{"colorIndex":3,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Emergency"]},"touched":false},{"color":{"colorIndex":4,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Alert"]},"touched":false},{"color":{"colorIndex":5,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Critical"]},"touched":false},{"color":{"colorIndex":6,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Notice"]},"touched":false},{"color":{"colorIndex":7,"paletteId":"eui_amsterdam_color_blind","type":"categorical"},"rule":{"type":"matchExactly","values":["Debug"]},"touched":false}],"colorMode":{"type":"categorical"},"paletteId":"eui_amsterdam_color_blind","specialAssignments":[{"color":{"type":"loop"},"rule":{"type":"other"},"touched":false}]},"emptySizeRatio":0.3,"layerId":"793beee0-dc55-4625-87c8-87a7be461a7e","layerType":"data","legendDisplay":"show","legendSize":"large","metrics":["ad824eaa-7e4f-4194-be51-47adee4d8a71"],"nestedLegend":false,"numberDisplay":"percent","primaryGroups":["b2e4e3d4-829b-4714-affb-539b39d01cdb"]}],"shape":"donut"}},"title":"ElastiFlow (log): Top Managers (records) - Lens (donut)","visualizationType":"lnsPie"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:31:57.359Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"015e78bb-3e13-4990-897d-6d4a6ef40b59","managed":false,"references":[{"id":"294c3454-7e97-454d-8fea-ca98c2aca95a","name":"indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e","type":"index-pattern"}],"type":"lens","typeMigrationVersion":"8.9.0","updated_at":"2025-06-10T15:31:57.359Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1MSwxXQ=="}
{"attributes":{"columns":["event.severity.level","system.ip.addr","event.category.name","event.message","origin.agent.name"],"description":"","grid":{"columns":{"event.category.name":{"width":256},"event.message":{"width":633},"event.severity.level":{"width":171},"system.ip.addr":{"width":159}}},"headerRowHeight":0,"hideChart":false,"isTextBasedQuery":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"rowHeight":0,"sort":[["@timestamp","desc"]],"timeRestore":false,"title":"ElastiFlow (log): Log Records - search"},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"f644cd3e-018a-4139-be51-85c188242401","managed":false,"references":[{"id":"294c3454-7e97-454d-8fea-ca98c2aca95a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"search","typeMigrationVersion":"10.4.0","updated_at":"2025-06-10T15:30:47.798Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzUzOSwxXQ=="}
{"attributes":{"controlGroupInput":{"chainingSystem":"HIERARCHICAL","controlStyle":"oneLine","ignoreParentSettingsJSON":"{\"ignoreFilters\":false,\"ignoreQuery\":false,\"ignoreTimerange\":false,\"ignoreValidations\":false}","panelsJSON":"{\"86f7bc2f-6da7-42b8-949f-702e73f52b0d\":{\"type\":\"optionsListControl\",\"order\":0,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"86f7bc2f-6da7-42b8-949f-702e73f52b0d\",\"fieldName\":\"system.ip.addr\",\"title\":\"System\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}},\"ef7525f8-8a0b-4ac9-8100-01b5d7fedf84\":{\"type\":\"optionsListControl\",\"order\":1,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"ef7525f8-8a0b-4ac9-8100-01b5d7fedf84\",\"fieldName\":\"event.category.name\",\"title\":\"Category\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}},\"20063428-e3fb-42e6-9c45-460457fa92bf\":{\"type\":\"optionsListControl\",\"order\":2,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"20063428-e3fb-42e6-9c45-460457fa92bf\",\"fieldName\":\"event.severity.level\",\"title\":\"Severity\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}},\"7efa9472-7f5b-4746-aa51-6fa4b643dc31\":{\"type\":\"optionsListControl\",\"order\":3,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"7efa9472-7f5b-4746-aa51-6fa4b643dc31\",\"fieldName\":\"origin.manager.name\",\"title\":\"Manager\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}}}","showApplySelections":false},"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":false,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"links\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":3,\"i\":\"879c9bd6-3e1e-4369-91db-eb917ed99ca5\"},\"panelIndex\":\"879c9bd6-3e1e-4369-91db-eb917ed99ca5\",\"embeddableConfig\":{\"disabledActions\":[\"OPEN_FLYOUT_ADD_DRILLDOWN\"],\"attributes\":{\"links\":[{\"label\":\"Logs\",\"type\":\"dashboardLink\",\"id\":\"af57d7d2-3d40-433a-94b2-7bb05b244569\",\"order\":0,\"destinationRefName\":\"link_af57d7d2-3d40-433a-94b2-7bb05b244569_dashboard\"},{\"label\":\"Flows\",\"type\":\"dashboardLink\",\"id\":\"7ceb0a51-b9ff-423f-b61c-c8d26edfbeeb\",\"order\":1,\"destinationRefName\":\"link_7ceb0a51-b9ff-423f-b61c-c8d26edfbeeb_dashboard\"}],\"layout\":\"horizontal\"},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":3,\"w\":12,\"h\":11,\"i\":\"e07d5da7-0f91-42bc-beda-6918d1cf5f72\"},\"panelIndex\":\"e07d5da7-0f91-42bc-beda-6918d1cf5f72\",\"embeddableConfig\":{\"description\":\"\",\"enhancements\":{},\"attributes\":{\"title\":\"ElastiFlow (logs): Top Systems (records) - Lens (donut)\",\"description\":\"\",\"visualizationType\":\"lnsPie\",\"state\":{\"visualization\":{\"shape\":\"donut\",\"layers\":[{\"layerId\":\"793beee0-dc55-4625-87c8-87a7be461a7e\",\"primaryGroups\":[\"b2e4e3d4-829b-4714-affb-539b39d01cdb\"],\"metrics\":[\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"],\"numberDisplay\":\"percent\",\"categoryDisplay\":\"hide\",\"legendDisplay\":\"show\",\"nestedLegend\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"legendSize\":\"large\",\"emptySizeRatio\":0.3}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"793beee0-dc55-4625-87c8-87a7be461a7e\":{\"columns\":{\"ad824eaa-7e4f-4194-be51-47adee4d8a71\":{\"label\":\"Records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"system.ip.addr\",\"params\":{\"emptyAsNull\":true,\"format\":{\"id\":\"number\",\"params\":{\"decimals\":0}}},\"customLabel\":true},\"b2e4e3d4-829b-4714-affb-539b39d01cdb\":{\"label\":\"Top 20 values of system.ip.addr\",\"dataType\":\"ip\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"system.ip.addr\",\"isBucketed\":true,\"params\":{\"size\":20,\"orderBy\":{\"type\":\"column\",\"columnId\":\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}}},\"columnOrder\":[\"b2e4e3d4-829b-4714-affb-539b39d01cdb\",\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"],\"sampling\":1,\"ignoreGlobalFilters\":false,\"incompleteColumns\":{},\"indexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"}},\"currentIndexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"},\"indexpattern\":{\"layers\":{},\"currentIndexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"},\"textBased\":{\"layers\":{},\"indexPatternRefs\":[{\"id\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\",\"title\":\"elastiflow-log-codex-2.4-*\",\"timeField\":\"@timestamp\"}]}},\"internalReferences\":[],\"adHocDataViews\":{}},\"references\":[{\"id\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\",\"name\":\"indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e\",\"type\":\"index-pattern\"}],\"type\":\"lens\"}},\"title\":\"Top Systems\",\"panelRefName\":\"panel_e07d5da7-0f91-42bc-beda-6918d1cf5f72\"},{\"type\":\"lens\",\"gridData\":{\"x\":12,\"y\":3,\"w\":12,\"h\":11,\"i\":\"021c85df-5d9e-4924-a6a2-16a82bfb235b\"},\"panelIndex\":\"021c85df-5d9e-4924-a6a2-16a82bfb235b\",\"embeddableConfig\":{\"description\":\"\",\"enhancements\":{},\"attributes\":{\"title\":\"ElastiFlow (logs): Top Categories (records) - Lens (donut)\",\"description\":\"\",\"visualizationType\":\"lnsPie\",\"state\":{\"visualization\":{\"shape\":\"donut\",\"layers\":[{\"layerId\":\"793beee0-dc55-4625-87c8-87a7be461a7e\",\"primaryGroups\":[\"b2e4e3d4-829b-4714-affb-539b39d01cdb\"],\"metrics\":[\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"],\"numberDisplay\":\"percent\",\"categoryDisplay\":\"hide\",\"legendDisplay\":\"show\",\"nestedLegend\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Error\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":0},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Warning\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":1},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Informational\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":2},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Emergency\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":3},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Alert\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":4},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Critical\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":5},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Notice\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":6},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Debug\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":7},\"touched\":false}],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"legendSize\":\"large\",\"emptySizeRatio\":0.3}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"793beee0-dc55-4625-87c8-87a7be461a7e\":{\"columns\":{\"ad824eaa-7e4f-4194-be51-47adee4d8a71\":{\"label\":\"Records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"system.ip.addr\",\"params\":{\"emptyAsNull\":true,\"format\":{\"id\":\"number\",\"params\":{\"decimals\":0}}},\"customLabel\":true},\"b2e4e3d4-829b-4714-affb-539b39d01cdb\":{\"label\":\"Category\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"event.category.name\",\"isBucketed\":true,\"params\":{\"size\":20,\"orderBy\":{\"type\":\"column\",\"columnId\":\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false,\"secondaryFields\":[]},\"customLabel\":true}},\"columnOrder\":[\"b2e4e3d4-829b-4714-affb-539b39d01cdb\",\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"],\"sampling\":1,\"ignoreGlobalFilters\":false,\"incompleteColumns\":{},\"indexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"}},\"currentIndexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"},\"indexpattern\":{\"layers\":{},\"currentIndexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"},\"textBased\":{\"layers\":{},\"indexPatternRefs\":[{\"id\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\",\"title\":\"elastiflow-log-codex-2.4-*\",\"timeField\":\"@timestamp\"}]}},\"internalReferences\":[],\"adHocDataViews\":{}},\"references\":[{\"id\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\",\"name\":\"indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e\",\"type\":\"index-pattern\"}],\"type\":\"lens\"}},\"title\":\"Top Categories\",\"panelRefName\":\"panel_021c85df-5d9e-4924-a6a2-16a82bfb235b\"},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":3,\"w\":12,\"h\":11,\"i\":\"a9e14017-86f5-4a92-b3bb-3f6b14b69bbf\"},\"panelIndex\":\"a9e14017-86f5-4a92-b3bb-3f6b14b69bbf\",\"embeddableConfig\":{\"description\":\"\",\"enhancements\":{},\"attributes\":{\"title\":\"ElastiFlow (logs): Top Severities (records) - Lens (donut)\",\"description\":\"\",\"visualizationType\":\"lnsPie\",\"state\":{\"visualization\":{\"shape\":\"donut\",\"layers\":[{\"layerId\":\"793beee0-dc55-4625-87c8-87a7be461a7e\",\"primaryGroups\":[\"b2e4e3d4-829b-4714-affb-539b39d01cdb\"],\"metrics\":[\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"],\"numberDisplay\":\"percent\",\"categoryDisplay\":\"hide\",\"legendDisplay\":\"show\",\"nestedLegend\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Error\"]},\"color\":{\"type\":\"colorCode\",\"colorCode\":\"#f2c96d\"},\"touched\":true},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Warning\"]},\"color\":{\"type\":\"colorCode\",\"colorCode\":\"#64b0ee\"},\"touched\":true},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Informational\"]},\"color\":{\"type\":\"colorCode\",\"colorCode\":\"#7eb26d\"},\"touched\":true},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Emergency\"]},\"color\":{\"type\":\"colorCode\",\"colorCode\":\"#bf1b00\"},\"touched\":true},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Alert\"]},\"color\":{\"type\":\"colorCode\",\"colorCode\":\"#e24d42\"},\"touched\":true},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Critical\"]},\"color\":{\"type\":\"colorCode\",\"colorCode\":\"#f9934e\"},\"touched\":true},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Notice\"]},\"color\":{\"type\":\"colorCode\",\"colorCode\":\"#806eb7\"},\"touched\":true},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Debug\"]},\"color\":{\"type\":\"colorCode\",\"colorCode\":\"#888888\"},\"touched\":true}],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"kibana_v7_legacy\",\"colorMode\":{\"type\":\"categorical\"}},\"legendSize\":\"large\",\"emptySizeRatio\":0.3}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"793beee0-dc55-4625-87c8-87a7be461a7e\":{\"columns\":{\"ad824eaa-7e4f-4194-be51-47adee4d8a71\":{\"label\":\"Records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"system.ip.addr\",\"params\":{\"emptyAsNull\":true,\"format\":{\"id\":\"number\",\"params\":{\"decimals\":0}}},\"customLabel\":true},\"b2e4e3d4-829b-4714-affb-539b39d01cdb\":{\"label\":\"Severity\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"event.severity.level\",\"isBucketed\":true,\"params\":{\"size\":8,\"orderBy\":{\"type\":\"column\",\"columnId\":\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false,\"secondaryFields\":[]},\"customLabel\":true}},\"columnOrder\":[\"b2e4e3d4-829b-4714-affb-539b39d01cdb\",\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"],\"sampling\":1,\"ignoreGlobalFilters\":false,\"incompleteColumns\":{},\"indexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"}},\"currentIndexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"},\"indexpattern\":{\"layers\":{},\"currentIndexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"},\"textBased\":{\"layers\":{},\"indexPatternRefs\":[{\"id\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\",\"title\":\"elastiflow-log-codex-2.4-*\",\"timeField\":\"@timestamp\"}]}},\"internalReferences\":[],\"adHocDataViews\":{}},\"references\":[{\"id\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\",\"name\":\"indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e\",\"type\":\"index-pattern\"}],\"type\":\"lens\"}},\"title\":\"Top Severities\",\"panelRefName\":\"panel_a9e14017-86f5-4a92-b3bb-3f6b14b69bbf\"},{\"type\":\"lens\",\"gridData\":{\"x\":36,\"y\":3,\"w\":12,\"h\":11,\"i\":\"1217918d-32ec-4f73-b5f2-6ffecd7a663a\"},\"panelIndex\":\"1217918d-32ec-4f73-b5f2-6ffecd7a663a\",\"embeddableConfig\":{\"description\":\"\",\"attributes\":{\"title\":\"ElastiFlow (log): Top Managers (records) - Lens (donut)\",\"description\":\"\",\"visualizationType\":\"lnsPie\",\"state\":{\"visualization\":{\"shape\":\"donut\",\"layers\":[{\"layerId\":\"793beee0-dc55-4625-87c8-87a7be461a7e\",\"primaryGroups\":[\"b2e4e3d4-829b-4714-affb-539b39d01cdb\"],\"metrics\":[\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"],\"numberDisplay\":\"percent\",\"categoryDisplay\":\"hide\",\"legendDisplay\":\"show\",\"nestedLegend\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Error\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":0},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Warning\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":1},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Informational\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":2},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Emergency\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":3},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Alert\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":4},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Critical\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":5},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Notice\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":6},\"touched\":false},{\"rule\":{\"type\":\"matchExactly\",\"values\":[\"Debug\"]},\"color\":{\"type\":\"categorical\",\"paletteId\":\"eui_amsterdam_color_blind\",\"colorIndex\":7},\"touched\":false}],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"legendSize\":\"large\",\"emptySizeRatio\":0.3}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"793beee0-dc55-4625-87c8-87a7be461a7e\":{\"columns\":{\"ad824eaa-7e4f-4194-be51-47adee4d8a71\":{\"label\":\"Records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"system.ip.addr\",\"params\":{\"emptyAsNull\":true,\"format\":{\"id\":\"number\",\"params\":{\"decimals\":0}}},\"customLabel\":true},\"b2e4e3d4-829b-4714-affb-539b39d01cdb\":{\"label\":\"Manager\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"origin.manager.name\",\"isBucketed\":true,\"params\":{\"size\":20,\"orderBy\":{\"type\":\"column\",\"columnId\":\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false,\"secondaryFields\":[]},\"customLabel\":true}},\"columnOrder\":[\"b2e4e3d4-829b-4714-affb-539b39d01cdb\",\"ad824eaa-7e4f-4194-be51-47adee4d8a71\"],\"sampling\":1,\"ignoreGlobalFilters\":false,\"incompleteColumns\":{},\"indexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"}},\"currentIndexPatternId\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}},\"references\":[{\"id\":\"20d52dc9-7fda-4e78-8477-8793678dc71f\",\"name\":\"indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e\",\"type\":\"index-pattern\"}],\"type\":\"lens\"},\"enhancements\":{}},\"title\":\"Top Managers\",\"panelRefName\":\"panel_1217918d-32ec-4f73-b5f2-6ffecd7a663a\"},{\"type\":\"search\",\"gridData\":{\"x\":0,\"y\":14,\"w\":47,\"h\":44,\"i\":\"05de5c3f-e398-4372-bb15-404cc7d3d397\"},\"panelIndex\":\"05de5c3f-e398-4372-bb15-404cc7d3d397\",\"embeddableConfig\":{\"hidePanelTitles\":true,\"description\":\"\",\"enhancements\":{}},\"title\":\"ElastiFlow (log): Log Records - search\",\"panelRefName\":\"panel_05de5c3f-e398-4372-bb15-404cc7d3d397\"}]","timeRestore":false,"title":"ElastiFlow (log): Log Records","version":2},"coreMigrationVersion":"8.8.0","created_at":"2025-06-10T15:26:30.742Z","id":"5648178c-1782-4c63-bfd0-ddb6f5360788","managed":false,"references":[{"id":"5648178c-1782-4c63-bfd0-ddb6f5360788","name":"879c9bd6-3e1e-4369-91db-eb917ed99ca5:link_af57d7d2-3d40-433a-94b2-7bb05b244569_dashboard","type":"dashboard"},{"id":"4a608bc0-3d3e-11eb-bc2c-c5758316d788","name":"879c9bd6-3e1e-4369-91db-eb917ed99ca5:link_7ceb0a51-b9ff-423f-b61c-c8d26edfbeeb_dashboard","type":"dashboard"},{"id":"c678bb05-67f4-4d35-a44b-1f564ff4e7b2","name":"e07d5da7-0f91-42bc-beda-6918d1cf5f72:panel_e07d5da7-0f91-42bc-beda-6918d1cf5f72","type":"lens"},{"id":"20d52dc9-7fda-4e78-8477-8793678dc71f","name":"e07d5da7-0f91-42bc-beda-6918d1cf5f72:indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e","type":"index-pattern"},{"id":"b39d3f1a-f042-4359-9682-5474a9b8c455","name":"021c85df-5d9e-4924-a6a2-16a82bfb235b:panel_021c85df-5d9e-4924-a6a2-16a82bfb235b","type":"lens"},{"id":"20d52dc9-7fda-4e78-8477-8793678dc71f","name":"021c85df-5d9e-4924-a6a2-16a82bfb235b:indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e","type":"index-pattern"},{"id":"f0e3f745-e633-40bf-ab16-3689eaf22114","name":"a9e14017-86f5-4a92-b3bb-3f6b14b69bbf:panel_a9e14017-86f5-4a92-b3bb-3f6b14b69bbf","type":"lens"},{"id":"20d52dc9-7fda-4e78-8477-8793678dc71f","name":"a9e14017-86f5-4a92-b3bb-3f6b14b69bbf:indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e","type":"index-pattern"},{"id":"015e78bb-3e13-4990-897d-6d4a6ef40b59","name":"1217918d-32ec-4f73-b5f2-6ffecd7a663a:panel_1217918d-32ec-4f73-b5f2-6ffecd7a663a","type":"lens"},{"id":"20d52dc9-7fda-4e78-8477-8793678dc71f","name":"1217918d-32ec-4f73-b5f2-6ffecd7a663a:indexpattern-datasource-layer-793beee0-dc55-4625-87c8-87a7be461a7e","type":"index-pattern"},{"id":"f644cd3e-018a-4139-be51-85c188242401","name":"05de5c3f-e398-4372-bb15-404cc7d3d397:panel_05de5c3f-e398-4372-bb15-404cc7d3d397","type":"search"},{"id":"294c3454-7e97-454d-8fea-ca98c2aca95a","name":"controlGroup_86f7bc2f-6da7-42b8-949f-702e73f52b0d:optionsListDataView","type":"index-pattern"},{"id":"294c3454-7e97-454d-8fea-ca98c2aca95a","name":"controlGroup_ef7525f8-8a0b-4ac9-8100-01b5d7fedf84:optionsListDataView","type":"index-pattern"},{"id":"294c3454-7e97-454d-8fea-ca98c2aca95a","name":"controlGroup_20063428-e3fb-42e6-9c45-460457fa92bf:optionsListDataView","type":"index-pattern"},{"id":"294c3454-7e97-454d-8fea-ca98c2aca95a","name":"controlGroup_7efa9472-7f5b-4746-aa51-6fa4b643dc31:optionsListDataView","type":"index-pattern"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2025-06-10T15:33:58.938Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1MywxXQ=="}
{"excludedObjects":[],"excludedObjectsCount":0,"exportedCount":20,"missingRefCount":0,"missingReferences":[]}