{"version":20,"variables":[{"version":2,"key":"BIGIP_Host","type":"query","visible":true,"editable":true,"input":"fetch logs\n| fields  hostname, telemetryeventcategory\n| filterout isNull(hostname)\n| summarize distincthosts = collectDistinct( hostname)\n| expand distincthosts\n| sort distincthosts","multiple":false}],"tiles":{"1":{"title":"Attacks by Type","type":"data","query":"fetch logs\n| filter status == \"ERROR\"\n| filter hostname == \"BIGIP-17.5.1\"\n| summarize count(), by:{attack_type}","visualization":"pieChart","visualizationSettings":{"chartSettings":{"legend":{"position":"right"},"colorPalette":"categorical"},"autoSelectVisualization":false},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":1,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"3":{"title":"Security Events","type":"data","query":"fetch logs\n| filter telemetryEventCategory == \"ASM\"\n| filter status == \"ERROR\"\n| fields timestamp, Hostname = hostname, Attack = attack_type, Violation_Rating = violation_rating, Client_IP = ip_client, protocol, Port = dest_port, Signature = sig_names, Signature_Id = sig_ids, Virtual_Server = vs_name\n","visualization":"table","visualizationSettings":{"table":{"hiddenColumns":[["event.type"]],"sortBy":[{"columnId":"[\"Virtual_Server\"]","direction":"descending"}],"columnWidths":{"[\"Virtual_Server\"]":153,"[\"Port\"]":39.17,"[\"Violation_Rating\"]":119},"columnTypeOverrides":[{"fields":["content"],"id":1753398600245,"value":"log-content"}],"columnOrder":["[\"timestamp\"]","[\"Hostname\"]","[\"Virtual_Server\"]","[\"protocol\"]","[\"Port\"]","[\"Client_IP\"]","[\"Attack\"]","[\"Violation_Rating\"]","[\"Signature\"]","[\"Signature_Id\"]"]},"autoSelectVisualization":false,"thresholds":[]},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":1,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"4":{"title":"Violations by Rating","type":"data","query":"fetch logs\n| filter status == \"ERROR\"\n| filter hostname == \"BIGIP-17.5.1\"\n| summarize count(), by:{violation_rating}","visualization":"pieChart","visualizationSettings":{"autoSelectVisualization":false,"chartSettings":{"legend":{"position":"right"}}},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":1,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}},"5":{"title":"Attacks over Time","type":"data","query":"fetch logs\n| filter telemetryEventCategory == \"ASM\"\n| filter hostname == $BIGIP_Host\n| filter status == \"ERROR\"\n| maketimeseries count(), by: {hostname}","visualization":"lineChart","visualizationSettings":{"autoSelectVisualization":true,"chartSettings":{"gapPolicy":"connect","curve":"smooth","colorPalette":"apdex-inverted","pointsDisplay":"never"},"legend":{"showLegend":false,"position":"auto","ratio":19}},"querySettings":{"maxResultRecords":1000,"defaultScanLimitGbytes":500,"maxResultMegaBytes":1,"defaultSamplingRatio":10,"enableSampling":false},"davis":{"enabled":false,"davisVisualization":{"isAvailable":true}}}},"layouts":{"1":{"x":0,"y":0,"w":9,"h":6},"3":{"x":0,"y":6,"w":24,"h":7},"4":{"x":20,"y":0,"w":4,"h":6},"5":{"x":9,"y":0,"w":11,"h":6}},"importedWithCode":false,"settings":{}}