mirror of
https://github.com/splunk/security_content
synced 2026-06-08 17:32:49 +00:00
P4T12ICK
7 lines
15 KiB
XML
7 lines
15 KiB
XML
|
|
<dashboard version="2" theme="dark">
|
|
<label>Analytics</label>
|
|
<description></description>
|
|
<definition><![CDATA[{"visualizations":{"viz_QDkvLmd1":{"type":"viz.text","options":{"content":"24h Dev Sec Ops Analytics","textColor":"#ffffff","fontSize":20,"fontWeight":"bold","fontFamily":"Splunk Platform Sans"}},"viz_tSvyROLB":{"type":"viz.rectangle","options":{"fill":"#08080A","stroke":"transparent","rx":4,"fillOpacity":0.7}},"viz_3W8Qh4eP":{"type":"viz.rectangle","options":{"fill":"#08080A","stroke":"transparent","rx":4,"fillOpacity":0.7}},"viz_59bzlIVS":{"type":"viz.rectangle","options":{"fill":"#08080A","stroke":"transparent","rx":4,"fillOpacity":0.7}},"viz_3odTWGqw":{"type":"viz.rectangle","options":{"fill":"#08080A","stroke":"transparent","rx":4,"fillOpacity":0.7}},"viz_eaEFX0dW":{"type":"viz.rectangle","options":{"fill":"#08080A","stroke":"transparent","rx":4,"fillOpacity":0.7}},"viz_aCIde10R":{"type":"viz.rectangle","options":{"fill":"#08080A","stroke":"#1A1C20","rx":4,"fillOpacity":0.7}},"viz_8ywD3E9F":{"type":"viz.rectangle","options":{"fill":"#08080A","stroke":"transparent","rx":4,"fillOpacity":0.7}},"viz_DYmwPLeL":{"type":"viz.text","options":{"content":"Total Number of Events","textColor":"#ffffff","fontSize":16,"fontFamily":"Splunk Platform Sans"}},"viz_5NSEGYjN":{"type":"viz.text","options":{"content":"Total Number of Users","textColor":"#ffffff","fontSize":16,"fontFamily":"Splunk Platform Sans"}},"viz_76yFHLSN":{"type":"viz.text","options":{"content":"Total Number of Repositories","textColor":"#ffffff","fontSize":16,"fontFamily":"Splunk Platform Sans"}},"viz_w0IKVoTV":{"type":"viz.text","options":{"content":"Total Number of Detections","textColor":"#ffffff","fontSize":16,"fontFamily":"Splunk Platform Sans"}},"viz_iYTg0Qkq":{"type":"viz.singlevalue","options":{"showTrendIndicator":false,"showSparkline":false,"backgroundColor":"transparent"},"dataSources":{"primary":"ds_sHUvoDKE_ds_Ui7HgXoq"},"encoding":{"majorColor":{"field":"primary[0]","format":{"type":"rangevalue","ranges":[{"from":100,"value":"#D6A854"},{"to":100,"value":"#5fbcff"}]}}},"title":""},"viz_7cwfKhEl":{"type":"viz.singlevalue","options":{"showTrendIndicator":false,"showSparkline":false,"backgroundColor":"transparent"},"dataSources":{"primary":"ds_JhEHlFy5_ds_sHUvoDKE_ds_Ui7HgXoq"},"encoding":{"majorColor":{"field":"primary[0]","format":{"type":"rangevalue","ranges":[{"from":50,"value":"#6AD6D7"},{"to":50,"value":"#5fbcff"}]}}},"title":""},"viz_wa6Tbrq0":{"type":"viz.singlevalue","options":{"showTrendIndicator":false,"showSparkline":false,"backgroundColor":"transparent"},"dataSources":{"primary":"ds_4pBgG928_ds_JhEHlFy5_ds_sHUvoDKE_ds_Ui7HgXoq"},"encoding":{"majorColor":{"field":"primary[0]","format":{"type":"rangevalue","ranges":[{"from":100,"value":"#8AD6A5"},{"to":100,"value":"#5fbcff"}]}}},"title":""},"viz_trxVvFuq":{"type":"viz.table","options":{"headerTextColor":"#ffffff","rowTextColorOdd":"#ffffff","rowTextColorEven":"#ffffff","backgroundColor":"transparent","headerBackgroundColor":"#0E6162","rowBackgroundColorEven":"#08090A","rowBackgroundColorOdd":"transparent"},"dataSources":{"primary":"ds_LIRVs8HJ"},"title":""},"viz_cQnGPsZw":{"type":"viz.table","options":{"headerTextColor":"#ffffff","rowTextColorOdd":"#ffffff","rowTextColorEven":"#ffffff","headerBackgroundColor":"#0E6162","rowBackgroundColorEven":"#08090A","rowBackgroundColorOdd":"transparent","backgroundColor":"transparent"},"dataSources":{"primary":"ds_lyCjku4B"},"title":""},"viz_XpNIREXZ":{"type":"viz.rectangle","options":{"fill":"#08080A","stroke":"#6AD6D7","strokeWidth":4,"rx":4,"fillOpacity":0.7}},"viz_Xvk0ciOV":{"type":"viz.text","options":{"content":"Signals sorted by Risk Score","textColor":"#ffffff","fontSize":16,"fontFamily":"Splunk Platform Sans"}},"viz_8SB0fuyG":{"type":"viz.rectangle","options":{"fill":"#08080A","stroke":"#6AD6D7","strokeWidth":4,"rx":4,"fillOpacity":0.7}},"viz_s24zF6KS":{"type":"viz.text","options":{"content":"Most risky User","textColor":"#ffffff","fontSize":16,"fontFamily":"Splunk Platform Sans"}},"viz_jUaD7Fcp":{"type":"viz.singlevalue","options":{"showTrendIndicator":false,"backgroundColor":"transparent"},"dataSources":{"primary":"ds_0Rt99YYY"},"encoding":{"majorColor":{"field":"primary[0]","format":{"type":"rangevalue","ranges":[{"from":30,"value":"#D6A854"},{"to":30,"value":"#5fbcff"}]}}},"title":"","eventHandlers":[{"type":"drilldown.customUrl","options":{"url":"/app/dev_sec_ops_analytics/user_analytics"}}]},"viz_Em0z8jwq":{"type":"viz.text","options":{"content":"Suspicious Users","textColor":"#ffffff","fontSize":16,"fontFamily":"Splunk Platform Sans"}},"viz_cXQRJrZ4":{"type":"viz.text","options":{"content":"Suspicious Repositories","textColor":"#ffffff","fontSize":16,"fontFamily":"Splunk Platform Sans"}},"viz_CbYhEEDI":{"type":"viz.text","options":{"content":"Triggered Alerts","textColor":"#ffffff","fontSize":16,"fontFamily":"Splunk Platform Sans"}},"viz_kef6Rli3":{"type":"viz.singlevalue","options":{"backgroundColor":"transparent"},"dataSources":{"primary":"ds_V0OUeNEF_ds_0Rt99YYY"},"encoding":{"majorColor":{"field":"primary[0]","format":{"type":"rangevalue","ranges":[{"from":100,"value":"#74A1D6"},{"to":100,"value":"#5fbcff"}]}}},"title":"","eventHandlers":[{"type":"drilldown.customUrl","options":{"url":"/app/dev_sec_ops_analytics/repository_analytics"}}]},"viz_suBNfXgq":{"type":"viz.singlevalue","options":{"backgroundColor":"transparent"},"dataSources":{"primary":"ds_hPbh0anu_ds_V0OUeNEF_ds_0Rt99YYY"},"encoding":{"majorColor":{"field":"primary[0]","format":{"type":"rangevalue","ranges":[{"from":100,"value":"#6AD6D7"},{"to":100,"value":"#5fbcff"}]}}},"title":""},"viz_blueArrow":{"type":"viz.img","options":{"preserveAspectRatio":true,"src":"/en-US/static/app/splunk-dashboard-app/images/examples-hub/healthcare_dashboard/blueArrow.png"}},"viz_vZWZGIF5":{"type":"viz.ellipse","options":{"stroke":"transparent","fill":"#041B24"}},"viz_cUg5YdJ0":{"type":"viz.ellipse","options":{"stroke":"transparent","fill":"#047A7B","fillOpacity":0.7}},"viz_gQ9PRbrb":{"type":"viz.ellipse","options":{"stroke":"transparent","fill":"#041B24"}},"viz_BEDVmYSs":{"type":"viz.ellipse","options":{"stroke":"transparent","fill":"#047A7B","fillOpacity":0.7}},"viz_z5YtNLx8":{"type":"viz.singlevalue","options":{"backgroundColor":"transparent"},"dataSources":{"primary":"ds_fN8spe8s_ds_kYoaiRUv_ds_Ui7HgXoq"},"encoding":{"majorColor":{"field":"primary[0]","format":{"type":"rangevalue","ranges":[{"from":10,"value":"#D6867E"},{"to":10,"value":"#5fbcff"}]}}},"title":"","eventHandlers":[{"type":"drilldown.customUrl","options":{"url":"/app/dev_sec_ops_analytics/search?q=search index%3Dsignals","newTab":true}}]},"viz_OOessXcm":{"type":"viz.singlevalue","options":{"showTrendIndicator":false,"showSparkline":false,"backgroundColor":"transparent"},"dataSources":{"primary":"ds_rE6Du7O0_ds_JhEHlFy5_ds_sHUvoDKE_ds_Ui7HgXoq"},"encoding":{"majorColor":{"field":"primary[0]","format":{"type":"rangevalue","ranges":[{"from":100,"value":"#D6867E"},{"to":100,"value":"#5fbcff"}]}}},"title":""},"viz_uXuauFJh":{"type":"viz.text","options":{"content":"SIGNALS","textColor":"#ffffff","fontSize":18,"fontFamily":"Splunk Platform Sans"}},"viz_waa2Bhid":{"type":"viz.text","options":{"content":"ALERTS","textColor":"#ffffff","fontSize":18,"fontFamily":"Splunk Platform Sans"}},"viz_sGmWjVri":{"type":"viz.singlevalue","options":{"backgroundColor":"transparent"},"dataSources":{"primary":"ds_8Ysd2heB_ds_fN8spe8s_ds_kYoaiRUv_ds_Ui7HgXoq"},"encoding":{"majorColor":{"field":"primary[0]","format":{"type":"rangevalue","ranges":[{"from":30,"value":"#6AD6D7"},{"to":30,"value":"#5fbcff"}]}}},"title":"","eventHandlers":[{"type":"drilldown.customUrl","options":{"url":"/app/dev_sec_ops_analytics/search?q=search index%3Dalerts","newTab":true}}]},"viz_firstLineGroup":{"type":"viz.img","options":{"src":"/en-US/static/app/splunk-dashboard-app/images/examples-hub/healthcare_dashboard/firstLineGroup.png"}},"viz_secondLineGroup":{"type":"viz.img","options":{"preserveAspectRatio":true,"src":"/en-US/static/app/splunk-dashboard-app/images/examples-hub/healthcare_dashboard/secondLineGroup.png"}},"viz_thirdLineGroup":{"type":"viz.img","options":{"preserveAspectRatio":true,"src":"/en-US/static/app/splunk-dashboard-app/images/examples-hub/healthcare_dashboard/thirdLineGroup.png"}},"viz_fourthLineGroup":{"type":"viz.img","options":{"preserveAspectRatio":true,"src":"/en-US/static/app/splunk-dashboard-app/images/examples-hub/healthcare_dashboard/fourthLineGroup.png"}}},"dataSources":{"ds_sHUvoDKE_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"index=*\n| stats dc(user)"},"name":"Triage Time"},"ds_JhEHlFy5_ds_sHUvoDKE_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"index=test | rename repository.full_name as repository | search repository=* | stats dc(repository)"},"name":"Admission Time"},"ds_4pBgG928_ds_JhEHlFy5_ds_sHUvoDKE_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"| rest /servicesNS/-/-/saved/searches | search action.escu.product=*Dev* | dedup title | stats count"},"name":"Evaluation Time"},"ds_LIRVs8HJ":{"type":"ds.search","options":{"query":"index=signals | fillnull | rename source as signal | stats sum(risk_score) as total_risk_score by signal | sort - total_risk_score"},"name":"Diagnostic Imaging"},"ds_lyCjku4B":{"type":"ds.search","options":{"queryParameters":{"earliest":"-7d@d","latest":"now"},"query":"index=signals | fillnull | rename source as signal | stats values(signal) as signals sum(risk_score) as total_risk_score by user | sort - total_risk_score"},"name":"Clinical Exam"},"ds_kYoaiRUv_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"| makeresults \n| eval value=\"25\" \n| table value"},"name":"Average Wait Time"},"ds_0Rt99YYY":{"type":"ds.search","options":{"queryParameters":{"earliest":"-7d@d","latest":"now"},"query":"index=alerts \n| stats dc(user)"},"name":"Search_1"},"ds_Ixiq9nvV_ds_kYoaiRUv_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"| makeresults \n| eval value=\"598\" \n| append \n [| makeresults \n | eval value=\"687\"] \n| table value"},"name":"Average Discharge"},"ds_V0OUeNEF_ds_0Rt99YYY":{"type":"ds.search","options":{"queryParameters":{"earliest":"-7d@d","latest":"now"},"query":"index=alerts\n| stats dc(repository)"},"name":"Copy of Search_1"},"ds_hPbh0anu_ds_V0OUeNEF_ds_0Rt99YYY":{"type":"ds.search","options":{"queryParameters":{"earliest":"-7d@d","latest":"now"},"query":"index=alerts\n| stats count"},"name":"Copy of Copy of Search_1"},"ds_42O6TeFY_ds_kYoaiRUv_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"| makeresults \n| eval value=\"61\" \n| table value"},"name":"Copy of Average Wait Time"},"ds_8wGK1wf6_ds_42O6TeFY_ds_kYoaiRUv_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"| makeresults \n| eval value=\"16\" \n| table value"},"name":"Copy of Copy of Average Wait Time"},"ds_52kqP7no":{"type":"ds.search","options":{"queryParameters":{"earliest":"-7d@d","latest":"now"},"query":"| makeresults \n| eval value=\"72\" \n| table value"},"name":"Gauge"},"ds_fN8spe8s_ds_kYoaiRUv_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"index=signals \n| stats count"},"name":"Copy of Average Wait Time"},"ds_rE6Du7O0_ds_JhEHlFy5_ds_sHUvoDKE_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"index=*\n| stats count"},"name":"Copy of Admission Time"},"ds_8Ysd2heB_ds_fN8spe8s_ds_kYoaiRUv_ds_Ui7HgXoq":{"type":"ds.search","options":{"query":"index=alerts | stats count\n"},"name":"Copy of Copy of Average Wait Time"}},"inputs":{},"layout":{"type":"absolute","options":{"width":1920,"display":"auto-scale","backgroundColor":"#111215","backgroundImage":{"src":"/en-US/static/app/splunk-dashboard-app/images/examples-hub/healthcare_dashboard/Background.png","x":0,"y":0,"sizeType":"contain"},"height":1080},"structure":[{"item":"viz_fourthLineGroup","type":"block","position":{"x":1490,"y":330,"w":97,"h":410}},{"item":"viz_thirdLineGroup","type":"block","position":{"x":1180,"y":300,"w":200,"h":430}},{"item":"viz_firstLineGroup","type":"block","position":{"x":330,"y":260,"w":150,"h":530}},{"item":"viz_blueArrow","type":"block","position":{"x":30,"y":90,"w":1840,"h":110}},{"item":"viz_8SB0fuyG","type":"block","position":{"x":760,"y":560,"w":460,"h":290}},{"item":"viz_XpNIREXZ","type":"block","position":{"x":760,"y":250,"w":460,"h":290}},{"item":"viz_QDkvLmd1","type":"block","position":{"x":40,"y":120,"w":350,"h":50}},{"item":"viz_59bzlIVS","type":"block","position":{"x":30,"y":550,"w":300,"h":130}},{"item":"viz_3odTWGqw","type":"block","position":{"x":30,"y":720,"w":300,"h":130}},{"item":"viz_tSvyROLB","type":"block","position":{"x":30,"y":380,"w":300,"h":130}},{"item":"viz_3W8Qh4eP","type":"block","position":{"x":30,"y":210,"w":300,"h":130}},{"item":"viz_eaEFX0dW","type":"block","position":{"x":1590,"y":280,"w":300,"h":160}},{"item":"viz_aCIde10R","type":"block","position":{"x":1590,"y":470,"w":300,"h":160}},{"item":"viz_8ywD3E9F","type":"block","position":{"x":1590,"y":660,"w":300,"h":160}},{"item":"viz_DYmwPLeL","type":"block","position":{"x":50,"y":210,"w":260,"h":50}},{"item":"viz_5NSEGYjN","type":"block","position":{"x":50,"y":380,"w":230,"h":50}},{"item":"viz_76yFHLSN","type":"block","position":{"x":50,"y":550,"w":230,"h":50}},{"item":"viz_w0IKVoTV","type":"block","position":{"x":50,"y":720,"w":230,"h":50}},{"item":"viz_iYTg0Qkq","type":"block","position":{"x":30,"y":420,"w":200,"h":80}},{"item":"viz_7cwfKhEl","type":"block","position":{"x":30,"y":590,"w":200,"h":80}},{"item":"viz_wa6Tbrq0","type":"block","position":{"x":30,"y":760,"w":190,"h":80}},{"item":"viz_trxVvFuq","type":"block","position":{"x":770,"y":300,"w":450,"h":240}},{"item":"viz_cQnGPsZw","type":"block","position":{"x":770,"y":610,"w":450,"h":240}},{"item":"viz_Xvk0ciOV","type":"block","position":{"x":790,"y":260,"w":230,"h":50}},{"item":"viz_s24zF6KS","type":"block","position":{"x":790,"y":570,"w":230,"h":50}},{"item":"viz_jUaD7Fcp","type":"block","position":{"x":1610,"y":340,"w":140,"h":90}},{"item":"viz_Em0z8jwq","type":"block","position":{"x":1620,"y":290,"w":230,"h":50}},{"item":"viz_cXQRJrZ4","type":"block","position":{"x":1620,"y":480,"w":230,"h":50}},{"item":"viz_CbYhEEDI","type":"block","position":{"x":1620,"y":670,"w":230,"h":50}},{"item":"viz_kef6Rli3","type":"block","position":{"x":1610,"y":540,"w":140,"h":90}},{"item":"viz_suBNfXgq","type":"block","position":{"x":1610,"y":720,"w":140,"h":90}},{"item":"viz_vZWZGIF5","type":"block","position":{"x":470,"y":440,"w":160,"h":160}},{"item":"viz_cUg5YdJ0","type":"block","position":{"x":500,"y":470,"w":100,"h":100}},{"item":"viz_gQ9PRbrb","type":"block","position":{"x":1340,"y":440,"w":160,"h":160}},{"item":"viz_BEDVmYSs","type":"block","position":{"x":1370,"y":470,"w":100,"h":100}},{"item":"viz_z5YtNLx8","type":"block","position":{"x":490,"y":480,"w":120,"h":80}},{"item":"viz_OOessXcm","type":"block","position":{"x":30,"y":250,"w":220,"h":80}},{"item":"viz_uXuauFJh","type":"block","position":{"x":510,"y":390,"w":90,"h":50}},{"item":"viz_waa2Bhid","type":"block","position":{"x":1380,"y":390,"w":90,"h":50}},{"item":"viz_sGmWjVri","type":"block","position":{"x":1360,"y":480,"w":120,"h":80}},{"item":"viz_secondLineGroup","type":"block","position":{"x":600,"y":200,"w":190,"h":640}}]},"defaults":{"visualizations":{"global":{"showLastUpdated":false}}},"description":"","title":"Analytics"}]]></definition>
|
|
<assets><![CDATA[{}]]></assets>
|
|
</dashboard> |