title: file*

type: index-pattern


query: tags:"zeek.dns"

title: Zeek DNS

type: search

version: WzczNywyXQ==


query: suricata.eve.event_type : "alert"

title: Suricata Alert Logs

version: WzczNSwyXQ==


type: lens

visualizationType: lnsXY

dataType: date

scale: interval

interval: auto

label: Count of records

dataType: number

operationType: count

scale: ratio

sourceField: Records

label: Top values of suricata.eve.event_type

dataType: string

operationType: terms

scale: ordinal

type: column

orderDirection: desc

position: right

valueLabels: hide

position: top

query: tags : "suricata"

title: Activity [Suricata]

visualizationType: lnsPie

label: Top values of destination.geo.country_name

shape: treemap

numberDisplay: percent

categoryDisplay: default

legendDisplay: default

title: Top Destination Countries

title: Event Type [Suricata]

description: Donut visualization of Suricata Event Type

shape: donut

label: Top values of network.transport

title: Top Network Transports

title: Suricata Dashboard

type: tag

type: dashboard

version: WzgzNCwyXQ==


query: tags:"zeek.files"

title: Zeek Files

version: WzczOCwyXQ==


title: filebeat-*

version: WzczMSwyXQ==


title: winlogbeat*


title: Winevent ModuleLogging Powershell


title: Winevent Commandline

version: WzczMywyXQ==


title: Winevent Regmod


query: tags:"zeek.ssl"

title: Zeek SSL

version: WzczNCwyXQ==


type: map

type: TILE

scalingType: CLUSTERS

sortOrder: desc

label: Destination Geo

type: VECTOR

type: STATIC

value: marker

color: #FFFFFF

value: circle

size: SMALL

to: now

backgroundColor: #ffffff

title: Destination Geo [Zeek]

query: not tags : "suricata"

title: Network Transport [Zeek]

label: Top values of network.direction

query: not tags:"suricata"

title: Network Direction [Zeek]

label: Top values of zeek.dns.query

legendDisplay: show

query: not tags:"suricata"

title: Top DNS Query [Zeek]

query: not tags:"suricata"

title: Time Series Count [Zeek]

title: Zeek Dashboard


title: Winevent Services


title: Winevent Netconn


title: Winevent Filemod


query: tags: "zeek.http"

title: Zeek HTTP

version: WzczNiwyXQ==