From 68fe0778091cff953edadac63abc73b3882f6c41 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pascal=20Pfl=C3=BCger?= <pascal.pflueger@t-systems.com>
Date: Mon, 24 Jun 2024 10:39:46 +0200
Subject: [PATCH 1/4] add CODEOWNERS
---
.gitlab/CODEOWNERS | 1 +
1 file changed, 1 insertion(+)
create mode 100644 .gitlab/CODEOWNERS
diff --git a/.gitlab/CODEOWNERS b/.gitlab/CODEOWNERS
new file mode 100644
index 0000000..b51863c
--- /dev/null
+++ b/.gitlab/CODEOWNERS
@@ -0,0 +1 @@
+* @simpl/simpl-open/development/monitoring
\ No newline at end of file
--
GitLab
From be34c53ed50392fa3342e17cfb33504e166805ac Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pascal=20Pfl=C3=BCger?= <pascal.pflueger@t-systems.com>
Date: Mon, 24 Jun 2024 10:39:46 +0200
Subject: [PATCH 2/4] add CODEOWNERS
---
.gitlab/CODEOWNERS | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.gitlab/CODEOWNERS b/.gitlab/CODEOWNERS
index 8cc70c3..4b9b26a 100644
--- a/.gitlab/CODEOWNERS
+++ b/.gitlab/CODEOWNERS
@@ -1 +1 @@
-* @simpl/simpl-open/development/monitoring @n00bagqb
+* @simpl/simpl-open/development/monitoring @n00bagqb
\ No newline at end of file
--
GitLab
From 622bafa46e68deedfc125d12801784dbcd63a557 Mon Sep 17 00:00:00 2001
From: Natalia Szakiel <natalia.szakiel.external@eviden.com>
Date: Fri, 8 Nov 2024 09:54:33 +0100
Subject: [PATCH 3/4] Feature/update codeowners
---
.gitignore | 3 +-
.gitlab/CODEOWNERS | 2 +-
charts/kibana/dashboards/dashboards.ndjson | 65 ++--
charts/kibana/dashboards/load_dashboards.sh | 19 +
charts/kibana/scripts/load_objects.sh | 51 +++
.../templates/business-template-log.json | 45 +++
.../templates/technical-template-log.json | 93 +++++
charts/templates/_helpers.tpl | 14 +-
charts/templates/elasticsearch.yaml | 31 +-
charts/templates/filebeat-agents.yaml | 46 ++-
charts/templates/filebeat.yaml | 23 +-
charts/templates/heartbeat.yaml | 61 +++-
charts/templates/kibana.yaml | 75 ++--
charts/templates/logstash_beats.yaml | 125 ++++++-
charts/templates/logstash_syslog.yaml | 4 +-
charts/templates/metricbeat.yaml | 57 ++-
charts/values/dev/observability/values.yaml | 336 +++++++++---------
charts/values_other.yml | 19 +
pipeline.variables.sh | 2 +-
19 files changed, 766 insertions(+), 305 deletions(-)
create mode 100644 charts/kibana/dashboards/load_dashboards.sh
create mode 100644 charts/kibana/scripts/load_objects.sh
create mode 100644 charts/kibana/templates/business-template-log.json
create mode 100644 charts/kibana/templates/technical-template-log.json
create mode 100644 charts/values_other.yml
diff --git a/.gitignore b/.gitignore
index 556d407..bfb135e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
*.lock
-*.tgz
\ No newline at end of file
+*.tgz
+*.pem
\ No newline at end of file
diff --git a/.gitlab/CODEOWNERS b/.gitlab/CODEOWNERS
index b51863c..8cc70c3 100644
--- a/.gitlab/CODEOWNERS
+++ b/.gitlab/CODEOWNERS
@@ -1 +1 @@
-* @simpl/simpl-open/development/monitoring
\ No newline at end of file
+* @simpl/simpl-open/development/monitoring @n00bagqb
diff --git a/charts/kibana/dashboards/dashboards.ndjson b/charts/kibana/dashboards/dashboards.ndjson
index 3dcab4d..5ed92b5 100644
--- a/charts/kibana/dashboards/dashboards.ndjson
+++ b/charts/kibana/dashboards/dashboards.ndjson
@@ -1,27 +1,38 @@
-{"attributes":{"allowHidden":false,"fieldAttrs":"{}","fieldFormatMap":"{}","fields":"[]","name":"logs-business","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"logs-business*"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"ee15d384-2d79-43e8-90a4-8012b5c7a46a","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDUyLDRd"}
-{"attributes":{"color":"#6ab8de","description":"","name":"simpl"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","managed":false,"references":[],"type":"tag","typeMigrationVersion":"8.0.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzQ1MjgxLDNd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"data_stream.dataset :\\\"business\\\" \",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":15,\"i\":\"efabc595-f741-4f10-8a0d-c9bae2f8a727\"},\"panelIndex\":\"efabc595-f741-4f10-8a0d-c9bae2f8a727\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bussines operations\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"ee15d384-2d79-43e8-90a4-8012b5c7a46a\",\"name\":\"indexpattern-datasource-layer-d2e8034a-221f-4501-9eea-e7044d193e95\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"d2e8034a-221f-4501-9eea-e7044d193e95\",\"seriesType\":\"area\",\"xAccessor\":\"0c191345-cd8f-45b0-b4e4-43bf0b192ed7\",\"splitAccessor\":\"0950d010-3853-4ad5-a891-90e776abaa4f\",\"accessors\":[\"d16aa28a-5955-470c-aebd-62c13699886a\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"d2e8034a-221f-4501-9eea-e7044d193e95\":{\"columns\":{\"0950d010-3853-4ad5-a891-90e776abaa4f\":{\"label\":\"Top 5 values of business_operation\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"business_operation\",\"isBucketed\":true,\"params\":{\"size\":5,\"orderBy\":{\"type\":\"column\",\"columnId\":\"d16aa28a-5955-470c-aebd-62c13699886a\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"0c191345-cd8f-45b0-b4e4-43bf0b192ed7\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"d16aa28a-5955-470c-aebd-62c13699886a\":{\"label\":\"Number of bussines operations\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"customLabel\":true}},\"columnOrder\":[\"0950d010-3853-4ad5-a891-90e776abaa4f\",\"0c191345-cd8f-45b0-b4e4-43bf0b192ed7\",\"d16aa28a-5955-470c-aebd-62c13699886a\"],\"incompleteColumns\":{},\"sampling\":1}}},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":15,\"i\":\"c91fdc20-bfd6-414d-9a3f-051036e56deb\"},\"panelIndex\":\"c91fdc20-bfd6-414d-9a3f-051036e56deb\",\"embeddableConfig\":{\"attributes\":{\"title\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"ee15d384-2d79-43e8-90a4-8012b5c7a46a\",\"name\":\"indexpattern-datasource-layer-8e67f1e6-3b4e-4b14-ad58-2c9e1926eb5b\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"8e67f1e6-3b4e-4b14-ad58-2c9e1926eb5b\",\"accessors\":[\"a933f35f-f6bd-4b02-a6c4-e4b4af1ee8a2\"],\"position\":\"top\",\"seriesType\":\"area\",\"showGridlines\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"xAccessor\":\"985e4ec1-039a-48ec-9101-afc78e39f6bd\",\"splitAccessor\":\"b9241e01-7199-4b64-8059-c33ab4e66e82\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"8e67f1e6-3b4e-4b14-ad58-2c9e1926eb5b\":{\"columns\":{\"b9241e01-7199-4b64-8059-c33ab4e66e82\":{\"label\":\"Top 5 values of destination\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"destination\",\"isBucketed\":true,\"params\":{\"size\":5,\"orderBy\":{\"type\":\"column\",\"columnId\":\"a933f35f-f6bd-4b02-a6c4-e4b4af1ee8a2\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"985e4ec1-039a-48ec-9101-afc78e39f6bd\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"a933f35f-f6bd-4b02-a6c4-e4b4af1ee8a2\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true}}},\"columnOrder\":[\"b9241e01-7199-4b64-8059-c33ab4e66e82\",\"985e4ec1-039a-48ec-9101-afc78e39f6bd\",\"a933f35f-f6bd-4b02-a6c4-e4b4af1ee8a2\"],\"incompleteColumns\":{},\"sampling\":1}}},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}},\"title\":\"Destinations\"},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":15,\"w\":24,\"h\":15,\"i\":\"7a3008e1-410c-4261-bcd7-f0727aa2a7de\"},\"panelIndex\":\"7a3008e1-410c-4261-bcd7-f0727aa2a7de\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Message Types\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"ee15d384-2d79-43e8-90a4-8012b5c7a46a\",\"name\":\"indexpattern-datasource-layer-2afba61b-ea12-4154-b161-383da9aa0e8a\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"2afba61b-ea12-4154-b161-383da9aa0e8a\",\"seriesType\":\"area\",\"xAccessor\":\"48b4bc65-b6bd-4a0a-a3cf-ba8b156d5c19\",\"splitAccessor\":\"e61c39f6-63c0-4ef9-9072-2bdf93ca9f03\",\"accessors\":[\"1bc2e81d-53c7-4832-800a-40b6b4a91dd5\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"2afba61b-ea12-4154-b161-383da9aa0e8a\":{\"columns\":{\"e61c39f6-63c0-4ef9-9072-2bdf93ca9f03\":{\"label\":\"Top 5 values of message_type\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"message_type\",\"isBucketed\":true,\"params\":{\"size\":5,\"orderBy\":{\"type\":\"column\",\"columnId\":\"1bc2e81d-53c7-4832-800a-40b6b4a91dd5\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"48b4bc65-b6bd-4a0a-a3cf-ba8b156d5c19\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"1bc2e81d-53c7-4832-800a-40b6b4a91dd5\":{\"label\":\"Message types\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"customLabel\":true}},\"columnOrder\":[\"e61c39f6-63c0-4ef9-9072-2bdf93ca9f03\",\"48b4bc65-b6bd-4a0a-a3cf-ba8b156d5c19\",\"1bc2e81d-53c7-4832-800a-40b6b4a91dd5\"],\"incompleteColumns\":{},\"sampling\":1}}},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":15,\"w\":24,\"h\":15,\"i\":\"e38c161b-25c2-4328-ac18-e8c87f8574c7\"},\"panelIndex\":\"e38c161b-25c2-4328-ac18-e8c87f8574c7\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bussins Logs - Origin\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"ee15d384-2d79-43e8-90a4-8012b5c7a46a\",\"name\":\"indexpattern-datasource-layer-3a24fced-bd13-466b-be5a-327aac485dbc\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"3a24fced-bd13-466b-be5a-327aac485dbc\",\"seriesType\":\"area\",\"xAccessor\":\"2dd1b40d-4bd4-4a0c-8559-963d7cd89217\",\"splitAccessor\":\"94631a95-6571-4a21-a241-76c6f4ce3794\",\"accessors\":[\"5e06f6e8-aca2-4495-b8a3-1bbe0b3de6aa\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"3a24fced-bd13-466b-be5a-327aac485dbc\":{\"columns\":{\"94631a95-6571-4a21-a241-76c6f4ce3794\":{\"label\":\"Top 5 values of origin\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"origin\",\"isBucketed\":true,\"params\":{\"size\":5,\"orderBy\":{\"type\":\"column\",\"columnId\":\"5e06f6e8-aca2-4495-b8a3-1bbe0b3de6aa\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"2dd1b40d-4bd4-4a0c-8559-963d7cd89217\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"5e06f6e8-aca2-4495-b8a3-1bbe0b3de6aa\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true}}},\"columnOrder\":[\"94631a95-6571-4a21-a241-76c6f4ce3794\",\"2dd1b40d-4bd4-4a0c-8559-963d7cd89217\",\"5e06f6e8-aca2-4495-b8a3-1bbe0b3de6aa\"],\"incompleteColumns\":{},\"sampling\":1}}},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"LOG_STREAM_EMBEDDABLE\",\"gridData\":{\"x\":0,\"y\":30,\"w\":48,\"h\":20,\"i\":\"d3241d43-44d6-419c-8735-c374107e62b6\"},\"panelIndex\":\"d3241d43-44d6-419c-8735-c374107e62b6\",\"embeddableConfig\":{\"enhancements\":{}},\"title\":\"Log stream\"}]","timeRestore":false,"title":"Dashboard for bussines logs","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"0fdaed67-f4a4-4085-9dc3-34208f9d06a3","managed":false,"references":[{"id":"ee15d384-2d79-43e8-90a4-8012b5c7a46a","name":"efabc595-f741-4f10-8a0d-c9bae2f8a727:indexpattern-datasource-layer-d2e8034a-221f-4501-9eea-e7044d193e95","type":"index-pattern"},{"id":"ee15d384-2d79-43e8-90a4-8012b5c7a46a","name":"c91fdc20-bfd6-414d-9a3f-051036e56deb:indexpattern-datasource-layer-8e67f1e6-3b4e-4b14-ad58-2c9e1926eb5b","type":"index-pattern"},{"id":"ee15d384-2d79-43e8-90a4-8012b5c7a46a","name":"7a3008e1-410c-4261-bcd7-f0727aa2a7de:indexpattern-datasource-layer-2afba61b-ea12-4154-b161-383da9aa0e8a","type":"index-pattern"},{"id":"ee15d384-2d79-43e8-90a4-8012b5c7a46a","name":"e38c161b-25c2-4328-ac18-e8c87f8574c7:indexpattern-datasource-layer-3a24fced-bd13-466b-be5a-327aac485dbc","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-09-23T11:36:51.313Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NTM1LDRd"}
-{"attributes":{"allowHidden":false,"fieldAttrs":"{}","fieldFormatMap":"{}","fields":"[]","name":"logs-technical","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"logs-technical*"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"d640bae0-e62f-479f-83a9-3b9bd5f68cfd","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDUwLDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"data_stream.dataset :\\\"technical\\\" \",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":15,\"i\":\"22620b12-3a6c-4ebe-acf7-05eaef4423ea\"},\"panelIndex\":\"22620b12-3a6c-4ebe-acf7-05eaef4423ea\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Technical logs - events\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"d640bae0-e62f-479f-83a9-3b9bd5f68cfd\",\"name\":\"indexpattern-datasource-layer-3ea1ad4f-420a-4948-af37-af0540cc02d6\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"3ea1ad4f-420a-4948-af37-af0540cc02d6\",\"seriesType\":\"area\",\"xAccessor\":\"9f07133a-79a7-4040-870b-f79ca192d5e0\",\"splitAccessor\":\"3697ffee-e63c-4b7e-b028-4838f4d80107\",\"accessors\":[\"ceec1970-2860-467b-b8a6-db9162de75ce\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"3ea1ad4f-420a-4948-af37-af0540cc02d6\":{\"columns\":{\"3697ffee-e63c-4b7e-b028-4838f4d80107\":{\"label\":\"Top 5 values of loglevel\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"loglevel\",\"isBucketed\":true,\"params\":{\"size\":5,\"orderBy\":{\"type\":\"column\",\"columnId\":\"ceec1970-2860-467b-b8a6-db9162de75ce\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"9f07133a-79a7-4040-870b-f79ca192d5e0\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"ceec1970-2860-467b-b8a6-db9162de75ce\":{\"label\":\"Number of events\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"customLabel\":true}},\"columnOrder\":[\"3697ffee-e63c-4b7e-b028-4838f4d80107\",\"9f07133a-79a7-4040-870b-f79ca192d5e0\",\"ceec1970-2860-467b-b8a6-db9162de75ce\"],\"incompleteColumns\":{},\"sampling\":1}}},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":15,\"i\":\"2712fd05-92f2-4877-942a-070e6ceee0d1\"},\"panelIndex\":\"2712fd05-92f2-4877-942a-070e6ceee0d1\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Technical logs - log types\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"d640bae0-e62f-479f-83a9-3b9bd5f68cfd\",\"name\":\"indexpattern-datasource-layer-a75f7889-21e4-46ab-aa8c-df68e87d4228\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\",\"legendSize\":\"xlarge\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"a75f7889-21e4-46ab-aa8c-df68e87d4228\",\"seriesType\":\"area\",\"xAccessor\":\"78a47e3b-3a54-436b-9b96-e20ec6252c1f\",\"splitAccessor\":\"345fdfbf-8703-4724-8406-00070f0b0e2d\",\"accessors\":[\"65996567-4c46-46e1-900d-037d9513be29\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"a75f7889-21e4-46ab-aa8c-df68e87d4228\":{\"columns\":{\"345fdfbf-8703-4724-8406-00070f0b0e2d\":{\"label\":\"Top 5 values of fields.logtype\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"fields.logtype\",\"isBucketed\":true,\"params\":{\"size\":5,\"orderBy\":{\"type\":\"column\",\"columnId\":\"65996567-4c46-46e1-900d-037d9513be29\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"78a47e3b-3a54-436b-9b96-e20ec6252c1f\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"65996567-4c46-46e1-900d-037d9513be29\":{\"label\":\"Number of log types\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"customLabel\":true}},\"columnOrder\":[\"345fdfbf-8703-4724-8406-00070f0b0e2d\",\"78a47e3b-3a54-436b-9b96-e20ec6252c1f\",\"65996567-4c46-46e1-900d-037d9513be29\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"d640bae0-e62f-479f-83a9-3b9bd5f68cfd\"}},\"currentIndexPatternId\":\"d640bae0-e62f-479f-83a9-3b9bd5f68cfd\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"LOG_STREAM_EMBEDDABLE\",\"gridData\":{\"x\":0,\"y\":15,\"w\":48,\"h\":15,\"i\":\"64bc4773-b4bc-477e-abcd-72315059a93f\"},\"panelIndex\":\"64bc4773-b4bc-477e-abcd-72315059a93f\",\"embeddableConfig\":{\"enhancements\":{}},\"title\":\"Log stream\"}]","timeRestore":false,"title":"Dashboard for technical logs","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"98228bb0-e887-42ca-938a-124796820bd1","managed":false,"references":[{"id":"d640bae0-e62f-479f-83a9-3b9bd5f68cfd","name":"22620b12-3a6c-4ebe-acf7-05eaef4423ea:indexpattern-datasource-layer-3ea1ad4f-420a-4948-af37-af0540cc02d6","type":"index-pattern"},{"id":"d640bae0-e62f-479f-83a9-3b9bd5f68cfd","name":"2712fd05-92f2-4877-942a-070e6ceee0d1:indexpattern-datasource-layer-a75f7889-21e4-46ab-aa8c-df68e87d4228","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-09-23T11:36:25.899Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NTMxLDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"CPU Usage Gauge [Metricbeat System] ECS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CPU Usage Gauge [Metricbeat System] ECS\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"filter\":\"\",\"gauge_color_rules\":[{\"gauge\":\"rgba(104,188,0,1)\",\"id\":\"4ef2c3b0-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0},{\"gauge\":\"rgba(254,146,0,1)\",\"id\":\"e6561ae0-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0.7},{\"gauge\":\"rgba(211,49,21,1)\",\"id\":\"ec655040-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0.85},{\"gauge\":\"rgba(104,188,0,1)\",\"id\":\"c0fd001c-ec63-436b-90f8-8cc93f28c76c\",\"operator\":\"empty\",\"value\":null}],\"gauge_inner_width\":\"10\",\"gauge_max\":\"1\",\"gauge_style\":\"half\",\"gauge_width\":10,\"hide_last_value_indicator\":true,\"id\":\"4c9e2550-1b91-11e7-bec4-a5e9ec5cab8b\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"4c9e2551-1b91-11e7-bec4-a5e9ec5cab8b\",\"label\":\"CPU Usage\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.user.pct\",\"id\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\"},{\"field\":\"system.cpu.system.pct\",\"id\":\"225c2140-5fd7-11e7-a63a-a937b7c1a7e1\",\"type\":\"avg\"},{\"field\":\"system.cpu.cores\",\"id\":\"837a30c0-5fd7-11e7-a63a-a937b7c1a7e1\",\"type\":\"avg\"},{\"id\":\"587aa510-1b91-11e7-bec4-a5e9ec5cab8b\",\"script\":\"params.n > 0 ? (params.user+params.system)/params.n : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\",\"id\":\"5a19af10-1b91-11e7-bec4-a5e9ec5cab8b\",\"name\":\"user\"},{\"field\":\"225c2140-5fd7-11e7-a63a-a937b7c1a7e1\",\"id\":\"32b54f80-5fd7-11e7-a63a-a937b7c1a7e1\",\"name\":\"system\"},{\"field\":\"837a30c0-5fd7-11e7-a63a-a937b7c1a7e1\",\"id\":\"8ba6eef0-5fd7-11e7-a63a-a937b7c1a7e1\",\"name\":\"n\"}]}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\",\"time_range_mode\":\"entire_time_range\",\"terms_order_by\":\"_key\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"last_value\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"gauge\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"83e12df0-1b91-11e7-bec4-a5e9ec5cab8b-ecs","managed":false,"references":[],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDI5LDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory Usage Gauge [Metricbeat System] ECS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory Usage Gauge [Metricbeat System] ECS\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"filter\":\"\",\"gauge_color_rules\":[{\"gauge\":\"rgba(104,188,0,1)\",\"id\":\"a0d522e0-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0},{\"gauge\":\"rgba(254,146,0,1)\",\"id\":\"b45ad8f0-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0.7},{\"gauge\":\"rgba(211,49,21,1)\",\"id\":\"c06e9550-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0.85},{\"gauge\":\"rgba(104,188,0,1)\",\"id\":\"4a3b1da6-e38b-4d74-82b7-cdfde708d5f5\",\"operator\":\"empty\",\"value\":null}],\"gauge_inner_width\":10,\"gauge_max\":\"1\",\"gauge_style\":\"half\",\"gauge_width\":10,\"hide_last_value_indicator\":true,\"id\":\"9f51b730-1b91-11e7-bec4-a5e9ec5cab8b\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"9f51b731-1b91-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Memory Usage\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.pct\",\"id\":\"9f51b732-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"time_range_mode\":\"entire_time_range\",\"terms_order_by\":\"_key\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"last_value\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"gauge\",\"use_kibana_indexes\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"d3166e80-1b91-11e7-bec4-a5e9ec5cab8b-ecs","managed":false,"references":[],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDMwLDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network Traffic (Bytes) [Metricbeat System] ECS AB in","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network Traffic (Bytes) [Metricbeat System] ECS AB in\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"filter\":{\"language\":\"lucene\",\"query\":\"-system.network.name:l*\"},\"id\":\"da1046f0-faa0-11e6-86b1-cd7735ff7e23\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"0.2\",\"formatter\":\"bytes\",\"id\":\"da1046f1-faa0-11e6-86b1-cd7735ff7e23\",\"label\":\"Inbound \",\"line_width\":\"0\",\"metrics\":[{\"field\":\"system.network.in.bytes\",\"id\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\"},{\"field\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"field\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"a87398e0-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"unit\":\"\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"time_range_mode\":\"entire_time_range\",\"value_template\":\"{{value}}/s\"},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(250,40,255,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"id\":\"fbbd5720-faa0-11e6-86b1-cd7735ff7e23\",\"label\":\"Outbound \",\"line_width\":\"0\",\"metrics\":[{\"field\":\"system.network.out.bytes\",\"id\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\"},{\"field\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"id\":\"17e597a0-faa1-11e6-86b1-cd7735ff7e23\",\"script\":\"params.rate != null && params.rate > 0 ? params.rate * -1 : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"1940bad0-faa1-11e6-86b1-cd7735ff7e23\",\"name\":\"rate\"}]},{\"function\":\"sum\",\"id\":\"533da9b0-2c2d-11e7-be71-3162da85303f\",\"type\":\"series_agg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"system.network.name\",\"time_range_mode\":\"entire_time_range\",\"value_template\":\"{{value}}/s\",\"hidden\":true}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"41f6e91c-eb91-48c2-9d8f-dc1d037dc8a1","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDMxLDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network Traffic (Bytes) [Metricbeat System] ECS AB out","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network Traffic (Bytes) [Metricbeat System] ECS AB out\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"filter\":{\"language\":\"lucene\",\"query\":\"-system.network.name:l*\"},\"id\":\"da1046f0-faa0-11e6-86b1-cd7735ff7e23\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"0.2\",\"formatter\":\"bytes\",\"id\":\"da1046f1-faa0-11e6-86b1-cd7735ff7e23\",\"label\":\"Inbound \",\"line_width\":\"0\",\"metrics\":[{\"field\":\"system.network.in.bytes\",\"id\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\"},{\"field\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"field\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"a87398e0-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"unit\":\"\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"time_range_mode\":\"entire_time_range\",\"value_template\":\"{{value}}/s\",\"hidden\":true},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(250,40,255,1)\",\"fill\":\"1.2\",\"formatter\":\"bytes\",\"hidden\":false,\"id\":\"fbbd5720-faa0-11e6-86b1-cd7735ff7e23\",\"label\":\"Outbound \",\"line_width\":\"0\",\"metrics\":[{\"field\":\"system.network.out.bytes\",\"id\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\"},{\"field\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"id\":\"17e597a0-faa1-11e6-86b1-cd7735ff7e23\",\"script\":\"params.rate != null && params.rate > 0 ? params.rate * -1 : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"1940bad0-faa1-11e6-86b1-cd7735ff7e23\",\"name\":\"rate\"}]}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"time_range_mode\":\"entire_time_range\",\"value_template\":\"{{value}}/s\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"08624284-6bbb-4ad8-aad4-8989b5309335","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDMyLDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{}"},"title":"Top Processes By CPU [Metricbeat System] ECS","uiStateJSON":"{}","version":1,"visState":"{\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"bar_color_rules\":[{\"bar_color\":\"rgba(104,188,0,1)\",\"id\":\"60e11be0-1b18-11e7-b09e-037021c4f8df\",\"operator\":\"gte\",\"value\":0},{\"bar_color\":\"rgba(104,188,0,1)\",\"id\":\"147a3da2-60a6-4c32-b2c8-18a40db90c6c\",\"operator\":\"empty\",\"value\":null}],\"drilldown_url\":\"\",\"filter\":\"\",\"hide_last_value_indicator\":true,\"id\":\"5f5b8d50-1b18-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"5f5b8d51-1b18-11e7-b09e-037021c4f8df\",\"line_width\":1,\"metrics\":[{\"field\":\"system.process.cpu.total.pct\",\"id\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"process.name\",\"terms_order_by\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"top_n\",\"use_kibana_indexes\":false,\"drop_last_bucket\":1},\"title\":\"Top Processes By CPU [Metricbeat System] ECS\",\"type\":\"metrics\"}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"e0f001c0-1b18-11e7-b09e-037021c4f8df-ecs","managed":false,"references":[],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDMzLDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"System Load [Metricbeat System] ECS load.norm.5 AB","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"System Load [Metricbeat System] ECS load.norm.5 AB\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"f6264ad0-1b14-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(115,216,255,1)\",\"fill\":\"0\",\"formatter\":\"number\",\"id\":\"f62671e0-1b14-11e7-b09e-037021c4f8df\",\"label\":\"1m\",\"line_width\":\"3\",\"metrics\":[{\"field\":\"system.load.norm.5\",\"id\":\"f62671e1-1b14-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\",\"time_range_mode\":\"entire_time_range\",\"terms_order_by\":\"_key\",\"hidden\":false},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"0\",\"formatter\":\"number\",\"id\":\"1c324850-1b15-11e7-b09e-037021c4f8df\",\"label\":\"5m\",\"line_width\":\"3\",\"metrics\":[{\"field\":\"system.load.5\",\"id\":\"1c324851-1b15-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"none\",\"time_range_mode\":\"entire_time_range\",\"hidden\":true},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,98,177,1)\",\"fill\":\"0\",\"formatter\":\"number\",\"id\":\"3287e740-1b15-11e7-b09e-037021c4f8df\",\"label\":\"15m\",\"line_width\":\"3\",\"metrics\":[{\"field\":\"system.load.15\",\"id\":\"32880e50-1b15-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"none\",\"time_range_mode\":\"entire_time_range\",\"hidden\":true}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"1f90151d-da59-411c-a2e6-27f6768c8936","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDM0LDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory Usage [Metricbeat System] ECS Used AB ","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory Usage [Metricbeat System] ECS Used AB \",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"32f46f40-1b16-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(211,49,21,1)\",\"fill\":\"0.1\",\"formatter\":\"bytes\",\"id\":\"4ff61fd0-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Used\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"4ff61fd1-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\",\"time_range_mode\":\"entire_time_range\"},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"id\":\"753a6080-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Cache\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"field\":\"system.memory.used.bytes\",\"id\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"id\":\"869cc160-1b16-11e7-b09e-037021c4f8df\",\"script\":\"params.actual != null && params.used != null ? params.used - params.actual : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"id\":\"890f9620-1b16-11e7-b09e-037021c4f8df\",\"name\":\"actual\"},{\"field\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"id\":\"8f3ab7f0-1b16-11e7-b09e-037021c4f8df\",\"name\":\"used\"}]}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\",\"time_range_mode\":\"entire_time_range\",\"hidden\":true},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":\"1\",\"formatter\":\"bytes\",\"id\":\"32f46f41-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Free\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.free\",\"id\":\"32f46f42-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\",\"time_range_mode\":\"entire_time_range\",\"hidden\":true}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"35df6afd-02bd-41dd-912c-ba133b1b18e1","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDM1LDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory Usage [Metricbeat System] ECS Cached AB","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory Usage [Metricbeat System] ECS Cached AB\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"32f46f40-1b16-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(211,49,21,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"hidden\":true,\"id\":\"4ff61fd0-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Used\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"4ff61fd1-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"0.1\",\"formatter\":\"bytes\",\"id\":\"753a6080-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Cache\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"field\":\"system.memory.used.bytes\",\"id\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"id\":\"869cc160-1b16-11e7-b09e-037021c4f8df\",\"script\":\"params.actual != null && params.used != null ? params.used - params.actual : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"id\":\"890f9620-1b16-11e7-b09e-037021c4f8df\",\"name\":\"actual\"},{\"field\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"id\":\"8f3ab7f0-1b16-11e7-b09e-037021c4f8df\",\"name\":\"used\"}]}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\",\"terms_order_by\":\"_key\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":\"1\",\"formatter\":\"bytes\",\"id\":\"32f46f41-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Free\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.free\",\"id\":\"32f46f42-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\",\"hidden\":true}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"0055f937-3ec3-4e88-ad90-5590bbd5f354","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDM2LDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory Usage [Metricbeat System] ECS Free AB","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory Usage [Metricbeat System] ECS Free AB\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"32f46f40-1b16-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(211,49,21,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"hidden\":true,\"id\":\"4ff61fd0-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Used\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"4ff61fd1-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\",\"time_range_mode\":\"entire_time_range\"},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"hidden\":true,\"id\":\"753a6080-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Cache\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"field\":\"system.memory.used.bytes\",\"id\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"id\":\"869cc160-1b16-11e7-b09e-037021c4f8df\",\"script\":\"params.actual != null && params.used != null ? params.used - params.actual : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"id\":\"890f9620-1b16-11e7-b09e-037021c4f8df\",\"name\":\"actual\"},{\"field\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"id\":\"8f3ab7f0-1b16-11e7-b09e-037021c4f8df\",\"name\":\"used\"}]}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\",\"time_range_mode\":\"entire_time_range\"},{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":\"0.1\",\"formatter\":\"bytes\",\"id\":\"32f46f41-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Free\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.free\",\"id\":\"32f46f42-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"time_range_mode\":\"entire_time_range\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"ee1920dd-ebb1-41fb-b821-db2035fd308b","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDM3LDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Top Processes By CPU [Metricbeat System] ECS AB","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Top Processes By CPU [Metricbeat System] ECS AB\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"last_value\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"bar_color_rules\":[{\"bar_color\":\"rgba(104,188,0,1)\",\"id\":\"60e11be0-1b18-11e7-b09e-037021c4f8df\",\"operator\":\"gte\",\"value\":0},{\"bar_color\":\"rgba(104,188,0,1)\",\"id\":\"147a3da2-60a6-4c32-b2c8-18a40db90c6c\",\"operator\":\"empty\",\"value\":null}],\"drilldown_url\":\"\",\"filter\":\"\",\"hide_last_value_indicator\":true,\"id\":\"5f5b8d50-1b18-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"5f5b8d51-1b18-11e7-b09e-037021c4f8df\",\"line_width\":1,\"metrics\":[{\"field\":\"system.process.cpu.total.pct\",\"id\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"process.name\",\"terms_order_by\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"drop_last_bucket\":1,\"axis_scale\":\"normal\",\"truncate_legend\":1,\"max_lines_legend\":1,\"tooltip_mode\":\"show_all\",\"background_color_rules\":[{\"id\":\"ebd2fa74-7d3b-44e4-aa77-43e6c3770ba5\"}]}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"94d81971-c4ac-40b2-a92a-c9f2b4ed7b59","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDM4LDRd"}
-{"attributes":{"allowHidden":false,"fieldAttrs":"{}","fieldFormatMap":"{\"activemq.broker.memory.broker.pct\":{\"id\":\"percent\"},\"activemq.broker.memory.store.pct\":{\"id\":\"percent\"},\"activemq.broker.memory.temp.pct\":{\"id\":\"percent\"},\"activemq.queue.memory.broker.pct\":{\"id\":\"percent\"},\"activemq.topic.memory.broker.pct\":{\"id\":\"percent\"},\"aerospike.namespace.device.available.pct\":{\"id\":\"percent\"},\"aerospike.namespace.device.free.pct\":{\"id\":\"percent\"},\"aerospike.namespace.device.total.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.device.used.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.memory.free.pct\":{\"id\":\"percent\"},\"aerospike.namespace.memory.used.data.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.memory.used.index.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.memory.used.sindex.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.memory.used.total.bytes\":{\"id\":\"bytes\"},\"aws.ec2.diskio.read.bytes\":{\"id\":\"bytes\"},\"aws.ec2.diskio.write.bytes\":{\"id\":\"bytes\"},\"aws.ec2.network.in.bytes\":{\"id\":\"bytes\"},\"aws.ec2.network.out.bytes\":{\"id\":\"bytes\"},\"aws.rds.burst_balance.pct\":{\"id\":\"percent\"},\"aws.rds.cpu.total.pct\":{\"id\":\"percent\"},\"aws.rds.disk_usage.bin_log.bytes\":{\"id\":\"bytes\"},\"aws.rds.free_local_storage.bytes\":{\"id\":\"bytes\"},\"aws.rds.free_storage.bytes\":{\"id\":\"bytes\"},\"aws.rds.freeable_memory.bytes\":{\"id\":\"bytes\"},\"aws.rds.latency.commit\":{\"id\":\"duration\"},\"aws.rds.latency.ddl\":{\"id\":\"duration\"},\"aws.rds.latency.delete\":{\"id\":\"duration\"},\"aws.rds.latency.dml\":{\"id\":\"duration\"},\"aws.rds.latency.insert\":{\"id\":\"duration\"},\"aws.rds.latency.read\":{\"id\":\"duration\"},\"aws.rds.latency.select\":{\"id\":\"duration\"},\"aws.rds.latency.update\":{\"id\":\"duration\"},\"aws.rds.latency.write\":{\"id\":\"duration\"},\"aws.rds.replica_lag.sec\":{\"id\":\"duration\"},\"aws.rds.swap_usage.bytes\":{\"id\":\"bytes\"},\"aws.rds.volume.read.iops\":{\"id\":\"bytes\"},\"aws.rds.volume.write.iops\":{\"id\":\"bytes\"},\"aws.rds.volume_used.bytes\":{\"id\":\"bytes\"},\"aws.s3_daily_storage.bucket.size.bytes\":{\"id\":\"bytes\"},\"aws.s3_request.downloaded.bytes\":{\"id\":\"bytes\"},\"aws.s3_request.latency.first_byte.ms\":{\"id\":\"duration\"},\"aws.s3_request.latency.total_request.ms\":{\"id\":\"duration\"},\"aws.s3_request.requests.select_returned.bytes\":{\"id\":\"bytes\"},\"aws.s3_request.requests.select_scanned.bytes\":{\"id\":\"bytes\"},\"aws.s3_request.uploaded.bytes\":{\"id\":\"bytes\"},\"aws.sqs.oldest_message_age.sec\":{\"id\":\"duration\"},\"aws.sqs.sent_message_size.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.cpu.kernel.norm.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.kernel.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.system.norm.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.system.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.total.norm.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.total.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.user.norm.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.user.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.diskio.read.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.diskio.summary.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.diskio.write.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.commit.peak\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.commit.total\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.limit\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.private_working_set.total\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.rss.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.memory.rss.total\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.usage.max\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.usage.total\":{\"id\":\"bytes\"},\"awsfargate.task_stats.network.*.inbound.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.network.*.outbound.bytes\":{\"id\":\"bytes\"},\"ceph.cluster_disk.available.bytes\":{\"id\":\"bytes\"},\"ceph.cluster_disk.total.bytes\":{\"id\":\"bytes\"},\"ceph.cluster_disk.used.bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.degraded.ratio\":{\"id\":\"percent\"},\"ceph.cluster_status.misplace.ratio\":{\"id\":\"percent\"},\"ceph.cluster_status.pg.avail_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.pg.data_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.pg.total_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.pg.used_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.traffic.read_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.traffic.write_bytes\":{\"id\":\"bytes\"},\"ceph.monitor_health.store_stats.log.bytes\":{\"id\":\"bytes\"},\"ceph.monitor_health.store_stats.misc.bytes\":{\"id\":\"bytes\"},\"ceph.monitor_health.store_stats.sst.bytes\":{\"id\":\"bytes\"},\"ceph.monitor_health.store_stats.total.bytes\":{\"id\":\"bytes\"},\"ceph.osd_df.available.bytes\":{\"id\":\"bytes\"},\"ceph.osd_df.total.byte\":{\"id\":\"bytes\"},\"ceph.osd_df.used.byte\":{\"id\":\"bytes\"},\"ceph.osd_df.used.pct\":{\"id\":\"percent\"},\"ceph.pool_disk.stats.available.bytes\":{\"id\":\"bytes\"},\"ceph.pool_disk.stats.used.bytes\":{\"id\":\"bytes\"},\"client.bytes\":{\"id\":\"bytes\"},\"client.nat.port\":{\"id\":\"string\"},\"client.port\":{\"id\":\"string\"},\"containerd.blkio.read.bytes\":{\"id\":\"bytes\"},\"containerd.blkio.summary.bytes\":{\"id\":\"bytes\"},\"containerd.blkio.write.bytes\":{\"id\":\"bytes\"},\"containerd.cpu.usage.kernel.pct\":{\"id\":\"percent\"},\"containerd.cpu.usage.total.pct\":{\"id\":\"percent\"},\"containerd.cpu.usage.user.pct\":{\"id\":\"percent\"},\"containerd.memory.activeFiles\":{\"id\":\"bytes\"},\"containerd.memory.cache\":{\"id\":\"bytes\"},\"containerd.memory.inactiveFiles\":{\"id\":\"bytes\"},\"containerd.memory.kernel.limit\":{\"id\":\"bytes\"},\"containerd.memory.kernel.max\":{\"id\":\"bytes\"},\"containerd.memory.kernel.total\":{\"id\":\"bytes\"},\"containerd.memory.rss\":{\"id\":\"bytes\"},\"containerd.memory.swap.limit\":{\"id\":\"bytes\"},\"containerd.memory.swap.max\":{\"id\":\"bytes\"},\"containerd.memory.swap.total\":{\"id\":\"bytes\"},\"containerd.memory.usage.limit\":{\"id\":\"bytes\"},\"containerd.memory.usage.max\":{\"id\":\"bytes\"},\"containerd.memory.usage.pct\":{\"id\":\"percent\"},\"containerd.memory.usage.total\":{\"id\":\"bytes\"},\"containerd.memory.workingset.pct\":{\"id\":\"percent\"},\"coredns.stats.dns.request.duration.ns.sum\":{\"id\":\"duration\"},\"couchbase.bucket.data.used.bytes\":{\"id\":\"bytes\"},\"couchbase.bucket.disk.used.bytes\":{\"id\":\"bytes\"},\"couchbase.bucket.memory.used.bytes\":{\"id\":\"bytes\"},\"couchbase.bucket.quota.ram.bytes\":{\"id\":\"bytes\"},\"couchbase.bucket.quota.use.pct\":{\"id\":\"percent\"},\"couchbase.cluster.hdd.free.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.hdd.quota.total.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.hdd.total.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.hdd.used.by_data.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.hdd.used.value.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.quota.total.per_node.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.quota.total.value.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.quota.used.per_node.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.quota.used.value.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.total.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.used.by_data.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.used.value.bytes\":{\"id\":\"bytes\"},\"couchbase.node.couch.docs.data_size.bytes\":{\"id\":\"bytes\"},\"couchbase.node.couch.docs.disk_size.bytes\":{\"id\":\"bytes\"},\"couchbase.node.mcd_memory.allocated.bytes\":{\"id\":\"bytes\"},\"destination.bytes\":{\"id\":\"bytes\"},\"destination.nat.port\":{\"id\":\"string\"},\"destination.port\":{\"id\":\"string\"},\"docker.cpu.core.*.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.core.*.pct\":{\"id\":\"percent\"},\"docker.cpu.kernel.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.kernel.pct\":{\"id\":\"percent\"},\"docker.cpu.system.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.system.pct\":{\"id\":\"percent\"},\"docker.cpu.total.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.total.pct\":{\"id\":\"percent\"},\"docker.cpu.user.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.user.pct\":{\"id\":\"percent\"},\"docker.diskio.read.bytes\":{\"id\":\"bytes\"},\"docker.diskio.summary.bytes\":{\"id\":\"bytes\"},\"docker.diskio.write.bytes\":{\"id\":\"bytes\"},\"docker.memory.commit.peak\":{\"id\":\"bytes\"},\"docker.memory.commit.total\":{\"id\":\"bytes\"},\"docker.memory.limit\":{\"id\":\"bytes\"},\"docker.memory.private_working_set.total\":{\"id\":\"bytes\"},\"docker.memory.rss.pct\":{\"id\":\"percent\"},\"docker.memory.rss.total\":{\"id\":\"bytes\"},\"docker.memory.usage.max\":{\"id\":\"bytes\"},\"docker.memory.usage.pct\":{\"id\":\"percent\"},\"docker.memory.usage.total\":{\"id\":\"bytes\"},\"docker.network.inbound.bytes\":{\"id\":\"bytes\"},\"docker.network.outbound.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.primaries.segments.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.primaries.store.size.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.primaries.store.total_data_set_size.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.total.segments.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.total.store.size.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.total.store.total_data_set_size.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.total.segments.memory_in_bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.total.store.size_in_bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.total.store.total_data_set_size_in_bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.jvm.memory.heap.init.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.jvm.memory.heap.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.jvm.memory.nonheap.init.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.jvm.memory.nonheap.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.fs.summary.available.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.fs.summary.free.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.fs.summary.total.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.all.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.combined_coordinating_and_primary.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.coordinating.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.primary.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.replica.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.limit_in_bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.all.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.combined_coordinating_and_primary.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.coordinating.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.coordinating.rejections\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.primary.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.primary.rejections\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.replica.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.replica.rejections\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.fielddata.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.query_cache.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.request_cache.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.doc_values.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.fixed_bit_set.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.index_writer.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.norms.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.points.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.stored_fields.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.term_vectors.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.terms.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.version_map.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.heap.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.heap.used.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.heap.used.pct\":{\"id\":\"percent\"},\"elasticsearch.node.stats.jvm.mem.pools.old.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.old.peak.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.old.peak_max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.old.used.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.survivor.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.survivor.peak.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.survivor.peak_max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.survivor.used.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.young.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.young.peak.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.young.peak_max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.young.used.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.process.cpu.pct\":{\"id\":\"percent\"},\"elf.header.entrypoint\":{\"id\":\"string\"},\"elf.sections.chi2\":{\"id\":\"number\"},\"elf.sections.entropy\":{\"id\":\"number\"},\"elf.sections.physical_size\":{\"id\":\"bytes\"},\"elf.sections.virtual_address\":{\"id\":\"string\"},\"elf.sections.virtual_size\":{\"id\":\"string\"},\"enterprisesearch.health.jvm.memory_usage.heap_committed.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.heap_init.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.heap_max.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.heap_used.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.non_heap_committed.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.non_heap_init.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.stats.http.network.received.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.stats.http.network.received.bytes_per_sec\":{\"id\":\"bytes\"},\"enterprisesearch.stats.http.network.sent.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.stats.http.network.sent.bytes_per_sec\":{\"id\":\"bytes\"},\"etcd.disk.mvcc_db_total_size.bytes\":{\"id\":\"bytes\"},\"etcd.memory.go_memstats_alloc.bytes\":{\"id\":\"bytes\"},\"etcd.network.client_grpc_received.bytes\":{\"id\":\"bytes\"},\"etcd.network.client_grpc_sent.bytes\":{\"id\":\"bytes\"},\"event.duration\":{\"id\":\"duration\",\"params\":{\"inputFormat\":\"nanoseconds\",\"outputFormat\":\"asMilliseconds\",\"outputPrecision\":1}},\"event.sequence\":{\"id\":\"string\"},\"event.severity\":{\"id\":\"string\"},\"file.elf.header.entrypoint\":{\"id\":\"string\"},\"file.elf.sections.chi2\":{\"id\":\"number\"},\"file.elf.sections.entropy\":{\"id\":\"number\"},\"file.elf.sections.physical_size\":{\"id\":\"bytes\"},\"file.elf.sections.virtual_address\":{\"id\":\"string\"},\"file.elf.sections.virtual_size\":{\"id\":\"string\"},\"golang.heap.allocations.active\":{\"id\":\"bytes\"},\"golang.heap.allocations.allocated\":{\"id\":\"bytes\"},\"golang.heap.allocations.idle\":{\"id\":\"bytes\"},\"golang.heap.allocations.total\":{\"id\":\"bytes\"},\"golang.heap.gc.next_gc_limit\":{\"id\":\"bytes\"},\"golang.heap.system.obtained\":{\"id\":\"bytes\"},\"golang.heap.system.released\":{\"id\":\"bytes\"},\"golang.heap.system.stack\":{\"id\":\"bytes\"},\"golang.heap.system.total\":{\"id\":\"bytes\"},\"haproxy.info.idle.pct\":{\"id\":\"percent\"},\"haproxy.info.memory.max.bytes\":{\"id\":\"bytes\"},\"haproxy.info.ssl.frontend.session_reuse.pct\":{\"id\":\"percent\"},\"haproxy.stat.compressor.bypassed.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.compressor.in.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.compressor.out.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.compressor.response.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.in.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.out.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.throttle.pct\":{\"id\":\"percent\"},\"http.request.body.bytes\":{\"id\":\"bytes\"},\"http.request.bytes\":{\"id\":\"bytes\"},\"http.response.body.bytes\":{\"id\":\"bytes\"},\"http.response.bytes\":{\"id\":\"bytes\"},\"http.response.status_code\":{\"id\":\"string\"},\"index_stats.total.segments.memory_in_bytes\":{\"id\":\"bytes\"},\"istio.citadel.grpc.server.handling.latency.ms.sum\":{\"id\":\"duration\"},\"istio.galley.runtime.processor.event_span.duration.ms.sum\":{\"id\":\"duration\"},\"istio.galley.runtime.processor.snapshot_lifetime.duration.ms.sum\":{\"id\":\"duration\"},\"istio.mesh.request.duration.ms.sum\":{\"id\":\"duration\"},\"kibana.stats.process.memory.heap.size_limit.bytes\":{\"id\":\"bytes\"},\"kibana.stats.process.memory.heap.total.bytes\":{\"id\":\"bytes\"},\"kibana.stats.process.memory.heap.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.apiserver.process.memory.resident.bytes\":{\"id\":\"bytes\"},\"kubernetes.apiserver.process.memory.virtual.bytes\":{\"id\":\"bytes\"},\"kubernetes.apiserver.response.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.apiserver.watch.events.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.container.cpu.usage.limit.pct\":{\"id\":\"percent\"},\"kubernetes.container.cpu.usage.node.pct\":{\"id\":\"percent\"},\"kubernetes.container.logs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.logs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.logs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.limit.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.request.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.rss.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.usage.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.usage.limit.pct\":{\"id\":\"percent\"},\"kubernetes.container.memory.usage.node.pct\":{\"id\":\"percent\"},\"kubernetes.container.memory.workingset.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.workingset.limit.pct\":{\"id\":\"percent\"},\"kubernetes.container.rootfs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.rootfs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.rootfs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.controllermanager.client.request.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.controllermanager.client.response.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.controllermanager.process.memory.resident.bytes\":{\"id\":\"bytes\"},\"kubernetes.controllermanager.process.memory.virtual.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.fs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.fs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.fs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.allocatable.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.rss.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.usage.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.workingset.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.network.rx.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.network.tx.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.runtime.imagefs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.runtime.imagefs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.runtime.imagefs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.cpu.usage.limit.pct\":{\"id\":\"percent\"},\"kubernetes.pod.cpu.usage.node.pct\":{\"id\":\"percent\"},\"kubernetes.pod.memory.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.memory.rss.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.memory.usage.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.memory.usage.limit.pct\":{\"id\":\"percent\"},\"kubernetes.pod.memory.usage.node.pct\":{\"id\":\"percent\"},\"kubernetes.pod.memory.working_set.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.memory.working_set.limit.pct\":{\"id\":\"percent\"},\"kubernetes.pod.network.rx.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.network.tx.bytes\":{\"id\":\"bytes\"},\"kubernetes.proxy.client.request.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.proxy.client.response.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.proxy.process.memory.resident.bytes\":{\"id\":\"bytes\"},\"kubernetes.proxy.process.memory.virtual.bytes\":{\"id\":\"bytes\"},\"kubernetes.scheduler.client.request.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.scheduler.client.response.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.scheduler.process.memory.resident.bytes\":{\"id\":\"bytes\"},\"kubernetes.scheduler.process.memory.virtual.bytes\":{\"id\":\"bytes\"},\"kubernetes.system.memory.rss.bytes\":{\"id\":\"bytes\"},\"kubernetes.system.memory.usage.bytes\":{\"id\":\"bytes\"},\"kubernetes.system.memory.workingset.bytes\":{\"id\":\"bytes\"},\"kubernetes.volume.fs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.volume.fs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.volume.fs.inodes.pct\":{\"id\":\"percent\"},\"kubernetes.volume.fs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.volume.fs.used.pct\":{\"id\":\"percent\"},\"linux.iostat.read.per_sec.bytes\":{\"id\":\"bytes\"},\"linux.iostat.write.per_sec.bytes\":{\"id\":\"bytes\"},\"linux.memory.hugepages.default_size\":{\"id\":\"bytes\"},\"linux.memory.hugepages.free\":{\"id\":\"number\"},\"linux.memory.hugepages.reserved\":{\"id\":\"number\"},\"linux.memory.hugepages.surplus\":{\"id\":\"number\"},\"linux.memory.hugepages.total\":{\"id\":\"number\"},\"linux.memory.hugepages.used.bytes\":{\"id\":\"bytes\"},\"linux.memory.hugepages.used.pct\":{\"id\":\"percent\"},\"linux.memory.page_stats.direct_efficiency.pct\":{\"id\":\"percent\"},\"linux.memory.page_stats.kswapd_efficiency.pct\":{\"id\":\"percent\"},\"linux.memory.page_stats.pgfree.pages\":{\"id\":\"number\"},\"linux.memory.page_stats.pgscan_direct.pages\":{\"id\":\"number\"},\"linux.memory.page_stats.pgscan_kswapd.pages\":{\"id\":\"number\"},\"linux.memory.page_stats.pgsteal_direct.pages\":{\"id\":\"number\"},\"linux.memory.page_stats.pgsteal_kswapd.pages\":{\"id\":\"number\"},\"linux.memory.swap.free\":{\"id\":\"bytes\"},\"linux.memory.swap.total\":{\"id\":\"bytes\"},\"linux.memory.swap.used.bytes\":{\"id\":\"bytes\"},\"linux.memory.swap.used.pct\":{\"id\":\"percent\"},\"linux.pressure.cpu.some.10.pct\":{\"id\":\"percent\"},\"linux.pressure.cpu.some.300.pct\":{\"id\":\"percent\"},\"linux.pressure.cpu.some.60.pct\":{\"id\":\"percent\"},\"linux.pressure.io.full.10.pct\":{\"id\":\"percent\"},\"linux.pressure.io.full.300.pct\":{\"id\":\"percent\"},\"linux.pressure.io.full.60.pct\":{\"id\":\"percent\"},\"linux.pressure.io.some.10.pct\":{\"id\":\"percent\"},\"linux.pressure.io.some.300.pct\":{\"id\":\"percent\"},\"linux.pressure.io.some.60.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.full.10.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.full.300.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.full.60.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.some.10.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.some.300.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.some.60.pct\":{\"id\":\"percent\"},\"log.syslog.facility.code\":{\"id\":\"string\"},\"log.syslog.priority\":{\"id\":\"string\"},\"mongodb.dbstats.avg_obj_size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.data_size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.extent_free_list.size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.file_size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.index_size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.storage_size.bytes\":{\"id\":\"bytes\"},\"mongodb.replstatus.headroom.max\":{\"id\":\"duration\"},\"mongodb.replstatus.headroom.min\":{\"id\":\"duration\"},\"mongodb.replstatus.lag.max\":{\"id\":\"duration\"},\"mongodb.replstatus.lag.min\":{\"id\":\"duration\"},\"mongodb.replstatus.oplog.size.allocated\":{\"id\":\"bytes\"},\"mongodb.replstatus.oplog.size.used\":{\"id\":\"bytes\"},\"mongodb.status.extra_info.heap_usage.bytes\":{\"id\":\"bytes\"},\"mongodb.status.network.in.bytes\":{\"id\":\"bytes\"},\"mongodb.status.network.out.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.cache.dirty.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.cache.maximum.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.cache.used.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.log.max_file_size.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.log.size.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.log.write.bytes\":{\"id\":\"bytes\"},\"mysql.status.bytes.received\":{\"id\":\"bytes\"},\"mysql.status.bytes.sent\":{\"id\":\"bytes\"},\"nats.connection.idle_time\":{\"id\":\"duration\"},\"nats.connection.in.bytes\":{\"id\":\"bytes\"},\"nats.connection.out.bytes\":{\"id\":\"bytes\"},\"nats.connection.pending_bytes\":{\"id\":\"bytes\"},\"nats.connection.uptime\":{\"id\":\"duration\"},\"nats.route.in.bytes\":{\"id\":\"bytes\"},\"nats.route.out.bytes\":{\"id\":\"bytes\"},\"nats.stats.cpu\":{\"id\":\"percent\"},\"nats.stats.in.bytes\":{\"id\":\"bytes\"},\"nats.stats.mem.bytes\":{\"id\":\"bytes\"},\"nats.stats.out.bytes\":{\"id\":\"bytes\"},\"nats.stats.uptime\":{\"id\":\"duration\"},\"nats.subscriptions.cache.hit_rate\":{\"id\":\"percent\"},\"network.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.data_file.size.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.data_file.size.free.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.data_file.size.max.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.space.free.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.space.total.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.space.used.bytes\":{\"id\":\"bytes\"},\"package.size\":{\"id\":\"string\"},\"process.cpu.pct\":{\"id\":\"percent\"},\"process.elf.header.entrypoint\":{\"id\":\"string\"},\"process.elf.sections.chi2\":{\"id\":\"number\"},\"process.elf.sections.entropy\":{\"id\":\"number\"},\"process.elf.sections.physical_size\":{\"id\":\"bytes\"},\"process.elf.sections.virtual_address\":{\"id\":\"string\"},\"process.elf.sections.virtual_size\":{\"id\":\"string\"},\"process.memory.pct\":{\"id\":\"percent\"},\"process.parent.elf.header.entrypoint\":{\"id\":\"string\"},\"process.parent.elf.sections.chi2\":{\"id\":\"number\"},\"process.parent.elf.sections.entropy\":{\"id\":\"number\"},\"process.parent.elf.sections.physical_size\":{\"id\":\"bytes\"},\"process.parent.elf.sections.virtual_address\":{\"id\":\"string\"},\"process.parent.elf.sections.virtual_size\":{\"id\":\"string\"},\"process.parent.pgid\":{\"id\":\"string\"},\"process.parent.pid\":{\"id\":\"string\"},\"process.parent.thread.id\":{\"id\":\"string\"},\"process.pgid\":{\"id\":\"string\"},\"process.pid\":{\"id\":\"string\"},\"process.thread.id\":{\"id\":\"string\"},\"rabbitmq.connection.frame_max\":{\"id\":\"bytes\"},\"rabbitmq.node.disk.free.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.disk.free.limit.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.gc.reclaimed.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.io.read.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.io.write.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.mem.limit.bytes\":{\"id\":\"bytes\"},\"rabbitmq.queue.consumers.utilisation.pct\":{\"id\":\"percent\"},\"rabbitmq.queue.memory.bytes\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.active\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.allocated\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.fragmentation.bytes\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.resident\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.rss.bytes\":{\"id\":\"bytes\"},\"redis.info.memory.fragmentation.bytes\":{\"id\":\"bytes\"},\"redis.info.memory.max.value\":{\"id\":\"bytes\"},\"redis.info.memory.used.dataset\":{\"id\":\"bytes\"},\"redis.info.memory.used.lua\":{\"id\":\"bytes\"},\"redis.info.memory.used.peak\":{\"id\":\"bytes\"},\"redis.info.memory.used.rss\":{\"id\":\"bytes\"},\"redis.info.memory.used.value\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.buffer.size\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.copy_on_write.last_size\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.rewrite.buffer.size\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.rewrite.current_time.sec\":{\"id\":\"duration\"},\"redis.info.persistence.aof.rewrite.last_time.sec\":{\"id\":\"duration\"},\"redis.info.persistence.aof.size.base\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.size.current\":{\"id\":\"bytes\"},\"redis.info.persistence.rdb.bgsave.current_time.sec\":{\"id\":\"duration\"},\"redis.info.persistence.rdb.bgsave.last_time.sec\":{\"id\":\"duration\"},\"redis.info.persistence.rdb.copy_on_write.last_size\":{\"id\":\"bytes\"},\"redis.info.replication.backlog.size\":{\"id\":\"bytes\"},\"redis.info.replication.master.last_io_seconds_ago\":{\"id\":\"duration\"},\"redis.info.replication.master.sync.last_io_seconds_ago\":{\"id\":\"duration\"},\"redis.info.replication.master.sync.left_bytes\":{\"id\":\"bytes\"},\"server.bytes\":{\"id\":\"bytes\"},\"server.nat.port\":{\"id\":\"string\"},\"server.port\":{\"id\":\"string\"},\"source.bytes\":{\"id\":\"bytes\"},\"source.nat.port\":{\"id\":\"string\"},\"source.port\":{\"id\":\"string\"},\"system.core.idle.pct\":{\"id\":\"percent\"},\"system.core.iowait.pct\":{\"id\":\"percent\"},\"system.core.irq.pct\":{\"id\":\"percent\"},\"system.core.nice.pct\":{\"id\":\"percent\"},\"system.core.softirq.pct\":{\"id\":\"percent\"},\"system.core.steal.pct\":{\"id\":\"percent\"},\"system.core.system.pct\":{\"id\":\"percent\"},\"system.core.total.pct\":{\"id\":\"percent\"},\"system.core.user.pct\":{\"id\":\"percent\"},\"system.cpu.idle.norm.pct\":{\"id\":\"percent\"},\"system.cpu.idle.pct\":{\"id\":\"percent\"},\"system.cpu.iowait.norm.pct\":{\"id\":\"percent\"},\"system.cpu.iowait.pct\":{\"id\":\"percent\"},\"system.cpu.irq.norm.pct\":{\"id\":\"percent\"},\"system.cpu.irq.pct\":{\"id\":\"percent\"},\"system.cpu.nice.norm.pct\":{\"id\":\"percent\"},\"system.cpu.nice.pct\":{\"id\":\"percent\"},\"system.cpu.softirq.norm.pct\":{\"id\":\"percent\"},\"system.cpu.softirq.pct\":{\"id\":\"percent\"},\"system.cpu.steal.norm.pct\":{\"id\":\"percent\"},\"system.cpu.steal.pct\":{\"id\":\"percent\"},\"system.cpu.system.norm.pct\":{\"id\":\"percent\"},\"system.cpu.system.pct\":{\"id\":\"percent\"},\"system.cpu.total.norm.pct\":{\"id\":\"percent\"},\"system.cpu.total.pct\":{\"id\":\"percent\"},\"system.cpu.user.norm.pct\":{\"id\":\"percent\"},\"system.cpu.user.pct\":{\"id\":\"percent\"},\"system.diskio.read.bytes\":{\"id\":\"bytes\"},\"system.diskio.write.bytes\":{\"id\":\"bytes\"},\"system.entropy.pct\":{\"id\":\"percent\"},\"system.filesystem.available\":{\"id\":\"bytes\"},\"system.filesystem.free\":{\"id\":\"bytes\"},\"system.filesystem.total\":{\"id\":\"bytes\"},\"system.filesystem.used.bytes\":{\"id\":\"bytes\"},\"system.filesystem.used.pct\":{\"id\":\"percent\"},\"system.fsstat.total_size.free\":{\"id\":\"bytes\"},\"system.fsstat.total_size.total\":{\"id\":\"bytes\"},\"system.fsstat.total_size.used\":{\"id\":\"bytes\"},\"system.memory.actual.free\":{\"id\":\"bytes\"},\"system.memory.actual.used.bytes\":{\"id\":\"bytes\"},\"system.memory.actual.used.pct\":{\"id\":\"percent\"},\"system.memory.cached\":{\"id\":\"bytes\"},\"system.memory.free\":{\"id\":\"bytes\"},\"system.memory.swap.free\":{\"id\":\"bytes\"},\"system.memory.swap.total\":{\"id\":\"bytes\"},\"system.memory.swap.used.bytes\":{\"id\":\"bytes\"},\"system.memory.swap.used.pct\":{\"id\":\"percent\"},\"system.memory.total\":{\"id\":\"bytes\"},\"system.memory.used.bytes\":{\"id\":\"bytes\"},\"system.memory.used.pct\":{\"id\":\"percent\"},\"system.network.in.bytes\":{\"id\":\"bytes\"},\"system.network.out.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.blkio.total.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.cpu.pressure.full.10.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.full.300.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.full.60.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.some.10.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.some.300.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.some.60.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.some.total\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.full.10.pct\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.full.300.pct\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.full.60.pct\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.some.10.pct\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.some.60.pct\":{\"id\":\"percent\"},\"system.process.cgroup.memory.kmem.limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem.usage.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem.usage.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem_tcp.limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem_tcp.usage.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem_tcp.usage.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.high.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.low.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.usage.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.usage.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.high.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.low.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.usage.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.usage.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.active_anon.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.active_file.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.cache.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.hierarchical_memory_limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.hierarchical_memsw_limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.inactive_anon.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.inactive_file.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.mapped_file.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.rss.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.rss_huge.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.swap.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.unevictable.bytes\":{\"id\":\"bytes\"},\"system.process.cpu.total.norm.pct\":{\"id\":\"percent\"},\"system.process.cpu.total.pct\":{\"id\":\"percent\"},\"system.process.memory.rss.bytes\":{\"id\":\"bytes\"},\"system.process.memory.rss.pct\":{\"id\":\"percent\"},\"system.process.memory.share\":{\"id\":\"bytes\"},\"system.process.memory.size\":{\"id\":\"bytes\"},\"system.service.resources.network.in.bytes\":{\"id\":\"bytes\"},\"system.service.resources.network.in.packets\":{\"id\":\"bytes\"},\"system.socket.summary.tcp.memory\":{\"id\":\"bytes\"},\"system.socket.summary.udp.memory\":{\"id\":\"bytes\"},\"system.uptime.duration.ms\":{\"id\":\"duration\",\"params\":{\"inputFormat\":\"milliseconds\"}},\"threat.enrichments.indicator.file.elf.header.entrypoint\":{\"id\":\"string\"},\"threat.enrichments.indicator.file.elf.sections.chi2\":{\"id\":\"number\"},\"threat.enrichments.indicator.file.elf.sections.entropy\":{\"id\":\"number\"},\"threat.enrichments.indicator.file.elf.sections.physical_size\":{\"id\":\"bytes\"},\"threat.enrichments.indicator.file.elf.sections.virtual_address\":{\"id\":\"string\"},\"threat.enrichments.indicator.file.elf.sections.virtual_size\":{\"id\":\"string\"},\"threat.enrichments.indicator.url.port\":{\"id\":\"string\"},\"threat.indicator.file.elf.header.entrypoint\":{\"id\":\"string\"},\"threat.indicator.file.elf.sections.chi2\":{\"id\":\"number\"},\"threat.indicator.file.elf.sections.entropy\":{\"id\":\"number\"},\"threat.indicator.file.elf.sections.physical_size\":{\"id\":\"bytes\"},\"threat.indicator.file.elf.sections.virtual_address\":{\"id\":\"string\"},\"threat.indicator.file.elf.sections.virtual_size\":{\"id\":\"string\"},\"threat.indicator.url.port\":{\"id\":\"string\"},\"url.port\":{\"id\":\"string\"},\"vsphere.datastore.capacity.free.bytes\":{\"id\":\"bytes\"},\"vsphere.datastore.capacity.total.bytes\":{\"id\":\"bytes\"},\"vsphere.datastore.capacity.used.bytes\":{\"id\":\"bytes\"},\"vsphere.datastore.capacity.used.pct\":{\"id\":\"percent\"},\"vsphere.host.memory.free.bytes\":{\"id\":\"bytes\"},\"vsphere.host.memory.total.bytes\":{\"id\":\"bytes\"},\"vsphere.host.memory.used.bytes\":{\"id\":\"bytes\"},\"vsphere.virtualmachine.memory.free.guest.bytes\":{\"id\":\"bytes\"},\"vsphere.virtualmachine.memory.total.guest.bytes\":{\"id\":\"bytes\"},\"vsphere.virtualmachine.memory.used.guest.bytes\":{\"id\":\"bytes\"},\"vsphere.virtualmachine.memory.used.host.bytes\":{\"id\":\"bytes\"},\"windows.service.uptime.ms\":{\"id\":\"duration\",\"params\":{\"inputFormat\":\"milliseconds\"}}}","fields":"[]","name":"","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"metricbeat-*"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"metricbeat-*","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"7.11.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDM5LDRd"}
-{"attributes":{"description":"Overview of host metrics","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":9,\"i\":\"a06325b0-e955-435a-a100-05472d459b6b\"},\"panelIndex\":\"a06325b0-e955-435a-a100-05472d459b6b\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"CPU Usage\",\"panelRefName\":\"panel_a06325b0-e955-435a-a100-05472d459b6b\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":9,\"w\":48,\"h\":10,\"i\":\"ec2f82c3-888f-4826-8e8c-dd5d7c3c2710\"},\"panelIndex\":\"ec2f82c3-888f-4826-8e8c-dd5d7c3c2710\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Memory Usage\",\"panelRefName\":\"panel_ec2f82c3-888f-4826-8e8c-dd5d7c3c2710\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":19,\"w\":24,\"h\":15,\"i\":\"67c9f75f-157b-4b7f-a347-56e556f68719\"},\"panelIndex\":\"67c9f75f-157b-4b7f-a347-56e556f68719\",\"embeddableConfig\":{\"savedVis\":{\"title\":\"\",\"description\":\"\",\"type\":\"metrics\",\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"80a04950-1b19-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":\"0.1\",\"formatter\":\"percent\",\"id\":\"80a04951-1b19-11e7-b09e-037021c4f8df\",\"label\":\"user\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.total.norm.pct\",\"id\":\"80a04952-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(211,49,21,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"993acf30-1b19-11e7-b09e-037021c4f8df\",\"label\":\"system\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.system.pct\",\"id\":\"993acf31-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(123,100,255,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"65ca35e0-1b1a-11e7-b09e-037021c4f8df\",\"label\":\"nice\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.nice.pct\",\"id\":\"65ca5cf0-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(226,115,0,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"741b5f20-1b1a-11e7-b09e-037021c4f8df\",\"label\":\"irq\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.irq.pct\",\"id\":\"741b5f21-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(176,188,0,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"2efc5d40-1b1a-11e7-b09e-037021c4f8df\",\"label\":\"softirq\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.softirq.pct\",\"id\":\"2efc5d41-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(15,20,25,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"ae644a30-1b19-11e7-b09e-037021c4f8df\",\"label\":\"iowait\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.iowait.pct\",\"id\":\"ae644a31-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_focused\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false},\"uiState\":{},\"data\":{\"aggs\":[],\"searchSource\":{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}}},\"enhancements\":{},\"description\":\"\"},\"title\":\"CPU Total Usage\"},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":19,\"w\":24,\"h\":15,\"i\":\"13667396-ce67-4a71-9cd1-6ee372298257\"},\"panelIndex\":\"13667396-ce67-4a71-9cd1-6ee372298257\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Network In Traffic in Bytes\",\"panelRefName\":\"panel_13667396-ce67-4a71-9cd1-6ee372298257\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":34,\"w\":24,\"h\":15,\"i\":\"a847408e-3f52-47b8-bc15-e6cd4b515646\"},\"panelIndex\":\"a847408e-3f52-47b8-bc15-e6cd4b515646\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Network Out Traffic in Bytes\",\"panelRefName\":\"panel_a847408e-3f52-47b8-bc15-e6cd4b515646\"},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":34,\"w\":24,\"h\":15,\"i\":\"d4dea4ce-7e4f-46e4-898e-dd29c960e39d\"},\"panelIndex\":\"d4dea4ce-7e4f-46e4-898e-dd29c960e39d\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_d4dea4ce-7e4f-46e4-898e-dd29c960e39d\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":49,\"w\":24,\"h\":15,\"i\":\"93aaa74d-1070-4ca9-a7d7-bcfdc1c56d5f\"},\"panelIndex\":\"93aaa74d-1070-4ca9-a7d7-bcfdc1c56d5f\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"System Load Norm 5\",\"panelRefName\":\"panel_93aaa74d-1070-4ca9-a7d7-bcfdc1c56d5f\"},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":49,\"w\":24,\"h\":15,\"i\":\"df368150-989e-4c5b-b2fd-69ab9aecfc68\"},\"panelIndex\":\"df368150-989e-4c5b-b2fd-69ab9aecfc68\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Memory Used\",\"panelRefName\":\"panel_df368150-989e-4c5b-b2fd-69ab9aecfc68\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":64,\"w\":24,\"h\":15,\"i\":\"01d17372-5e63-41e0-bb70-487cbc27f67c\"},\"panelIndex\":\"01d17372-5e63-41e0-bb70-487cbc27f67c\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Memory Cached\",\"panelRefName\":\"panel_01d17372-5e63-41e0-bb70-487cbc27f67c\"},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":64,\"w\":24,\"h\":15,\"i\":\"2ed91e16-4630-4cc3-89a9-68c2fb380cba\"},\"panelIndex\":\"2ed91e16-4630-4cc3-89a9-68c2fb380cba\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Memory Free\",\"panelRefName\":\"panel_2ed91e16-4630-4cc3-89a9-68c2fb380cba\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":79,\"w\":24,\"h\":15,\"i\":\"3bc7171f-a1bd-4d32-880c-f2dd1ceaf4e6\"},\"panelIndex\":\"3bc7171f-a1bd-4d32-880c-f2dd1ceaf4e6\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_3bc7171f-a1bd-4d32-880c-f2dd1ceaf4e6\"},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":79,\"w\":24,\"h\":15,\"i\":\"1b8c0d65-5686-4c7f-b144-8912883c19ec\"},\"panelIndex\":\"1b8c0d65-5686-4c7f-b144-8912883c19ec\",\"embeddableConfig\":{\"attributes\":{\"title\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"metricbeat-*\",\"name\":\"indexpattern-datasource-layer-c35fcaea-4d34-41fc-a6a7-c77ecaa8a77d\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\",\"legendSize\":\"xlarge\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area_stacked\",\"layers\":[{\"layerId\":\"c35fcaea-4d34-41fc-a6a7-c77ecaa8a77d\",\"accessors\":[\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527\"],\"position\":\"top\",\"seriesType\":\"area_stacked\",\"showGridlines\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"xAccessor\":\"9c2accad-7d6d-4af9-8cbf-ac49852d2c34\",\"splitAccessor\":\"75320640-72a6-4310-b3a6-203602f1b514\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"c35fcaea-4d34-41fc-a6a7-c77ecaa8a77d\":{\"columns\":{\"9c2accad-7d6d-4af9-8cbf-ac49852d2c34\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X0\":{\"label\":\"Part of Energy efficiency [W]\",\"dataType\":\"number\",\"operationType\":\"average\",\"sourceField\":\"system.load.norm.5\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"emptyAsNull\":false},\"customLabel\":true},\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X1\":{\"label\":\"Part of Energy efficiency [W]\",\"dataType\":\"number\",\"operationType\":\"math\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"tinymathAst\":{\"type\":\"function\",\"name\":\"multiply\",\"args\":[\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X0\",200],\"location\":{\"min\":0,\"max\":33},\"text\":\"average(system.load.norm.5) * 200\"}},\"references\":[\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X0\"],\"customLabel\":true},\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527\":{\"label\":\"Energy efficiency [W]\",\"dataType\":\"number\",\"operationType\":\"formula\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"formula\":\"average(system.load.norm.5) * 200\",\"isFormulaBroken\":false,\"format\":{\"id\":\"number\",\"params\":{\"decimals\":2,\"compact\":false}}},\"references\":[\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X1\"],\"customLabel\":true},\"75320640-72a6-4310-b3a6-203602f1b514\":{\"label\":\"Top 3 values of agent.hostname\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"agent.hostname\",\"isBucketed\":true,\"params\":{\"size\":3,\"orderBy\":{\"type\":\"alphabetical\",\"fallback\":true},\"orderDirection\":\"asc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}}},\"columnOrder\":[\"75320640-72a6-4310-b3a6-203602f1b514\",\"9c2accad-7d6d-4af9-8cbf-ac49852d2c34\",\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527\",\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X0\",\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X1\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"metricbeat-*\"}},\"currentIndexPatternId\":\"metricbeat-*\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}},\"title\":\"Energy efficiency\"}]","timeRestore":false,"title":"Host overview","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"b81db4da-06d1-47fd-b8da-c0bacc3df425","managed":false,"references":[{"id":"83e12df0-1b91-11e7-bec4-a5e9ec5cab8b-ecs","name":"a06325b0-e955-435a-a100-05472d459b6b:panel_a06325b0-e955-435a-a100-05472d459b6b","type":"visualization"},{"id":"d3166e80-1b91-11e7-bec4-a5e9ec5cab8b-ecs","name":"ec2f82c3-888f-4826-8e8c-dd5d7c3c2710:panel_ec2f82c3-888f-4826-8e8c-dd5d7c3c2710","type":"visualization"},{"id":"41f6e91c-eb91-48c2-9d8f-dc1d037dc8a1","name":"13667396-ce67-4a71-9cd1-6ee372298257:panel_13667396-ce67-4a71-9cd1-6ee372298257","type":"visualization"},{"id":"08624284-6bbb-4ad8-aad4-8989b5309335","name":"a847408e-3f52-47b8-bc15-e6cd4b515646:panel_a847408e-3f52-47b8-bc15-e6cd4b515646","type":"visualization"},{"id":"e0f001c0-1b18-11e7-b09e-037021c4f8df-ecs","name":"d4dea4ce-7e4f-46e4-898e-dd29c960e39d:panel_d4dea4ce-7e4f-46e4-898e-dd29c960e39d","type":"visualization"},{"id":"1f90151d-da59-411c-a2e6-27f6768c8936","name":"93aaa74d-1070-4ca9-a7d7-bcfdc1c56d5f:panel_93aaa74d-1070-4ca9-a7d7-bcfdc1c56d5f","type":"visualization"},{"id":"35df6afd-02bd-41dd-912c-ba133b1b18e1","name":"df368150-989e-4c5b-b2fd-69ab9aecfc68:panel_df368150-989e-4c5b-b2fd-69ab9aecfc68","type":"visualization"},{"id":"0055f937-3ec3-4e88-ad90-5590bbd5f354","name":"01d17372-5e63-41e0-bb70-487cbc27f67c:panel_01d17372-5e63-41e0-bb70-487cbc27f67c","type":"visualization"},{"id":"ee1920dd-ebb1-41fb-b821-db2035fd308b","name":"2ed91e16-4630-4cc3-89a9-68c2fb380cba:panel_2ed91e16-4630-4cc3-89a9-68c2fb380cba","type":"visualization"},{"id":"94d81971-c4ac-40b2-a92a-c9f2b4ed7b59","name":"3bc7171f-a1bd-4d32-880c-f2dd1ceaf4e6:panel_3bc7171f-a1bd-4d32-880c-f2dd1ceaf4e6","type":"visualization"},{"id":"metricbeat-*","name":"1b8c0d65-5686-4c7f-b144-8912883c19ec:indexpattern-datasource-layer-c35fcaea-4d34-41fc-a6a7-c77ecaa8a77d","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDQwLDRd"}
-{"attributes":{"state":{"datasourceStates":{"formBased":{"layers":{"307ec163-d913-4ce0-8e9b-6dfc777def59":{"columnOrder":["8c03fc54-6e2d-49ff-b294-bb80ae6a1a8e","7b682fd2-3fd6-4834-8067-a546ab543764","e9919412-9d5f-4db8-96bf-ab35a7b11c87","b1ecf062-bf74-4458-9598-2c7018cdae3d"],"columns":{"7b682fd2-3fd6-4834-8067-a546ab543764":{"customLabel":true,"dataType":"string","filter":{"language":"kuery","query":"kubernetes.pod.status.phase: *"},"isBucketed":false,"label":"Phase","operationType":"last_value","params":{"sortField":"@timestamp"},"scale":"ordinal","sourceField":"kubernetes.pod.status.phase"},"8c03fc54-6e2d-49ff-b294-bb80ae6a1a8e":{"customLabel":true,"dataType":"string","isBucketed":true,"label":"Pod","operationType":"terms","params":{"missingBucket":false,"orderBy":{"fallback":false,"type":"alphabetical"},"orderDirection":"asc","otherBucket":true,"parentFormat":{"id":"terms"},"size":1000},"scale":"ordinal","sourceField":"kubernetes.pod.name"},"b1ecf062-bf74-4458-9598-2c7018cdae3d":{"customLabel":true,"dataType":"string","filter":{"language":"kuery","query":"kubernetes.pod.status.scheduled: *"},"isBucketed":false,"label":"Scheduled","operationType":"last_value","params":{"sortField":"@timestamp"},"scale":"ordinal","sourceField":"kubernetes.pod.status.scheduled"},"e9919412-9d5f-4db8-96bf-ab35a7b11c87":{"customLabel":true,"dataType":"string","filter":{"language":"kuery","query":"kubernetes.pod.status.ready: *"},"isBucketed":false,"label":"Ready","operationType":"last_value","params":{"sortField":"@timestamp"},"scale":"ordinal","sourceField":"kubernetes.pod.status.ready"}},"incompleteColumns":{}}}}},"filters":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"index":"8436b682-edd9-4a0c-bcf4-9dd60f324200","key":"metricset.name","negate":false,"params":{"query":"state_pod"},"type":"phrase"},"query":{"match_phrase":{"metricset.name":"state_pod"}}}],"query":{"language":"kuery","query":""},"visualization":{"columns":[{"collapseFn":"","columnId":"8c03fc54-6e2d-49ff-b294-bb80ae6a1a8e","isTransposed":false},{"alignment":"right","columnId":"7b682fd2-3fd6-4834-8067-a546ab543764","hidden":false,"isTransposed":false},{"alignment":"right","columnId":"e9919412-9d5f-4db8-96bf-ab35a7b11c87","isTransposed":false},{"alignment":"right","columnId":"b1ecf062-bf74-4458-9598-2c7018cdae3d","isTransposed":false}],"headerRowHeight":"single","headerRowHeightLines":1,"layerId":"307ec163-d913-4ce0-8e9b-6dfc777def59","layerType":"data","paging":{"enabled":true,"size":10},"sorting":{"direction":"none"}}},"title":"Status per Pod [Metricbeat Kubernetes]","visualizationType":"lnsDatatable"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"95f0b070-db48-11ec-a23d-5dd6249f86b6","managed":false,"references":[{"id":"metricbeat-*","name":"indexpattern-datasource-layer-307ec163-d913-4ce0-8e9b-6dfc777def59","type":"index-pattern"},{"id":"metricbeat-*","name":"8436b682-edd9-4a0c-bcf4-9dd60f324200","type":"index-pattern"}],"type":"lens","typeMigrationVersion":"8.9.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDQxLDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"CPU Usage to Node [Metricbeat Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CPU Usage to Node [Metricbeat Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"effbda00-b658-11ec-b432-f55b76073132\"}],\"drop_last_bucket\":0,\"filter\":{\"language\":\"kuery\",\"query\":\"metricset.name :\\\"pod\\\" \"},\"id\":\"034a1b39-789a-4c21-ba0f-3a3f01c132c0\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"7cc97db7-b10d-4452-9ea8-8f9ac149c901\",\"label\":\"\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.pod.cpu.usage.node.pct\",\"id\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"type\":\"avg\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.pod.name\",\"terms_order_by\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"time_range_mode\":\"entire_time_range\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true,\"index_pattern_ref_name\":\"metrics_0_index_pattern\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"kubernetes-9abe1bb0-bcb7-11ec-b64f-7dd6e8e82013","managed":false,"references":[{"id":"metricbeat-*","name":"metrics_0_index_pattern","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:57:25.387Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NTEzLDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"CPU Usage to Limit [Metricbeat Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CPU Usage to Limit [Metricbeat Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"effbda00-b658-11ec-b432-f55b76073132\"}],\"drop_last_bucket\":0,\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"id\":\"034a1b39-789a-4c21-ba0f-3a3f01c132c0\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"7cc97db7-b10d-4452-9ea8-8f9ac149c901\",\"label\":\"\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.pod.cpu.usage.limit.pct\",\"id\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"type\":\"avg\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.pod.name\",\"terms_order_by\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"terms_direction\":\"desc\",\"terms_size\":\"10\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true,\"index_pattern_ref_name\":\"metrics_0_index_pattern\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"kubernetes-9e5c9f30-bcb7-11ec-b64f-7dd6e8e82013","managed":false,"references":[{"id":"metricbeat-*","name":"metrics_0_index_pattern","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:56:56.954Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NTA5LDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"language\":\"kuery\",\"query\":\"\"}}"},"title":"Pod Memory Usage to Node [Metricbeat Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"effbda00-b658-11ec-b432-f55b76073132\"}],\"drop_last_bucket\":0,\"filter\":{\"language\":\"kuery\",\"query\":\"metricset.name :\\\"pod\\\" \"},\"id\":\"034a1b39-789a-4c21-ba0f-3a3f01c132c0\",\"index_pattern_ref_name\":\"metrics_0_index_pattern\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"7cc97db7-b10d-4452-9ea8-8f9ac149c901\",\"label\":\"\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.pod.memory.usage.node.pct\",\"id\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"type\":\"avg\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.pod.name\",\"terms_order_by\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"time_range_mode\":\"entire_time_range\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true},\"title\":\"Pod Memory Usage to Node [Metricbeat Kubernetes]\",\"type\":\"metrics\"}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"kubernetes-17849f40-bcb6-11ec-b64f-7dd6e8e82013","managed":false,"references":[{"id":"metricbeat-*","name":"metrics_0_index_pattern","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDQ0LDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"Memory Usage to Limit [Metricbeat Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory Usage to Limit [Metricbeat Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"effbda00-b658-11ec-b432-f55b76073132\"}],\"drop_last_bucket\":0,\"filter\":{\"language\":\"kuery\",\"query\":\"metricset.name :\\\"pod\\\" \"},\"id\":\"034a1b39-789a-4c21-ba0f-3a3f01c132c0\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"7cc97db7-b10d-4452-9ea8-8f9ac149c901\",\"label\":\"\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.pod.memory.usage.limit.pct\",\"id\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"type\":\"avg\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.pod.name\",\"terms_order_by\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"terms_direction\":\"desc\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true,\"index_pattern_ref_name\":\"metrics_0_index_pattern\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"kubernetes-f8dc7fc0-bcb7-11ec-b64f-7dd6e8e82013","managed":false,"references":[{"id":"metricbeat-*","name":"metrics_0_index_pattern","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-09-20T13:52:13.244Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDg5LDRd"}
-{"attributes":{"allowHidden":false,"fieldAttrs":"{\"kubernetes.pod.cpu.usage.limit.pct\":{\"count\":2}}","fieldFormatMap":"{}","fields":"[]","name":"metricbeat","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"metricbeat-*"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"8b11a0ab-af40-4a72-ba78-8f1f060eeca6","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-09-20T13:48:14.281Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDY4LDRd"}
-{"attributes":{"description":"Metrics about Pods","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":44,\"h\":15,\"i\":\"f587f652-05f1-4c17-b941-5935cc04e962\"},\"panelIndex\":\"f587f652-05f1-4c17-b941-5935cc04e962\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"panelRefName\":\"panel_f587f652-05f1-4c17-b941-5935cc04e962\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":15,\"w\":22,\"h\":15,\"i\":\"ec7bbaf6-3619-4cb3-ba7c-093b7c110927\"},\"panelIndex\":\"ec7bbaf6-3619-4cb3-ba7c-093b7c110927\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"title\":\"CPU Usage as Pct of the Total Node CPU [Metricbeat Kubernetes]\",\"panelRefName\":\"panel_ec7bbaf6-3619-4cb3-ba7c-093b7c110927\"},{\"type\":\"visualization\",\"gridData\":{\"x\":22,\"y\":15,\"w\":22,\"h\":15,\"i\":\"17f22ff6-f31b-4d41-bb9e-8c4d9e4dd9f9\"},\"panelIndex\":\"17f22ff6-f31b-4d41-bb9e-8c4d9e4dd9f9\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"title\":\"CPU Usage as Pct of the Defined Pod Limit [Metricbeat Kubernetes]\",\"panelRefName\":\"panel_17f22ff6-f31b-4d41-bb9e-8c4d9e4dd9f9\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":30,\"w\":22,\"h\":15,\"i\":\"9f9fe577-356b-4a30-a3d5-87e659e84097\"},\"panelIndex\":\"9f9fe577-356b-4a30-a3d5-87e659e84097\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"title\":\"Memory Usage as Pct of the Total Node Memory [Metricbeat Kubernetes]\",\"panelRefName\":\"panel_9f9fe577-356b-4a30-a3d5-87e659e84097\"},{\"type\":\"visualization\",\"gridData\":{\"x\":22,\"y\":30,\"w\":22,\"h\":15,\"i\":\"5fc838b1-985b-48f0-9705-8d854a67c18b\"},\"panelIndex\":\"5fc838b1-985b-48f0-9705-8d854a67c18b\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"title\":\"Memory Usage as Pct of the Defined Pod Limit [Metricbeat Kubernetes]\",\"panelRefName\":\"panel_5fc838b1-985b-48f0-9705-8d854a67c18b\"},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":45,\"w\":24,\"h\":15,\"i\":\"86d2db49-640a-4315-9542-decc5a02109c\"},\"panelIndex\":\"86d2db49-640a-4315-9542-decc5a02109c\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Pods volumes used\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"8b11a0ab-af40-4a72-ba78-8f1f060eeca6\",\"name\":\"indexpattern-datasource-layer-af68de9e-a8e1-4676-8c87-64848360656a\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\",\"legendSize\":\"xlarge\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"af68de9e-a8e1-4676-8c87-64848360656a\",\"seriesType\":\"area\",\"xAccessor\":\"c25291b7-309d-4ff3-a861-6c2e3018f05b\",\"splitAccessor\":\"2e20bf6e-65e7-4ce8-b650-bd1965b1b9a3\",\"accessors\":[\"70dedd1c-d495-4609-ba3a-4a0cae73371b\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"af68de9e-a8e1-4676-8c87-64848360656a\":{\"columns\":{\"c25291b7-309d-4ff3-a861-6c2e3018f05b\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"70dedd1c-d495-4609-ba3a-4a0cae73371b\":{\"label\":\"Average of kubernetes.volume.fs.used.pct\",\"dataType\":\"number\",\"operationType\":\"average\",\"sourceField\":\"kubernetes.volume.fs.used.pct\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"emptyAsNull\":true,\"format\":{\"id\":\"percent\",\"params\":{\"decimals\":2}}}},\"2e20bf6e-65e7-4ce8-b650-bd1965b1b9a3\":{\"label\":\"Top values of kubernetes.volume.name + 1 other\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"kubernetes.volume.name\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"70dedd1c-d495-4609-ba3a-4a0cae73371b\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"multi_terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false,\"secondaryFields\":[\"agent.hostname\"],\"accuracyMode\":false}}},\"columnOrder\":[\"2e20bf6e-65e7-4ce8-b650-bd1965b1b9a3\",\"c25291b7-309d-4ff3-a861-6c2e3018f05b\",\"70dedd1c-d495-4609-ba3a-4a0cae73371b\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"8b11a0ab-af40-4a72-ba78-8f1f060eeca6\"}},\"currentIndexPatternId\":\"8b11a0ab-af40-4a72-ba78-8f1f060eeca6\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":45,\"w\":24,\"h\":15,\"i\":\"be4d5ee2-e710-4408-a534-4f496b3b472e\"},\"panelIndex\":\"be4d5ee2-e710-4408-a534-4f496b3b472e\",\"embeddableConfig\":{\"savedVis\":{\"id\":\"\",\"title\":\"Pods volumes used\",\"description\":\"\",\"type\":\"metrics\",\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":0,\"id\":\"2ae904a9-1ff4-49ab-ba44-82630534045e\",\"interval\":\"\",\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"afe89741-0fee-475b-ac1e-2520defead1f\",\"label\":\"Pods volumes used\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.volume.fs.used.pct\",\"id\":\"e633bb3f-871d-4eeb-ae11-eb9133eab7b6\",\"type\":\"max\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":[\"kubernetes.volume.name\",\"kubernetes.pod.name\"],\"time_range_mode\":\"entire_time_range\",\"terms_order_by\":\"e633bb3f-871d-4eeb-ae11-eb9133eab7b6\",\"terms_direction\":\"desc\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true,\"isModelInvalid\":false,\"index_pattern_ref_name\":\"metrics_be4d5ee2-e710-4408-a534-4f496b3b472e_0_index_pattern\"},\"uiState\":{},\"data\":{\"aggs\":[],\"searchSource\":{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}}},\"enhancements\":{}}}]","timeRestore":false,"title":"Dashboards for kubernetes pods","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"13086c78-70c4-4e9c-80f5-a12f515244c8","managed":false,"references":[{"id":"95f0b070-db48-11ec-a23d-5dd6249f86b6","name":"f587f652-05f1-4c17-b941-5935cc04e962:panel_f587f652-05f1-4c17-b941-5935cc04e962","type":"lens"},{"id":"kubernetes-9abe1bb0-bcb7-11ec-b64f-7dd6e8e82013","name":"ec7bbaf6-3619-4cb3-ba7c-093b7c110927:panel_ec7bbaf6-3619-4cb3-ba7c-093b7c110927","type":"visualization"},{"id":"kubernetes-9e5c9f30-bcb7-11ec-b64f-7dd6e8e82013","name":"17f22ff6-f31b-4d41-bb9e-8c4d9e4dd9f9:panel_17f22ff6-f31b-4d41-bb9e-8c4d9e4dd9f9","type":"visualization"},{"id":"kubernetes-17849f40-bcb6-11ec-b64f-7dd6e8e82013","name":"9f9fe577-356b-4a30-a3d5-87e659e84097:panel_9f9fe577-356b-4a30-a3d5-87e659e84097","type":"visualization"},{"id":"kubernetes-f8dc7fc0-bcb7-11ec-b64f-7dd6e8e82013","name":"5fc838b1-985b-48f0-9705-8d854a67c18b:panel_5fc838b1-985b-48f0-9705-8d854a67c18b","type":"visualization"},{"id":"8b11a0ab-af40-4a72-ba78-8f1f060eeca6","name":"86d2db49-640a-4315-9542-decc5a02109c:indexpattern-datasource-layer-af68de9e-a8e1-4676-8c87-64848360656a","type":"index-pattern"},{"id":"8b11a0ab-af40-4a72-ba78-8f1f060eeca6","name":"be4d5ee2-e710-4408-a534-4f496b3b472e:metrics_be4d5ee2-e710-4408-a534-4f496b3b472e_0_index_pattern","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDQ3LDRd"}
-{"attributes":{"allowHidden":false,"fieldAttrs":"{}","fieldFormatMap":"{}","fields":"[]","name":"heartbeat","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"heartbeat-*"},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"c4f91074-4f10-4add-b270-cb223da812b2","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDQ4LDRd"}
-{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":10,\"i\":\"3c7fc09e-f5a0-4d43-a92e-45bd1fe16040\"},\"panelIndex\":\"3c7fc09e-f5a0-4d43-a92e-45bd1fe16040\",\"embeddableConfig\":{\"savedVis\":{\"id\":\"\",\"title\":\"Heartbeat - service status\",\"description\":\"\",\"type\":\"metrics\",\"params\":{\"time_range_mode\":\"last_value\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"6fce767d-e1c2-44c3-8962-a2141a2cc747\"}],\"bar_color_rules\":[{\"id\":\"851ea511-73e7-48f0-8c66-3294d74ee577\"}],\"drop_last_bucket\":0,\"gauge_color_rules\":[{\"id\":\"90109565-519e-4c34-9524-a4d9a0a6dde3\"}],\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_width\":10,\"id\":\"f2707392-fa05-46e6-a65e-e11ff771c7a4\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"\",\"id\":\"e2c90f10-1350-43c7-82cd-bfe999c9e149\",\"line_width\":1,\"metrics\":[{\"order\":\"desc\",\"agg_with\":\"concat\",\"id\":\"8fec5be0-e26e-4503-a4cc-2f501de74bf1\",\"type\":\"top_hit\",\"field\":\"state.status\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"url.full\",\"label\":\"Status\",\"color_rules\":[{\"id\":\"0fbf50b5-bbca-40a0-9d20-178edfd00086\"}]},{\"time_range_mode\":\"entire_time_range\",\"id\":\"98ebc066-a978-453f-b189-94cbab1afc47\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"palette\":{\"type\":\"palette\",\"name\":\"default\"},\"metrics\":[{\"order\":\"desc\",\"agg_with\":\"concat\",\"id\":\"128b7b33-ecae-424f-9508-3e5ac304b7ef\",\"type\":\"top_hit\",\"field\":\"@timestamp\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"default\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"override_index_pattern\":0,\"series_drop_last_bucket\":0,\"label\":\"Last check\",\"color_rules\":[{\"id\":\"d39faaf5-f756-4aa6-954d-8ac07a8cc969\"}]},{\"time_range_mode\":\"entire_time_range\",\"id\":\"8db3fb2f-5a7f-4041-90fc-9111c6badc46\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"palette\":{\"type\":\"palette\",\"name\":\"default\"},\"metrics\":[{\"order\":\"desc\",\"agg_with\":\"avg\",\"id\":\"10a839be-0079-4cd2-a479-a0e2935d68eb\",\"type\":\"top_hit\",\"field\":\"monitor.duration.us\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"default\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"override_index_pattern\":0,\"series_drop_last_bucket\":0,\"label\":\"Duration\",\"color_rules\":[{\"id\":\"d39faaf5-f756-4aa6-954d-8ac07a8cc969\"}]}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"table\",\"use_kibana_indexes\":true,\"markdown\":\"{{ icmp_elastic_kibana_kb_http_observability_svc.last.formatted }}\\r\\nsdfsdf\\r\\n\\r\\nsdfsfd\\r\\n{{ tcp_kibana_dev_simpl_europe_eu_443.label }}\",\"pivot_id\":\"url.full\",\"pivot_type\":\"string\",\"pivot_label\":\"Service name\",\"pivot_rows\":10,\"index_pattern_ref_name\":\"metrics_3c7fc09e-f5a0-4d43-a92e-45bd1fe16040_0_index_pattern\"},\"uiState\":{},\"data\":{\"aggs\":[],\"searchSource\":{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}}},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":10,\"w\":48,\"h\":13,\"i\":\"00e7d96e-8f3c-4805-a40e-a62c9c2d3b49\"},\"panelIndex\":\"00e7d96e-8f3c-4805-a40e-a62c9c2d3b49\",\"embeddableConfig\":{\"attributes\":{\"title\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"c4f91074-4f10-4add-b270-cb223da812b2\",\"name\":\"indexpattern-datasource-layer-e0e8b57f-d759-48f8-98fa-731eef9ce714\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"e0e8b57f-d759-48f8-98fa-731eef9ce714\",\"accessors\":[\"e8f54984-0d6c-48f1-a07f-272607b3400e\"],\"position\":\"top\",\"seriesType\":\"area\",\"showGridlines\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"xAccessor\":\"a6ce823f-1b53-422c-b398-827bbe5a81aa\",\"splitAccessor\":\"e2702657-612f-47ec-a68d-a89319d0c1d8\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"e0e8b57f-d759-48f8-98fa-731eef9ce714\":{\"columns\":{\"a6ce823f-1b53-422c-b398-827bbe5a81aa\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"e8f54984-0d6c-48f1-a07f-272607b3400e\":{\"label\":\"Average of monitor.duration.us\",\"dataType\":\"number\",\"operationType\":\"average\",\"sourceField\":\"monitor.duration.us\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"emptyAsNull\":true}},\"e2702657-612f-47ec-a68d-a89319d0c1d8\":{\"label\":\"Top 10 values of url.full\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"url.full\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"e8f54984-0d6c-48f1-a07f-272607b3400e\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}}},\"columnOrder\":[\"e2702657-612f-47ec-a68d-a89319d0c1d8\",\"a6ce823f-1b53-422c-b398-827bbe5a81aa\",\"e8f54984-0d6c-48f1-a07f-272607b3400e\"],\"incompleteColumns\":{},\"sampling\":1}}},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}}]","timeRestore":false,"title":"Dashboard for heartbeats","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-09-20T13:44:13.114Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"c762e881-5b61-4611-8f0f-97d77ae05dfe","managed":false,"references":[{"id":"c4f91074-4f10-4add-b270-cb223da812b2","name":"3c7fc09e-f5a0-4d43-a92e-45bd1fe16040:metrics_3c7fc09e-f5a0-4d43-a92e-45bd1fe16040_0_index_pattern","type":"index-pattern"},{"id":"c4f91074-4f10-4add-b270-cb223da812b2","name":"00e7d96e-8f3c-4805-a40e-a62c9c2d3b49:indexpattern-datasource-layer-e0e8b57f-d759-48f8-98fa-731eef9ce714","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-09-20T13:44:13.114Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzU1NDQ5LDRd"}
-{"excludedObjects":[],"excludedObjectsCount":0,"exportedCount":26,"missingRefCount":0,"missingReferences":[]}
\ No newline at end of file
+{"attributes":{"actionTypeId":".index","config":{"executionTimeField":"@timestamp","index":"custom-alerts","refresh":false},"isMissingSecrets":false,"name":"Kibana index connector","secrets":{}},"coreMigrationVersion":"8.8.0","created_at":"2024-10-29T14:42:39.643Z","id":"4fb0e8df-b302-489e-9fb5-e5e5cebbdb1a","managed":false,"references":[],"type":"action","typeMigrationVersion":"10.1.0","updated_at":"2024-10-29T14:42:39.643Z","version":"WzE5MzE1LDFd"}
+{"attributes":{"allowHidden":false,"fieldAttrs":"{\"container.cpu.usage\":{\"count\":2},\"container.name\":{\"count\":1},\"error.message\":{\"count\":2},\"message\":{\"count\":1},\"process.name\":{\"count\":1},\"system.load.norm.5\":{\"count\":1},\"system.network.in.bytes\":{\"count\":1},\"system.network.out.bytes\":{\"count\":1},\"kubernetes.pod.cpu.usage.node.pct\":{\"count\":4},\"kubernetes.pod.name\":{\"count\":3},\"kubernetes.pod.cpu.usage.nanocores\":{\"count\":1},\"kubernetes.pod.cpu.usage.limit.pct\":{\"count\":1},\"kubernetes.labels.app_kubernetes_io/name\":{\"count\":1},\"kubernetes.labels.app_kubernetes_io/instance\":{\"count\":1}}","fieldFormatMap":"{\"activemq.broker.memory.broker.pct\":{\"id\":\"percent\"},\"activemq.broker.memory.store.pct\":{\"id\":\"percent\"},\"activemq.broker.memory.temp.pct\":{\"id\":\"percent\"},\"activemq.queue.memory.broker.pct\":{\"id\":\"percent\"},\"activemq.topic.memory.broker.pct\":{\"id\":\"percent\"},\"aerospike.namespace.device.available.pct\":{\"id\":\"percent\"},\"aerospike.namespace.device.free.pct\":{\"id\":\"percent\"},\"aerospike.namespace.device.total.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.device.used.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.memory.free.pct\":{\"id\":\"percent\"},\"aerospike.namespace.memory.used.data.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.memory.used.index.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.memory.used.sindex.bytes\":{\"id\":\"bytes\"},\"aerospike.namespace.memory.used.total.bytes\":{\"id\":\"bytes\"},\"aws.ec2.diskio.read.bytes\":{\"id\":\"bytes\"},\"aws.ec2.diskio.write.bytes\":{\"id\":\"bytes\"},\"aws.ec2.network.in.bytes\":{\"id\":\"bytes\"},\"aws.ec2.network.out.bytes\":{\"id\":\"bytes\"},\"aws.rds.burst_balance.pct\":{\"id\":\"percent\"},\"aws.rds.cpu.total.pct\":{\"id\":\"percent\"},\"aws.rds.disk_usage.bin_log.bytes\":{\"id\":\"bytes\"},\"aws.rds.free_local_storage.bytes\":{\"id\":\"bytes\"},\"aws.rds.free_storage.bytes\":{\"id\":\"bytes\"},\"aws.rds.freeable_memory.bytes\":{\"id\":\"bytes\"},\"aws.rds.latency.commit\":{\"id\":\"duration\"},\"aws.rds.latency.ddl\":{\"id\":\"duration\"},\"aws.rds.latency.delete\":{\"id\":\"duration\"},\"aws.rds.latency.dml\":{\"id\":\"duration\"},\"aws.rds.latency.insert\":{\"id\":\"duration\"},\"aws.rds.latency.read\":{\"id\":\"duration\"},\"aws.rds.latency.select\":{\"id\":\"duration\"},\"aws.rds.latency.update\":{\"id\":\"duration\"},\"aws.rds.latency.write\":{\"id\":\"duration\"},\"aws.rds.replica_lag.sec\":{\"id\":\"duration\"},\"aws.rds.swap_usage.bytes\":{\"id\":\"bytes\"},\"aws.rds.volume.read.iops\":{\"id\":\"bytes\"},\"aws.rds.volume.write.iops\":{\"id\":\"bytes\"},\"aws.rds.volume_used.bytes\":{\"id\":\"bytes\"},\"aws.s3_daily_storage.bucket.size.bytes\":{\"id\":\"bytes\"},\"aws.s3_request.downloaded.bytes\":{\"id\":\"bytes\"},\"aws.s3_request.latency.first_byte.ms\":{\"id\":\"duration\"},\"aws.s3_request.latency.total_request.ms\":{\"id\":\"duration\"},\"aws.s3_request.requests.select_returned.bytes\":{\"id\":\"bytes\"},\"aws.s3_request.requests.select_scanned.bytes\":{\"id\":\"bytes\"},\"aws.s3_request.uploaded.bytes\":{\"id\":\"bytes\"},\"aws.sqs.oldest_message_age.sec\":{\"id\":\"duration\"},\"aws.sqs.sent_message_size.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.cpu.kernel.norm.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.kernel.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.system.norm.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.system.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.total.norm.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.total.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.user.norm.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.cpu.user.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.diskio.read.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.diskio.summary.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.diskio.write.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.commit.peak\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.commit.total\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.limit\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.private_working_set.total\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.rss.pct\":{\"id\":\"percent\"},\"awsfargate.task_stats.memory.rss.total\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.usage.max\":{\"id\":\"bytes\"},\"awsfargate.task_stats.memory.usage.total\":{\"id\":\"bytes\"},\"awsfargate.task_stats.network.*.inbound.bytes\":{\"id\":\"bytes\"},\"awsfargate.task_stats.network.*.outbound.bytes\":{\"id\":\"bytes\"},\"ceph.cluster_disk.available.bytes\":{\"id\":\"bytes\"},\"ceph.cluster_disk.total.bytes\":{\"id\":\"bytes\"},\"ceph.cluster_disk.used.bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.degraded.ratio\":{\"id\":\"percent\"},\"ceph.cluster_status.misplace.ratio\":{\"id\":\"percent\"},\"ceph.cluster_status.pg.avail_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.pg.data_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.pg.total_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.pg.used_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.traffic.read_bytes\":{\"id\":\"bytes\"},\"ceph.cluster_status.traffic.write_bytes\":{\"id\":\"bytes\"},\"ceph.monitor_health.store_stats.log.bytes\":{\"id\":\"bytes\"},\"ceph.monitor_health.store_stats.misc.bytes\":{\"id\":\"bytes\"},\"ceph.monitor_health.store_stats.sst.bytes\":{\"id\":\"bytes\"},\"ceph.monitor_health.store_stats.total.bytes\":{\"id\":\"bytes\"},\"ceph.osd_df.available.bytes\":{\"id\":\"bytes\"},\"ceph.osd_df.total.byte\":{\"id\":\"bytes\"},\"ceph.osd_df.used.byte\":{\"id\":\"bytes\"},\"ceph.osd_df.used.pct\":{\"id\":\"percent\"},\"ceph.pool_disk.stats.available.bytes\":{\"id\":\"bytes\"},\"ceph.pool_disk.stats.used.bytes\":{\"id\":\"bytes\"},\"client.bytes\":{\"id\":\"bytes\"},\"client.nat.port\":{\"id\":\"string\"},\"client.port\":{\"id\":\"string\"},\"containerd.blkio.read.bytes\":{\"id\":\"bytes\"},\"containerd.blkio.summary.bytes\":{\"id\":\"bytes\"},\"containerd.blkio.write.bytes\":{\"id\":\"bytes\"},\"containerd.cpu.usage.kernel.pct\":{\"id\":\"percent\"},\"containerd.cpu.usage.total.pct\":{\"id\":\"percent\"},\"containerd.cpu.usage.user.pct\":{\"id\":\"percent\"},\"containerd.memory.activeFiles\":{\"id\":\"bytes\"},\"containerd.memory.cache\":{\"id\":\"bytes\"},\"containerd.memory.inactiveFiles\":{\"id\":\"bytes\"},\"containerd.memory.kernel.limit\":{\"id\":\"bytes\"},\"containerd.memory.kernel.max\":{\"id\":\"bytes\"},\"containerd.memory.kernel.total\":{\"id\":\"bytes\"},\"containerd.memory.rss\":{\"id\":\"bytes\"},\"containerd.memory.swap.limit\":{\"id\":\"bytes\"},\"containerd.memory.swap.max\":{\"id\":\"bytes\"},\"containerd.memory.swap.total\":{\"id\":\"bytes\"},\"containerd.memory.usage.limit\":{\"id\":\"bytes\"},\"containerd.memory.usage.max\":{\"id\":\"bytes\"},\"containerd.memory.usage.pct\":{\"id\":\"percent\"},\"containerd.memory.usage.total\":{\"id\":\"bytes\"},\"containerd.memory.workingset.pct\":{\"id\":\"percent\"},\"coredns.stats.dns.request.duration.ns.sum\":{\"id\":\"duration\"},\"couchbase.bucket.data.used.bytes\":{\"id\":\"bytes\"},\"couchbase.bucket.disk.used.bytes\":{\"id\":\"bytes\"},\"couchbase.bucket.memory.used.bytes\":{\"id\":\"bytes\"},\"couchbase.bucket.quota.ram.bytes\":{\"id\":\"bytes\"},\"couchbase.bucket.quota.use.pct\":{\"id\":\"percent\"},\"couchbase.cluster.hdd.free.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.hdd.quota.total.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.hdd.total.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.hdd.used.by_data.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.hdd.used.value.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.quota.total.per_node.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.quota.total.value.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.quota.used.per_node.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.quota.used.value.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.total.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.used.by_data.bytes\":{\"id\":\"bytes\"},\"couchbase.cluster.ram.used.value.bytes\":{\"id\":\"bytes\"},\"couchbase.node.couch.docs.data_size.bytes\":{\"id\":\"bytes\"},\"couchbase.node.couch.docs.disk_size.bytes\":{\"id\":\"bytes\"},\"couchbase.node.mcd_memory.allocated.bytes\":{\"id\":\"bytes\"},\"destination.bytes\":{\"id\":\"bytes\"},\"destination.nat.port\":{\"id\":\"string\"},\"destination.port\":{\"id\":\"string\"},\"docker.cpu.core.*.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.core.*.pct\":{\"id\":\"percent\"},\"docker.cpu.kernel.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.kernel.pct\":{\"id\":\"percent\"},\"docker.cpu.system.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.system.pct\":{\"id\":\"percent\"},\"docker.cpu.total.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.total.pct\":{\"id\":\"percent\"},\"docker.cpu.user.norm.pct\":{\"id\":\"percent\"},\"docker.cpu.user.pct\":{\"id\":\"percent\"},\"docker.diskio.read.bytes\":{\"id\":\"bytes\"},\"docker.diskio.summary.bytes\":{\"id\":\"bytes\"},\"docker.diskio.write.bytes\":{\"id\":\"bytes\"},\"docker.memory.commit.peak\":{\"id\":\"bytes\"},\"docker.memory.commit.total\":{\"id\":\"bytes\"},\"docker.memory.limit\":{\"id\":\"bytes\"},\"docker.memory.private_working_set.total\":{\"id\":\"bytes\"},\"docker.memory.rss.pct\":{\"id\":\"percent\"},\"docker.memory.rss.total\":{\"id\":\"bytes\"},\"docker.memory.usage.max\":{\"id\":\"bytes\"},\"docker.memory.usage.pct\":{\"id\":\"percent\"},\"docker.memory.usage.total\":{\"id\":\"bytes\"},\"docker.network.inbound.bytes\":{\"id\":\"bytes\"},\"docker.network.outbound.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.primaries.segments.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.primaries.store.size.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.primaries.store.total_data_set_size.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.total.segments.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.total.store.size.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.summary.total.store.total_data_set_size.bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.total.segments.memory_in_bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.total.store.size_in_bytes\":{\"id\":\"bytes\"},\"elasticsearch.index.total.store.total_data_set_size_in_bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.jvm.memory.heap.init.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.jvm.memory.heap.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.jvm.memory.nonheap.init.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.jvm.memory.nonheap.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.fs.summary.available.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.fs.summary.free.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.fs.summary.total.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.all.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.combined_coordinating_and_primary.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.coordinating.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.primary.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.current.replica.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.limit_in_bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.all.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.combined_coordinating_and_primary.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.coordinating.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.coordinating.rejections\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.primary.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.primary.rejections\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.replica.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indexing_pressure.memory.total.replica.rejections\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.fielddata.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.query_cache.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.request_cache.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.doc_values.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.fixed_bit_set.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.index_writer.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.norms.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.points.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.stored_fields.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.term_vectors.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.terms.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.indices.segments.version_map.memory.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.heap.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.heap.used.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.heap.used.pct\":{\"id\":\"percent\"},\"elasticsearch.node.stats.jvm.mem.pools.old.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.old.peak.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.old.peak_max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.old.used.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.survivor.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.survivor.peak.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.survivor.peak_max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.survivor.used.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.young.max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.young.peak.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.young.peak_max.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.jvm.mem.pools.young.used.bytes\":{\"id\":\"bytes\"},\"elasticsearch.node.stats.process.cpu.pct\":{\"id\":\"percent\"},\"elf.header.entrypoint\":{\"id\":\"string\"},\"elf.sections.chi2\":{\"id\":\"number\"},\"elf.sections.entropy\":{\"id\":\"number\"},\"elf.sections.physical_size\":{\"id\":\"bytes\"},\"elf.sections.virtual_address\":{\"id\":\"string\"},\"elf.sections.virtual_size\":{\"id\":\"string\"},\"enterprisesearch.health.jvm.memory_usage.heap_committed.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.heap_init.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.heap_max.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.heap_used.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.non_heap_committed.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.health.jvm.memory_usage.non_heap_init.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.stats.http.network.received.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.stats.http.network.received.bytes_per_sec\":{\"id\":\"bytes\"},\"enterprisesearch.stats.http.network.sent.bytes\":{\"id\":\"bytes\"},\"enterprisesearch.stats.http.network.sent.bytes_per_sec\":{\"id\":\"bytes\"},\"etcd.disk.mvcc_db_total_size.bytes\":{\"id\":\"bytes\"},\"etcd.memory.go_memstats_alloc.bytes\":{\"id\":\"bytes\"},\"etcd.network.client_grpc_received.bytes\":{\"id\":\"bytes\"},\"etcd.network.client_grpc_sent.bytes\":{\"id\":\"bytes\"},\"event.duration\":{\"id\":\"duration\",\"params\":{\"inputFormat\":\"nanoseconds\",\"outputFormat\":\"asMilliseconds\",\"outputPrecision\":1}},\"event.sequence\":{\"id\":\"string\"},\"event.severity\":{\"id\":\"string\"},\"file.elf.header.entrypoint\":{\"id\":\"string\"},\"file.elf.sections.chi2\":{\"id\":\"number\"},\"file.elf.sections.entropy\":{\"id\":\"number\"},\"file.elf.sections.physical_size\":{\"id\":\"bytes\"},\"file.elf.sections.virtual_address\":{\"id\":\"string\"},\"file.elf.sections.virtual_size\":{\"id\":\"string\"},\"golang.heap.allocations.active\":{\"id\":\"bytes\"},\"golang.heap.allocations.allocated\":{\"id\":\"bytes\"},\"golang.heap.allocations.idle\":{\"id\":\"bytes\"},\"golang.heap.allocations.total\":{\"id\":\"bytes\"},\"golang.heap.gc.next_gc_limit\":{\"id\":\"bytes\"},\"golang.heap.system.obtained\":{\"id\":\"bytes\"},\"golang.heap.system.released\":{\"id\":\"bytes\"},\"golang.heap.system.stack\":{\"id\":\"bytes\"},\"golang.heap.system.total\":{\"id\":\"bytes\"},\"haproxy.info.idle.pct\":{\"id\":\"percent\"},\"haproxy.info.memory.max.bytes\":{\"id\":\"bytes\"},\"haproxy.info.ssl.frontend.session_reuse.pct\":{\"id\":\"percent\"},\"haproxy.stat.compressor.bypassed.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.compressor.in.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.compressor.out.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.compressor.response.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.in.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.out.bytes\":{\"id\":\"bytes\"},\"haproxy.stat.throttle.pct\":{\"id\":\"percent\"},\"http.request.body.bytes\":{\"id\":\"bytes\"},\"http.request.bytes\":{\"id\":\"bytes\"},\"http.response.body.bytes\":{\"id\":\"bytes\"},\"http.response.bytes\":{\"id\":\"bytes\"},\"http.response.status_code\":{\"id\":\"string\"},\"index_stats.total.segments.memory_in_bytes\":{\"id\":\"bytes\"},\"istio.citadel.grpc.server.handling.latency.ms.sum\":{\"id\":\"duration\"},\"istio.galley.runtime.processor.event_span.duration.ms.sum\":{\"id\":\"duration\"},\"istio.galley.runtime.processor.snapshot_lifetime.duration.ms.sum\":{\"id\":\"duration\"},\"istio.mesh.request.duration.ms.sum\":{\"id\":\"duration\"},\"kibana.stats.process.memory.heap.size_limit.bytes\":{\"id\":\"bytes\"},\"kibana.stats.process.memory.heap.total.bytes\":{\"id\":\"bytes\"},\"kibana.stats.process.memory.heap.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.apiserver.process.memory.resident.bytes\":{\"id\":\"bytes\"},\"kubernetes.apiserver.process.memory.virtual.bytes\":{\"id\":\"bytes\"},\"kubernetes.apiserver.response.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.apiserver.watch.events.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.container.cpu.usage.limit.pct\":{\"id\":\"percent\"},\"kubernetes.container.cpu.usage.node.pct\":{\"id\":\"percent\"},\"kubernetes.container.logs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.logs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.logs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.limit.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.request.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.rss.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.usage.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.usage.limit.pct\":{\"id\":\"percent\"},\"kubernetes.container.memory.usage.node.pct\":{\"id\":\"percent\"},\"kubernetes.container.memory.workingset.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.memory.workingset.limit.pct\":{\"id\":\"percent\"},\"kubernetes.container.rootfs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.rootfs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.container.rootfs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.controllermanager.client.request.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.controllermanager.client.response.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.controllermanager.process.memory.resident.bytes\":{\"id\":\"bytes\"},\"kubernetes.controllermanager.process.memory.virtual.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.fs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.fs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.fs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.allocatable.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.rss.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.usage.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.memory.workingset.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.network.rx.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.network.tx.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.runtime.imagefs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.runtime.imagefs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.node.runtime.imagefs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.cpu.usage.limit.pct\":{\"id\":\"percent\"},\"kubernetes.pod.cpu.usage.node.pct\":{\"id\":\"percent\"},\"kubernetes.pod.memory.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.memory.rss.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.memory.usage.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.memory.usage.limit.pct\":{\"id\":\"percent\"},\"kubernetes.pod.memory.usage.node.pct\":{\"id\":\"percent\"},\"kubernetes.pod.memory.working_set.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.memory.working_set.limit.pct\":{\"id\":\"percent\"},\"kubernetes.pod.network.rx.bytes\":{\"id\":\"bytes\"},\"kubernetes.pod.network.tx.bytes\":{\"id\":\"bytes\"},\"kubernetes.proxy.client.request.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.proxy.client.response.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.proxy.process.memory.resident.bytes\":{\"id\":\"bytes\"},\"kubernetes.proxy.process.memory.virtual.bytes\":{\"id\":\"bytes\"},\"kubernetes.scheduler.client.request.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.scheduler.client.response.size.bytes.sum\":{\"id\":\"bytes\"},\"kubernetes.scheduler.process.memory.resident.bytes\":{\"id\":\"bytes\"},\"kubernetes.scheduler.process.memory.virtual.bytes\":{\"id\":\"bytes\"},\"kubernetes.system.memory.rss.bytes\":{\"id\":\"bytes\"},\"kubernetes.system.memory.usage.bytes\":{\"id\":\"bytes\"},\"kubernetes.system.memory.workingset.bytes\":{\"id\":\"bytes\"},\"kubernetes.volume.fs.available.bytes\":{\"id\":\"bytes\"},\"kubernetes.volume.fs.capacity.bytes\":{\"id\":\"bytes\"},\"kubernetes.volume.fs.inodes.pct\":{\"id\":\"percent\"},\"kubernetes.volume.fs.used.bytes\":{\"id\":\"bytes\"},\"kubernetes.volume.fs.used.pct\":{\"id\":\"percent\"},\"linux.iostat.read.per_sec.bytes\":{\"id\":\"bytes\"},\"linux.iostat.write.per_sec.bytes\":{\"id\":\"bytes\"},\"linux.memory.hugepages.default_size\":{\"id\":\"bytes\"},\"linux.memory.hugepages.free\":{\"id\":\"number\"},\"linux.memory.hugepages.reserved\":{\"id\":\"number\"},\"linux.memory.hugepages.surplus\":{\"id\":\"number\"},\"linux.memory.hugepages.total\":{\"id\":\"number\"},\"linux.memory.hugepages.used.bytes\":{\"id\":\"bytes\"},\"linux.memory.hugepages.used.pct\":{\"id\":\"percent\"},\"linux.memory.page_stats.direct_efficiency.pct\":{\"id\":\"percent\"},\"linux.memory.page_stats.kswapd_efficiency.pct\":{\"id\":\"percent\"},\"linux.memory.page_stats.pgfree.pages\":{\"id\":\"number\"},\"linux.memory.page_stats.pgscan_direct.pages\":{\"id\":\"number\"},\"linux.memory.page_stats.pgscan_kswapd.pages\":{\"id\":\"number\"},\"linux.memory.page_stats.pgsteal_direct.pages\":{\"id\":\"number\"},\"linux.memory.page_stats.pgsteal_kswapd.pages\":{\"id\":\"number\"},\"linux.memory.swap.free\":{\"id\":\"bytes\"},\"linux.memory.swap.total\":{\"id\":\"bytes\"},\"linux.memory.swap.used.bytes\":{\"id\":\"bytes\"},\"linux.memory.swap.used.pct\":{\"id\":\"percent\"},\"linux.pressure.cpu.some.10.pct\":{\"id\":\"percent\"},\"linux.pressure.cpu.some.300.pct\":{\"id\":\"percent\"},\"linux.pressure.cpu.some.60.pct\":{\"id\":\"percent\"},\"linux.pressure.io.full.10.pct\":{\"id\":\"percent\"},\"linux.pressure.io.full.300.pct\":{\"id\":\"percent\"},\"linux.pressure.io.full.60.pct\":{\"id\":\"percent\"},\"linux.pressure.io.some.10.pct\":{\"id\":\"percent\"},\"linux.pressure.io.some.300.pct\":{\"id\":\"percent\"},\"linux.pressure.io.some.60.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.full.10.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.full.300.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.full.60.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.some.10.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.some.300.pct\":{\"id\":\"percent\"},\"linux.pressure.memory.some.60.pct\":{\"id\":\"percent\"},\"log.syslog.facility.code\":{\"id\":\"string\"},\"log.syslog.priority\":{\"id\":\"string\"},\"mongodb.dbstats.avg_obj_size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.data_size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.extent_free_list.size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.file_size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.index_size.bytes\":{\"id\":\"bytes\"},\"mongodb.dbstats.storage_size.bytes\":{\"id\":\"bytes\"},\"mongodb.replstatus.headroom.max\":{\"id\":\"duration\"},\"mongodb.replstatus.headroom.min\":{\"id\":\"duration\"},\"mongodb.replstatus.lag.max\":{\"id\":\"duration\"},\"mongodb.replstatus.lag.min\":{\"id\":\"duration\"},\"mongodb.replstatus.oplog.size.allocated\":{\"id\":\"bytes\"},\"mongodb.replstatus.oplog.size.used\":{\"id\":\"bytes\"},\"mongodb.status.extra_info.heap_usage.bytes\":{\"id\":\"bytes\"},\"mongodb.status.network.in.bytes\":{\"id\":\"bytes\"},\"mongodb.status.network.out.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.cache.dirty.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.cache.maximum.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.cache.used.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.log.max_file_size.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.log.size.bytes\":{\"id\":\"bytes\"},\"mongodb.status.wired_tiger.log.write.bytes\":{\"id\":\"bytes\"},\"mysql.status.bytes.received\":{\"id\":\"bytes\"},\"mysql.status.bytes.sent\":{\"id\":\"bytes\"},\"nats.connection.idle_time\":{\"id\":\"duration\"},\"nats.connection.in.bytes\":{\"id\":\"bytes\"},\"nats.connection.out.bytes\":{\"id\":\"bytes\"},\"nats.connection.pending_bytes\":{\"id\":\"bytes\"},\"nats.connection.uptime\":{\"id\":\"duration\"},\"nats.route.in.bytes\":{\"id\":\"bytes\"},\"nats.route.out.bytes\":{\"id\":\"bytes\"},\"nats.stats.cpu\":{\"id\":\"percent\"},\"nats.stats.in.bytes\":{\"id\":\"bytes\"},\"nats.stats.mem.bytes\":{\"id\":\"bytes\"},\"nats.stats.out.bytes\":{\"id\":\"bytes\"},\"nats.stats.uptime\":{\"id\":\"duration\"},\"nats.subscriptions.cache.hit_rate\":{\"id\":\"percent\"},\"network.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.data_file.size.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.data_file.size.free.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.data_file.size.max.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.space.free.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.space.total.bytes\":{\"id\":\"bytes\"},\"oracle.tablespace.space.used.bytes\":{\"id\":\"bytes\"},\"package.size\":{\"id\":\"string\"},\"process.cpu.pct\":{\"id\":\"percent\"},\"process.elf.header.entrypoint\":{\"id\":\"string\"},\"process.elf.sections.chi2\":{\"id\":\"number\"},\"process.elf.sections.entropy\":{\"id\":\"number\"},\"process.elf.sections.physical_size\":{\"id\":\"bytes\"},\"process.elf.sections.virtual_address\":{\"id\":\"string\"},\"process.elf.sections.virtual_size\":{\"id\":\"string\"},\"process.memory.pct\":{\"id\":\"percent\"},\"process.parent.elf.header.entrypoint\":{\"id\":\"string\"},\"process.parent.elf.sections.chi2\":{\"id\":\"number\"},\"process.parent.elf.sections.entropy\":{\"id\":\"number\"},\"process.parent.elf.sections.physical_size\":{\"id\":\"bytes\"},\"process.parent.elf.sections.virtual_address\":{\"id\":\"string\"},\"process.parent.elf.sections.virtual_size\":{\"id\":\"string\"},\"process.parent.pgid\":{\"id\":\"string\"},\"process.parent.pid\":{\"id\":\"string\"},\"process.parent.thread.id\":{\"id\":\"string\"},\"process.pgid\":{\"id\":\"string\"},\"process.pid\":{\"id\":\"string\"},\"process.thread.id\":{\"id\":\"string\"},\"rabbitmq.connection.frame_max\":{\"id\":\"bytes\"},\"rabbitmq.node.disk.free.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.disk.free.limit.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.gc.reclaimed.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.io.read.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.io.write.bytes\":{\"id\":\"bytes\"},\"rabbitmq.node.mem.limit.bytes\":{\"id\":\"bytes\"},\"rabbitmq.queue.consumers.utilisation.pct\":{\"id\":\"percent\"},\"rabbitmq.queue.memory.bytes\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.active\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.allocated\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.fragmentation.bytes\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.resident\":{\"id\":\"bytes\"},\"redis.info.memory.allocator_stats.rss.bytes\":{\"id\":\"bytes\"},\"redis.info.memory.fragmentation.bytes\":{\"id\":\"bytes\"},\"redis.info.memory.max.value\":{\"id\":\"bytes\"},\"redis.info.memory.used.dataset\":{\"id\":\"bytes\"},\"redis.info.memory.used.lua\":{\"id\":\"bytes\"},\"redis.info.memory.used.peak\":{\"id\":\"bytes\"},\"redis.info.memory.used.rss\":{\"id\":\"bytes\"},\"redis.info.memory.used.value\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.buffer.size\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.copy_on_write.last_size\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.rewrite.buffer.size\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.rewrite.current_time.sec\":{\"id\":\"duration\"},\"redis.info.persistence.aof.rewrite.last_time.sec\":{\"id\":\"duration\"},\"redis.info.persistence.aof.size.base\":{\"id\":\"bytes\"},\"redis.info.persistence.aof.size.current\":{\"id\":\"bytes\"},\"redis.info.persistence.rdb.bgsave.current_time.sec\":{\"id\":\"duration\"},\"redis.info.persistence.rdb.bgsave.last_time.sec\":{\"id\":\"duration\"},\"redis.info.persistence.rdb.copy_on_write.last_size\":{\"id\":\"bytes\"},\"redis.info.replication.backlog.size\":{\"id\":\"bytes\"},\"redis.info.replication.master.last_io_seconds_ago\":{\"id\":\"duration\"},\"redis.info.replication.master.sync.last_io_seconds_ago\":{\"id\":\"duration\"},\"redis.info.replication.master.sync.left_bytes\":{\"id\":\"bytes\"},\"server.bytes\":{\"id\":\"bytes\"},\"server.nat.port\":{\"id\":\"string\"},\"server.port\":{\"id\":\"string\"},\"source.bytes\":{\"id\":\"bytes\"},\"source.nat.port\":{\"id\":\"string\"},\"source.port\":{\"id\":\"string\"},\"system.core.idle.pct\":{\"id\":\"percent\"},\"system.core.iowait.pct\":{\"id\":\"percent\"},\"system.core.irq.pct\":{\"id\":\"percent\"},\"system.core.nice.pct\":{\"id\":\"percent\"},\"system.core.softirq.pct\":{\"id\":\"percent\"},\"system.core.steal.pct\":{\"id\":\"percent\"},\"system.core.system.pct\":{\"id\":\"percent\"},\"system.core.total.pct\":{\"id\":\"percent\"},\"system.core.user.pct\":{\"id\":\"percent\"},\"system.cpu.idle.norm.pct\":{\"id\":\"percent\"},\"system.cpu.idle.pct\":{\"id\":\"percent\"},\"system.cpu.iowait.norm.pct\":{\"id\":\"percent\"},\"system.cpu.iowait.pct\":{\"id\":\"percent\"},\"system.cpu.irq.norm.pct\":{\"id\":\"percent\"},\"system.cpu.irq.pct\":{\"id\":\"percent\"},\"system.cpu.nice.norm.pct\":{\"id\":\"percent\"},\"system.cpu.nice.pct\":{\"id\":\"percent\"},\"system.cpu.softirq.norm.pct\":{\"id\":\"percent\"},\"system.cpu.softirq.pct\":{\"id\":\"percent\"},\"system.cpu.steal.norm.pct\":{\"id\":\"percent\"},\"system.cpu.steal.pct\":{\"id\":\"percent\"},\"system.cpu.system.norm.pct\":{\"id\":\"percent\"},\"system.cpu.system.pct\":{\"id\":\"percent\"},\"system.cpu.total.norm.pct\":{\"id\":\"percent\"},\"system.cpu.total.pct\":{\"id\":\"percent\"},\"system.cpu.user.norm.pct\":{\"id\":\"percent\"},\"system.cpu.user.pct\":{\"id\":\"percent\"},\"system.diskio.read.bytes\":{\"id\":\"bytes\"},\"system.diskio.write.bytes\":{\"id\":\"bytes\"},\"system.entropy.pct\":{\"id\":\"percent\"},\"system.filesystem.available\":{\"id\":\"bytes\"},\"system.filesystem.free\":{\"id\":\"bytes\"},\"system.filesystem.total\":{\"id\":\"bytes\"},\"system.filesystem.used.bytes\":{\"id\":\"bytes\"},\"system.filesystem.used.pct\":{\"id\":\"percent\"},\"system.fsstat.total_size.free\":{\"id\":\"bytes\"},\"system.fsstat.total_size.total\":{\"id\":\"bytes\"},\"system.fsstat.total_size.used\":{\"id\":\"bytes\"},\"system.memory.actual.free\":{\"id\":\"bytes\"},\"system.memory.actual.used.bytes\":{\"id\":\"bytes\"},\"system.memory.actual.used.pct\":{\"id\":\"percent\"},\"system.memory.cached\":{\"id\":\"bytes\"},\"system.memory.free\":{\"id\":\"bytes\"},\"system.memory.swap.free\":{\"id\":\"bytes\"},\"system.memory.swap.total\":{\"id\":\"bytes\"},\"system.memory.swap.used.bytes\":{\"id\":\"bytes\"},\"system.memory.swap.used.pct\":{\"id\":\"percent\"},\"system.memory.total\":{\"id\":\"bytes\"},\"system.memory.used.bytes\":{\"id\":\"bytes\"},\"system.memory.used.pct\":{\"id\":\"percent\"},\"system.network.in.bytes\":{\"id\":\"bytes\"},\"system.network.out.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.blkio.total.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.cpu.pressure.full.10.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.full.300.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.full.60.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.some.10.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.some.300.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.some.60.pct\":{\"id\":\"percent\"},\"system.process.cgroup.cpu.pressure.some.total\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.full.10.pct\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.full.300.pct\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.full.60.pct\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.some.10.pct\":{\"id\":\"percent\"},\"system.process.cgroup.io.pressure.some.60.pct\":{\"id\":\"percent\"},\"system.process.cgroup.memory.kmem.limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem.usage.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem.usage.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem_tcp.limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem_tcp.usage.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.kmem_tcp.usage.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.high.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.low.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.usage.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.mem.usage.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.high.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.low.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.usage.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.memsw.usage.max.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.active_anon.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.active_file.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.cache.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.hierarchical_memory_limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.hierarchical_memsw_limit.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.inactive_anon.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.inactive_file.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.mapped_file.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.rss.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.rss_huge.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.swap.bytes\":{\"id\":\"bytes\"},\"system.process.cgroup.memory.stats.unevictable.bytes\":{\"id\":\"bytes\"},\"system.process.cpu.total.norm.pct\":{\"id\":\"percent\"},\"system.process.cpu.total.pct\":{\"id\":\"percent\"},\"system.process.memory.rss.bytes\":{\"id\":\"bytes\"},\"system.process.memory.rss.pct\":{\"id\":\"percent\"},\"system.process.memory.share\":{\"id\":\"bytes\"},\"system.process.memory.size\":{\"id\":\"bytes\"},\"system.service.resources.network.in.bytes\":{\"id\":\"bytes\"},\"system.service.resources.network.in.packets\":{\"id\":\"bytes\"},\"system.socket.summary.tcp.memory\":{\"id\":\"bytes\"},\"system.socket.summary.udp.memory\":{\"id\":\"bytes\"},\"system.uptime.duration.ms\":{\"id\":\"duration\",\"params\":{\"inputFormat\":\"milliseconds\"}},\"threat.enrichments.indicator.file.elf.header.entrypoint\":{\"id\":\"string\"},\"threat.enrichments.indicator.file.elf.sections.chi2\":{\"id\":\"number\"},\"threat.enrichments.indicator.file.elf.sections.entropy\":{\"id\":\"number\"},\"threat.enrichments.indicator.file.elf.sections.physical_size\":{\"id\":\"bytes\"},\"threat.enrichments.indicator.file.elf.sections.virtual_address\":{\"id\":\"string\"},\"threat.enrichments.indicator.file.elf.sections.virtual_size\":{\"id\":\"string\"},\"threat.enrichments.indicator.url.port\":{\"id\":\"string\"},\"threat.indicator.file.elf.header.entrypoint\":{\"id\":\"string\"},\"threat.indicator.file.elf.sections.chi2\":{\"id\":\"number\"},\"threat.indicator.file.elf.sections.entropy\":{\"id\":\"number\"},\"threat.indicator.file.elf.sections.physical_size\":{\"id\":\"bytes\"},\"threat.indicator.file.elf.sections.virtual_address\":{\"id\":\"string\"},\"threat.indicator.file.elf.sections.virtual_size\":{\"id\":\"string\"},\"threat.indicator.url.port\":{\"id\":\"string\"},\"url.port\":{\"id\":\"string\"},\"vsphere.datastore.capacity.free.bytes\":{\"id\":\"bytes\"},\"vsphere.datastore.capacity.total.bytes\":{\"id\":\"bytes\"},\"vsphere.datastore.capacity.used.bytes\":{\"id\":\"bytes\"},\"vsphere.datastore.capacity.used.pct\":{\"id\":\"percent\"},\"vsphere.host.memory.free.bytes\":{\"id\":\"bytes\"},\"vsphere.host.memory.total.bytes\":{\"id\":\"bytes\"},\"vsphere.host.memory.used.bytes\":{\"id\":\"bytes\"},\"vsphere.virtualmachine.memory.free.guest.bytes\":{\"id\":\"bytes\"},\"vsphere.virtualmachine.memory.total.guest.bytes\":{\"id\":\"bytes\"},\"vsphere.virtualmachine.memory.used.guest.bytes\":{\"id\":\"bytes\"},\"vsphere.virtualmachine.memory.used.host.bytes\":{\"id\":\"bytes\"},\"windows.service.uptime.ms\":{\"id\":\"duration\",\"params\":{\"inputFormat\":\"milliseconds\"}}}","fields":"[]","name":"metricbeat-*","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"metricbeat-*"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"metricbeat-*","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-10-29T15:13:09.356Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIwNzMsMV0="}
+{"attributes":{"actions":[{"actionRef":"action_0","actionTypeId":".index","frequency":{"notifyWhen":"onActionGroupChange","summary":false,"throttle":null},"group":"custom_threshold.fired","params":{"documents":[{"@timestamp":"{{date}}","current_disk_usage":"{{context.value}}","kubernetes_namespace":"{{context.group.1.value}}","pod_name":"{{context.group.0.value}}","rule_name":"{{rule.name}}","threshold":"{{params.criteria.0.threshold.0}}"}]},"uuid":"533540c7-347a-4f1f-a970-1ed8b1198f7d"}],"alertTypeId":"observability.rules.custom_threshold","apiKey":null,"apiKeyCreatedByUser":null,"apiKeyOwner":null,"consumer":"stackAlerts","createdAt":"2024-10-29T15:54:24.579Z","createdBy":"elastic","enabled":false,"executionStatus":{"error":null,"lastExecutionDate":"2024-11-06T10:46:10.345Z","status":"pending","warning":null},"lastRun":{"alertsCount":{"active":19,"ignored":0,"new":0,"recovered":0},"outcome":"succeeded","outcomeMsg":null,"outcomeOrder":0,"warning":null},"legacyId":null,"meta":{"versionApiKeyLastmodified":"8.15.1"},"monitoring":{"run":{"calculated_metrics":{"p50":1108,"p95":1292.5,"p99":1524.5,"success_ratio":1},"history":[{"duration":1236,"success":true,"timestamp":1730877395716},{"duration":1136,"success":true,"timestamp":1730877458693},{"duration":1148,"success":true,"timestamp":1730877521687},{"duration":1187,"success":true,"timestamp":1730877584701},{"duration":1290,"success":true,"timestamp":1730877647688},{"duration":995,"success":true,"timestamp":1730877710685},{"duration":1177,"success":true,"timestamp":1730877773684},{"duration":1195,"success":true,"timestamp":1730877836705},{"duration":1063,"success":true,"timestamp":1730877899695},{"duration":1140,"success":true,"timestamp":1730877962684},{"duration":960,"success":true,"timestamp":1730878025706},{"duration":1033,"success":true,"timestamp":1730878088709},{"duration":1011,"success":true,"timestamp":1730878151711},{"duration":1357,"success":true,"timestamp":1730878214734},{"duration":1145,"success":true,"timestamp":1730878277712},{"duration":1157,"success":true,"timestamp":1730878340715},{"duration":1160,"success":true,"timestamp":1730878403721},{"duration":1085,"success":true,"timestamp":1730878466736},{"duration":1088,"success":true,"timestamp":1730878529706},{"duration":1053,"success":true,"timestamp":1730878592714},{"duration":1135,"success":true,"timestamp":1730878655733},{"duration":1255,"success":true,"timestamp":1730878718730},{"duration":992,"success":true,"timestamp":1730878781742},{"duration":1218,"success":true,"timestamp":1730878844773},{"duration":1130,"success":true,"timestamp":1730878907750},{"duration":1217,"success":true,"timestamp":1730878970756},{"duration":1197,"success":true,"timestamp":1730879033750},{"duration":1191,"success":true,"timestamp":1730879096741},{"duration":1059,"success":true,"timestamp":1730879159751},{"duration":1066,"success":true,"timestamp":1730879222750},{"duration":1143,"success":true,"timestamp":1730879285756},{"duration":1022,"success":true,"timestamp":1730879348765},{"duration":848,"success":true,"timestamp":1730879411757},{"duration":1014,"success":true,"timestamp":1730879474743},{"duration":1164,"success":true,"timestamp":1730879537773},{"duration":1086,"success":true,"timestamp":1730879600769},{"duration":1129,"success":true,"timestamp":1730879663761},{"duration":1199,"success":true,"timestamp":1730879726777},{"duration":1112,"success":true,"timestamp":1730879789768},{"duration":1293,"success":true,"timestamp":1730879852791},{"duration":1122,"success":true,"timestamp":1730879915782},{"duration":1007,"success":true,"timestamp":1730879978773},{"duration":1209,"success":true,"timestamp":1730880041817},{"duration":1035,"success":true,"timestamp":1730880104778},{"duration":1049,"success":true,"timestamp":1730880167787},{"duration":1064,"success":true,"timestamp":1730880230768},{"duration":1181,"success":true,"timestamp":1730880293763},{"duration":997,"success":true,"timestamp":1730880356808},{"duration":1065,"success":true,"timestamp":1730880419786},{"duration":993,"success":true,"timestamp":1730880482778},{"duration":1024,"success":true,"timestamp":1730880545786},{"duration":1097,"success":true,"timestamp":1730880608832},{"duration":1105,"success":true,"timestamp":1730880671810},{"duration":989,"success":true,"timestamp":1730880734815},{"duration":1112,"success":true,"timestamp":1730880797809},{"duration":1058,"success":true,"timestamp":1730880860810},{"duration":936,"success":true,"timestamp":1730880923820},{"duration":1248,"success":true,"timestamp":1730880986815},{"duration":1101,"success":true,"timestamp":1730881049816},{"duration":1074,"success":true,"timestamp":1730881112821},{"duration":1083,"success":true,"timestamp":1730881175875},{"duration":921,"success":true,"timestamp":1730881238812},{"duration":914,"success":true,"timestamp":1730881301806},{"duration":1022,"success":true,"timestamp":1730881364845},{"duration":1123,"success":true,"timestamp":1730881427848},{"duration":1070,"success":true,"timestamp":1730881490853},{"duration":1202,"success":true,"timestamp":1730881553843},{"duration":1143,"success":true,"timestamp":1730881616869},{"duration":935,"success":true,"timestamp":1730881679862},{"duration":1125,"success":true,"timestamp":1730881742860},{"duration":1090,"success":true,"timestamp":1730881805846},{"duration":1008,"success":true,"timestamp":1730881868859},{"duration":972,"success":true,"timestamp":1730881931870},{"duration":920,"success":true,"timestamp":1730881994876},{"duration":1038,"success":true,"timestamp":1730882057859},{"duration":1211,"success":true,"timestamp":1730882120878},{"duration":933,"success":true,"timestamp":1730882183867},{"duration":1204,"success":true,"timestamp":1730882246870},{"duration":1159,"success":true,"timestamp":1730882309851},{"duration":1240,"success":true,"timestamp":1730882372895},{"duration":994,"success":true,"timestamp":1730882435863},{"duration":1366,"success":true,"timestamp":1730882496506},{"duration":1063,"success":true,"timestamp":1730882559519},{"duration":1062,"success":true,"timestamp":1730882622608},{"duration":1181,"success":true,"timestamp":1730882685530},{"duration":1609,"success":true,"timestamp":1730882748506},{"duration":1121,"success":true,"timestamp":1730882811537},{"duration":1178,"success":true,"timestamp":1730882874533},{"duration":1080,"success":true,"timestamp":1730882937589},{"duration":1164,"success":true,"timestamp":1730883000550},{"duration":1091,"success":true,"timestamp":1730883063573},{"duration":1288,"success":true,"timestamp":1730883126576},{"duration":981,"success":true,"timestamp":1730883189572},{"duration":1042,"success":true,"timestamp":1730883252555},{"duration":1084,"success":true,"timestamp":1730883315578},{"duration":912,"success":true,"timestamp":1730883378562},{"duration":1135,"success":true,"timestamp":1730883441596},{"duration":1110,"success":true,"timestamp":1730883504570},{"duration":1163,"success":true,"timestamp":1730883567605},{"duration":1190,"success":true,"timestamp":1730883630574},{"duration":1104,"success":true,"timestamp":1730883693614},{"duration":1331,"success":true,"timestamp":1730883756584},{"duration":1026,"success":true,"timestamp":1730883819586},{"duration":1055,"success":true,"timestamp":1730883882585},{"duration":1082,"success":true,"timestamp":1730883945654},{"duration":1139,"success":true,"timestamp":1730884008594},{"duration":1062,"success":true,"timestamp":1730884071596},{"duration":1219,"success":true,"timestamp":1730884134582},{"duration":1019,"success":true,"timestamp":1730884197591},{"duration":1074,"success":true,"timestamp":1730884257696},{"duration":1147,"success":true,"timestamp":1730884320677},{"duration":860,"success":true,"timestamp":1730884383675},{"duration":1178,"success":true,"timestamp":1730884446677},{"duration":1010,"success":true,"timestamp":1730884509698},{"duration":1148,"success":true,"timestamp":1730884572659},{"duration":1464,"success":true,"timestamp":1730884635683},{"duration":1196,"success":true,"timestamp":1730884698679},{"duration":1121,"success":true,"timestamp":1730884761677},{"duration":1517,"success":true,"timestamp":1730884824782},{"duration":1131,"success":true,"timestamp":1730884887700},{"duration":920,"success":true,"timestamp":1730884950673},{"duration":1000,"success":true,"timestamp":1730885013851},{"duration":999,"success":true,"timestamp":1730885076710},{"duration":1124,"success":true,"timestamp":1730885139693},{"duration":1032,"success":true,"timestamp":1730885202708},{"duration":1209,"success":true,"timestamp":1730885265734},{"duration":1174,"success":true,"timestamp":1730885328730},{"duration":1095,"success":true,"timestamp":1730885391735},{"duration":1194,"success":true,"timestamp":1730885454745},{"duration":1022,"success":true,"timestamp":1730885517755},{"duration":1054,"success":true,"timestamp":1730885580737},{"duration":1076,"success":true,"timestamp":1730885643736},{"duration":1177,"success":true,"timestamp":1730885706734},{"duration":1292,"success":true,"timestamp":1730885769754},{"duration":1112,"success":true,"timestamp":1730885832707},{"duration":974,"success":true,"timestamp":1730885895761},{"duration":1202,"success":true,"timestamp":1730885958722},{"duration":1022,"success":true,"timestamp":1730886021767},{"duration":978,"success":true,"timestamp":1730886084753},{"duration":1155,"success":true,"timestamp":1730886147759},{"duration":1218,"success":true,"timestamp":1730886210769},{"duration":1137,"success":true,"timestamp":1730886273740},{"duration":1173,"success":true,"timestamp":1730886336769},{"duration":964,"success":true,"timestamp":1730886399799},{"duration":1147,"success":true,"timestamp":1730886462760},{"duration":1090,"success":true,"timestamp":1730886525765},{"duration":1090,"success":true,"timestamp":1730886588771},{"duration":1092,"success":true,"timestamp":1730886651765},{"duration":960,"success":true,"timestamp":1730886714790},{"duration":1090,"success":true,"timestamp":1730886777785},{"duration":935,"success":true,"timestamp":1730886840773},{"duration":1108,"success":true,"timestamp":1730886903779},{"duration":1185,"success":true,"timestamp":1730886966816},{"duration":1213,"success":true,"timestamp":1730887029798},{"duration":914,"success":true,"timestamp":1730887092817},{"duration":1223,"success":true,"timestamp":1730887155822},{"duration":1160,"success":true,"timestamp":1730887218798},{"duration":1101,"success":true,"timestamp":1730887281813},{"duration":986,"success":true,"timestamp":1730887344804},{"duration":1037,"success":true,"timestamp":1730887407832},{"duration":1147,"success":true,"timestamp":1730887470796},{"duration":1175,"success":true,"timestamp":1730887533835},{"duration":1087,"success":true,"timestamp":1730887596834},{"duration":875,"success":true,"timestamp":1730887659828},{"duration":1138,"success":true,"timestamp":1730887722794},{"duration":1108,"success":true,"timestamp":1730887785827},{"duration":1033,"success":true,"timestamp":1730887848819},{"duration":1258,"success":true,"timestamp":1730887911823},{"duration":971,"success":true,"timestamp":1730887974865},{"duration":1212,"success":true,"timestamp":1730888037891},{"duration":1178,"success":true,"timestamp":1730888100940},{"duration":1153,"success":true,"timestamp":1730888163868},{"duration":1189,"success":true,"timestamp":1730888226883},{"duration":1187,"success":true,"timestamp":1730888289865},{"duration":1014,"success":true,"timestamp":1730888352851},{"duration":906,"success":true,"timestamp":1730888415858},{"duration":1100,"success":true,"timestamp":1730888478942},{"duration":1044,"success":true,"timestamp":1730888541900},{"duration":890,"success":true,"timestamp":1730888604882},{"duration":1031,"success":true,"timestamp":1730888667893},{"duration":1362,"success":true,"timestamp":1730888730890},{"duration":1194,"success":true,"timestamp":1730888793926},{"duration":1221,"success":true,"timestamp":1730888856893},{"duration":1108,"success":true,"timestamp":1730888919934},{"duration":1108,"success":true,"timestamp":1730888982952},{"duration":1027,"success":true,"timestamp":1730889045970},{"duration":1121,"success":true,"timestamp":1730889108966},{"duration":1108,"success":true,"timestamp":1730889170821},{"duration":1532,"success":true,"timestamp":1730889232305},{"duration":866,"success":true,"timestamp":1730889295327},{"duration":1172,"success":true,"timestamp":1730889358317},{"duration":1072,"success":true,"timestamp":1730889421298},{"duration":1223,"success":true,"timestamp":1730889484358},{"duration":1440,"success":true,"timestamp":1730889547427},{"duration":1181,"success":true,"timestamp":1730889610356},{"duration":1188,"success":true,"timestamp":1730889673339},{"duration":1109,"success":true,"timestamp":1730889736350},{"duration":1014,"success":true,"timestamp":1730889799353},{"duration":1032,"success":true,"timestamp":1730889862376},{"duration":1236,"success":true,"timestamp":1730889925390}],"last_run":{"metrics":{"duration":1236,"gap_duration_s":null,"total_alerts_created":null,"total_alerts_detected":null,"total_indexing_duration_ms":null,"total_search_duration_ms":null},"timestamp":"2024-11-06T10:45:25.390Z"}}},"muteAll":false,"mutedInstanceIds":[],"name":"Disk Usage Alert","nextRun":"2024-11-06T10:46:25.296Z","notifyWhen":null,"params":{"alertOnGroupDisappear":true,"alertOnNoData":true,"criteria":[{"comparator":">","metrics":[{"aggType":"max","field":"kubernetes.pod.memory.usage.node.pct","name":"A"}],"threshold":[0.01],"timeSize":1,"timeUnit":"m"}],"groupBy":["kubernetes.pod.name","kubernetes.labels.app_kubernetes_io/instance"],"searchConfiguration":{"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","query":{"language":"kuery","query":""}}},"revision":1,"running":false,"schedule":{"interval":"1m"},"scheduledTaskId":null,"snoozeSchedule":[],"tags":["simpl"],"throttle":null,"updatedAt":"2024-11-06T10:43:35.970Z","updatedBy":"elastic"},"coreMigrationVersion":"8.8.0","created_at":"2024-11-06T10:43:35.970Z","id":"6074e2dc-5413-4195-a6c9-c4ce1639d073","managed":false,"references":[{"id":"4fb0e8df-b302-489e-9fb5-e5e5cebbdb1a","name":"action_0","type":"action"},{"id":"metricbeat-*","name":"param:kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"alert","typeMigrationVersion":"10.1.0","updated_at":"2024-11-06T10:45:26.668Z","version":"WzExMTg5NiwxXQ=="}
+{"attributes":{"actions":[{"actionRef":"action_0","actionTypeId":".index","frequency":{"notifyWhen":"onActionGroupChange","summary":false,"throttle":null},"group":"custom_threshold.fired","params":{"documents":[{"@timestamp":"{{date}}","current_disk_usage":"{{context.value}}","kubernetes_namespace":"{{context.group.1.value}}","pod_name":"{{context.group.0.value}}","rule_name":"{{rule.name}}","threshold":"{{params.criteria.0.threshold.0}}"}]},"uuid":"533540c7-347a-4f1f-a970-1ed8b1198f7d"}],"alertTypeId":"observability.rules.custom_threshold","apiKey":null,"apiKeyCreatedByUser":null,"apiKeyOwner":null,"consumer":"stackAlerts","createdAt":"2024-10-29T15:55:31.361Z","createdBy":"elastic","enabled":false,"executionStatus":{"error":null,"lastExecutionDate":"2024-11-06T10:46:10.345Z","status":"pending","warning":null},"lastRun":{"alertsCount":{"active":19,"ignored":0,"new":0,"recovered":0},"outcome":"succeeded","outcomeMsg":null,"outcomeOrder":0,"warning":null},"legacyId":null,"meta":{"versionApiKeyLastmodified":"8.15.1"},"monitoring":{"run":{"calculated_metrics":{"p50":1108.5,"p95":1290,"p99":1497.5,"success_ratio":1},"history":[{"duration":1291,"success":true,"timestamp":1730877395717},{"duration":1133,"success":true,"timestamp":1730877458695},{"duration":1188,"success":true,"timestamp":1730877521686},{"duration":1156,"success":true,"timestamp":1730877584702},{"duration":1250,"success":true,"timestamp":1730877647687},{"duration":983,"success":true,"timestamp":1730877710684},{"duration":1205,"success":true,"timestamp":1730877773683},{"duration":1141,"success":true,"timestamp":1730877836707},{"duration":1099,"success":true,"timestamp":1730877899694},{"duration":1178,"success":true,"timestamp":1730877962685},{"duration":1018,"success":true,"timestamp":1730878025708},{"duration":1027,"success":true,"timestamp":1730878088710},{"duration":1035,"success":true,"timestamp":1730878151710},{"duration":1363,"success":true,"timestamp":1730878214736},{"duration":1169,"success":true,"timestamp":1730878277713},{"duration":1142,"success":true,"timestamp":1730878340716},{"duration":1148,"success":true,"timestamp":1730878403720},{"duration":1133,"success":true,"timestamp":1730878466734},{"duration":1002,"success":true,"timestamp":1730878529707},{"duration":1014,"success":true,"timestamp":1730878592712},{"duration":1137,"success":true,"timestamp":1730878655732},{"duration":1256,"success":true,"timestamp":1730878718728},{"duration":976,"success":true,"timestamp":1730878781741},{"duration":1182,"success":true,"timestamp":1730878844771},{"duration":1140,"success":true,"timestamp":1730878907747},{"duration":979,"success":true,"timestamp":1730878970757},{"duration":1198,"success":true,"timestamp":1730879033748},{"duration":1163,"success":true,"timestamp":1730879096739},{"duration":1095,"success":true,"timestamp":1730879159750},{"duration":1094,"success":true,"timestamp":1730879222752},{"duration":1109,"success":true,"timestamp":1730879285757},{"duration":977,"success":true,"timestamp":1730879348763},{"duration":874,"success":true,"timestamp":1730879411756},{"duration":1003,"success":true,"timestamp":1730879474744},{"duration":1250,"success":true,"timestamp":1730879537772},{"duration":1043,"success":true,"timestamp":1730879600771},{"duration":1154,"success":true,"timestamp":1730879663761},{"duration":1208,"success":true,"timestamp":1730879726779},{"duration":1142,"success":true,"timestamp":1730879789770},{"duration":1237,"success":true,"timestamp":1730879852793},{"duration":1070,"success":true,"timestamp":1730879915781},{"duration":984,"success":true,"timestamp":1730879978771},{"duration":1210,"success":true,"timestamp":1730880041816},{"duration":994,"success":true,"timestamp":1730880104777},{"duration":1026,"success":true,"timestamp":1730880167786},{"duration":1040,"success":true,"timestamp":1730880230767},{"duration":1209,"success":true,"timestamp":1730880293762},{"duration":1077,"success":true,"timestamp":1730880356809},{"duration":1040,"success":true,"timestamp":1730880419790},{"duration":965,"success":true,"timestamp":1730880482777},{"duration":988,"success":true,"timestamp":1730880545784},{"duration":1071,"success":true,"timestamp":1730880608830},{"duration":1104,"success":true,"timestamp":1730880671809},{"duration":947,"success":true,"timestamp":1730880734813},{"duration":1144,"success":true,"timestamp":1730880797808},{"duration":1036,"success":true,"timestamp":1730880860811},{"duration":974,"success":true,"timestamp":1730880923818},{"duration":1286,"success":true,"timestamp":1730880986816},{"duration":1047,"success":true,"timestamp":1730881049818},{"duration":1115,"success":true,"timestamp":1730881112819},{"duration":1111,"success":true,"timestamp":1730881175877},{"duration":962,"success":true,"timestamp":1730881238813},{"duration":949,"success":true,"timestamp":1730881301807},{"duration":960,"success":true,"timestamp":1730881364846},{"duration":1128,"success":true,"timestamp":1730881427846},{"duration":1030,"success":true,"timestamp":1730881490855},{"duration":1188,"success":true,"timestamp":1730881553845},{"duration":1103,"success":true,"timestamp":1730881616868},{"duration":976,"success":true,"timestamp":1730881679861},{"duration":1089,"success":true,"timestamp":1730881742861},{"duration":1051,"success":true,"timestamp":1730881805845},{"duration":1029,"success":true,"timestamp":1730881868856},{"duration":988,"success":true,"timestamp":1730881931871},{"duration":1089,"success":true,"timestamp":1730881994878},{"duration":1085,"success":true,"timestamp":1730882057861},{"duration":1242,"success":true,"timestamp":1730882120879},{"duration":968,"success":true,"timestamp":1730882183867},{"duration":1215,"success":true,"timestamp":1730882246871},{"duration":1148,"success":true,"timestamp":1730882309852},{"duration":1285,"success":true,"timestamp":1730882372894},{"duration":1117,"success":true,"timestamp":1730882435865},{"duration":1270,"success":true,"timestamp":1730882496508},{"duration":1126,"success":true,"timestamp":1730882559518},{"duration":1094,"success":true,"timestamp":1730882622606},{"duration":1141,"success":true,"timestamp":1730882685531},{"duration":1519,"success":true,"timestamp":1730882748505},{"duration":979,"success":true,"timestamp":1730882811535},{"duration":1137,"success":true,"timestamp":1730882874532},{"duration":1060,"success":true,"timestamp":1730882937588},{"duration":1138,"success":true,"timestamp":1730883000549},{"duration":1137,"success":true,"timestamp":1730883063571},{"duration":1393,"success":true,"timestamp":1730883126577},{"duration":948,"success":true,"timestamp":1730883189573},{"duration":1013,"success":true,"timestamp":1730883252554},{"duration":1100,"success":true,"timestamp":1730883315576},{"duration":966,"success":true,"timestamp":1730883378563},{"duration":1167,"success":true,"timestamp":1730883441599},{"duration":991,"success":true,"timestamp":1730883504573},{"duration":1134,"success":true,"timestamp":1730883567604},{"duration":1142,"success":true,"timestamp":1730883630573},{"duration":1085,"success":true,"timestamp":1730883693612},{"duration":1388,"success":true,"timestamp":1730883756583},{"duration":1062,"success":true,"timestamp":1730883819585},{"duration":1112,"success":true,"timestamp":1730883882586},{"duration":1101,"success":true,"timestamp":1730883945660},{"duration":1127,"success":true,"timestamp":1730884008595},{"duration":1078,"success":true,"timestamp":1730884071594},{"duration":1272,"success":true,"timestamp":1730884134583},{"duration":965,"success":true,"timestamp":1730884197592},{"duration":1048,"success":true,"timestamp":1730884257695},{"duration":1124,"success":true,"timestamp":1730884320675},{"duration":872,"success":true,"timestamp":1730884383674},{"duration":1204,"success":true,"timestamp":1730884446679},{"duration":1019,"success":true,"timestamp":1730884509699},{"duration":1107,"success":true,"timestamp":1730884572660},{"duration":1379,"success":true,"timestamp":1730884635682},{"duration":1234,"success":true,"timestamp":1730884698677},{"duration":1071,"success":true,"timestamp":1730884761678},{"duration":1431,"success":true,"timestamp":1730884824782},{"duration":1045,"success":true,"timestamp":1730884887698},{"duration":952,"success":true,"timestamp":1730884950672},{"duration":1012,"success":true,"timestamp":1730885013853},{"duration":933,"success":true,"timestamp":1730885076711},{"duration":1157,"success":true,"timestamp":1730885139693},{"duration":1066,"success":true,"timestamp":1730885202709},{"duration":1181,"success":true,"timestamp":1730885265735},{"duration":1161,"success":true,"timestamp":1730885328728},{"duration":1212,"success":true,"timestamp":1730885391733},{"duration":1147,"success":true,"timestamp":1730885454746},{"duration":1041,"success":true,"timestamp":1730885517754},{"duration":1068,"success":true,"timestamp":1730885580738},{"duration":1108,"success":true,"timestamp":1730885643737},{"duration":1186,"success":true,"timestamp":1730885706736},{"duration":1289,"success":true,"timestamp":1730885769755},{"duration":1082,"success":true,"timestamp":1730885832706},{"duration":937,"success":true,"timestamp":1730885895759},{"duration":1166,"success":true,"timestamp":1730885958721},{"duration":1045,"success":true,"timestamp":1730886021766},{"duration":944,"success":true,"timestamp":1730886084755},{"duration":1202,"success":true,"timestamp":1730886147758},{"duration":1226,"success":true,"timestamp":1730886210771},{"duration":1125,"success":true,"timestamp":1730886273742},{"duration":1196,"success":true,"timestamp":1730886336767},{"duration":992,"success":true,"timestamp":1730886399801},{"duration":1154,"success":true,"timestamp":1730886462762},{"duration":1143,"success":true,"timestamp":1730886525766},{"duration":1076,"success":true,"timestamp":1730886588773},{"duration":1073,"success":true,"timestamp":1730886651763},{"duration":984,"success":true,"timestamp":1730886714788},{"duration":1255,"success":true,"timestamp":1730886777787},{"duration":903,"success":true,"timestamp":1730886840775},{"duration":1073,"success":true,"timestamp":1730886903778},{"duration":1276,"success":true,"timestamp":1730886966814},{"duration":1196,"success":true,"timestamp":1730887029799},{"duration":1118,"success":true,"timestamp":1730887092816},{"duration":1185,"success":true,"timestamp":1730887155824},{"duration":1146,"success":true,"timestamp":1730887218797},{"duration":1129,"success":true,"timestamp":1730887281811},{"duration":1009,"success":true,"timestamp":1730887344803},{"duration":1025,"success":true,"timestamp":1730887407834},{"duration":1118,"success":true,"timestamp":1730887470795},{"duration":1140,"success":true,"timestamp":1730887533833},{"duration":1148,"success":true,"timestamp":1730887596832},{"duration":887,"success":true,"timestamp":1730887659829},{"duration":1055,"success":true,"timestamp":1730887722795},{"duration":1150,"success":true,"timestamp":1730887785825},{"duration":1065,"success":true,"timestamp":1730887848817},{"duration":1225,"success":true,"timestamp":1730887911824},{"duration":1031,"success":true,"timestamp":1730887974863},{"duration":1122,"success":true,"timestamp":1730888037891},{"duration":1203,"success":true,"timestamp":1730888100939},{"duration":1000,"success":true,"timestamp":1730888163869},{"duration":1235,"success":true,"timestamp":1730888226881},{"duration":1220,"success":true,"timestamp":1730888289867},{"duration":1038,"success":true,"timestamp":1730888352852},{"duration":942,"success":true,"timestamp":1730888415859},{"duration":1068,"success":true,"timestamp":1730888478943},{"duration":1019,"success":true,"timestamp":1730888541898},{"duration":855,"success":true,"timestamp":1730888604881},{"duration":1075,"success":true,"timestamp":1730888667892},{"duration":1333,"success":true,"timestamp":1730888730891},{"duration":1099,"success":true,"timestamp":1730888793925},{"duration":1167,"success":true,"timestamp":1730888856890},{"duration":1148,"success":true,"timestamp":1730888919934},{"duration":1063,"success":true,"timestamp":1730888982954},{"duration":992,"success":true,"timestamp":1730889045968},{"duration":1112,"success":true,"timestamp":1730889108965},{"duration":1129,"success":true,"timestamp":1730889170819},{"duration":1481,"success":true,"timestamp":1730889232305},{"duration":894,"success":true,"timestamp":1730889295326},{"duration":1214,"success":true,"timestamp":1730889358318},{"duration":1047,"success":true,"timestamp":1730889421299},{"duration":1177,"success":true,"timestamp":1730889484357},{"duration":1514,"success":true,"timestamp":1730889547426},{"duration":1243,"success":true,"timestamp":1730889610359},{"duration":1126,"success":true,"timestamp":1730889673340},{"duration":1064,"success":true,"timestamp":1730889736349},{"duration":984,"success":true,"timestamp":1730889799353},{"duration":1076,"success":true,"timestamp":1730889862375},{"duration":1119,"success":true,"timestamp":1730889925391}],"last_run":{"metrics":{"duration":1119,"gap_duration_s":null,"total_alerts_created":null,"total_alerts_detected":null,"total_indexing_duration_ms":null,"total_search_duration_ms":null},"timestamp":"2024-11-06T10:45:25.391Z"}}},"muteAll":false,"mutedInstanceIds":[],"name":"Disk Usage Alert [Clone]","nextRun":"2024-11-06T10:46:25.296Z","notifyWhen":null,"params":{"alertOnGroupDisappear":true,"alertOnNoData":true,"criteria":[{"comparator":">","metrics":[{"aggType":"max","field":"kubernetes.pod.memory.usage.node.pct","name":"A"}],"threshold":[0.01],"timeSize":1,"timeUnit":"m"}],"groupBy":["kubernetes.pod.name","kubernetes.labels.app_kubernetes_io/instance"],"searchConfiguration":{"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","query":{"language":"kuery","query":""}}},"revision":0,"running":false,"schedule":{"interval":"1m"},"scheduledTaskId":null,"snoozeSchedule":[],"tags":[],"throttle":null,"updatedAt":"2024-10-29T15:55:31.361Z","updatedBy":"elastic"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-29T15:55:32.120Z","id":"73060892-eb57-4fed-aa3f-8d3fc07d9dd2","managed":false,"references":[{"id":"4fb0e8df-b302-489e-9fb5-e5e5cebbdb1a","name":"action_0","type":"action"},{"id":"metricbeat-*","name":"param:kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"alert","typeMigrationVersion":"10.1.0","updated_at":"2024-11-06T10:45:26.594Z","version":"WzExMTg5NSwxXQ=="}
+{"attributes":{"actions":[{"actionRef":"action_0","actionTypeId":".index","frequency":{"notifyWhen":"onActiveAlert","summary":false,"throttle":null},"group":"custom_threshold.fired","params":{"documents":[{"@timestamp":"{{date}}","current_CPU_usage":"{{context.value}}","kubernetes_namespace":"{{context.group.1.value}}","pod_name":"{{context.group.0.value}}","rule_name":"{{rule.name}}","threshold":"{{params.criteria.0.threshold.0}}"}]},"uuid":"2aa6bdb4-f09a-4870-9802-fc77b5a7be19"}],"alertTypeId":"observability.rules.custom_threshold","apiKey":null,"apiKeyCreatedByUser":null,"apiKeyOwner":null,"consumer":"stackAlerts","createdAt":"2024-10-29T14:41:07.686Z","createdBy":"elastic","enabled":false,"executionStatus":{"error":null,"lastExecutionDate":"2024-11-06T10:46:10.345Z","status":"pending","warning":null},"lastRun":{"alertsCount":{"active":15,"ignored":0,"new":0,"recovered":0},"outcome":"succeeded","outcomeMsg":null,"outcomeOrder":0,"warning":null},"legacyId":null,"meta":{"versionApiKeyLastmodified":"8.15.1"},"monitoring":{"run":{"calculated_metrics":{"p50":699,"p95":922.5,"p99":2198.5,"success_ratio":1},"history":[{"duration":751,"success":true,"timestamp":1730877431686},{"duration":780,"success":true,"timestamp":1730877494734},{"duration":747,"success":true,"timestamp":1730877557693},{"duration":576,"success":true,"timestamp":1730877620684},{"duration":584,"success":true,"timestamp":1730877683683},{"duration":515,"success":true,"timestamp":1730877746677},{"duration":800,"success":true,"timestamp":1730877809696},{"duration":685,"success":true,"timestamp":1730877872711},{"duration":600,"success":true,"timestamp":1730877935684},{"duration":677,"success":true,"timestamp":1730877998707},{"duration":705,"success":true,"timestamp":1730878061712},{"duration":686,"success":true,"timestamp":1730878124707},{"duration":773,"success":true,"timestamp":1730878187703},{"duration":729,"success":true,"timestamp":1730878250707},{"duration":688,"success":true,"timestamp":1730878313689},{"duration":750,"success":true,"timestamp":1730878376700},{"duration":672,"success":true,"timestamp":1730878439728},{"duration":607,"success":true,"timestamp":1730878502715},{"duration":945,"success":true,"timestamp":1730878565762},{"duration":721,"success":true,"timestamp":1730878628721},{"duration":792,"success":true,"timestamp":1730878691706},{"duration":667,"success":true,"timestamp":1730878754764},{"duration":630,"success":true,"timestamp":1730878817724},{"duration":769,"success":true,"timestamp":1730878880725},{"duration":625,"success":true,"timestamp":1730878943709},{"duration":806,"success":true,"timestamp":1730879006759},{"duration":703,"success":true,"timestamp":1730879069733},{"duration":1015,"success":true,"timestamp":1730879132749},{"duration":821,"success":true,"timestamp":1730879195730},{"duration":859,"success":true,"timestamp":1730879258763},{"duration":599,"success":true,"timestamp":1730879321751},{"duration":611,"success":true,"timestamp":1730879384755},{"duration":580,"success":true,"timestamp":1730879447758},{"duration":786,"success":true,"timestamp":1730879510757},{"duration":726,"success":true,"timestamp":1730879573745},{"duration":736,"success":true,"timestamp":1730879636768},{"duration":660,"success":true,"timestamp":1730879699776},{"duration":686,"success":true,"timestamp":1730879762750},{"duration":821,"success":true,"timestamp":1730879825777},{"duration":737,"success":true,"timestamp":1730879888756},{"duration":833,"success":true,"timestamp":1730879951774},{"duration":669,"success":true,"timestamp":1730880014778},{"duration":687,"success":true,"timestamp":1730880077770},{"duration":730,"success":true,"timestamp":1730880140789},{"duration":490,"success":true,"timestamp":1730880203831},{"duration":763,"success":true,"timestamp":1730880266787},{"duration":718,"success":true,"timestamp":1730880329782},{"duration":718,"success":true,"timestamp":1730880392773},{"duration":687,"success":true,"timestamp":1730880455771},{"duration":611,"success":true,"timestamp":1730880518805},{"duration":699,"success":true,"timestamp":1730880581785},{"duration":520,"success":true,"timestamp":1730880644829},{"duration":758,"success":true,"timestamp":1730880707800},{"duration":786,"success":true,"timestamp":1730880770813},{"duration":703,"success":true,"timestamp":1730880833795},{"duration":679,"success":true,"timestamp":1730880897092},{"duration":555,"success":true,"timestamp":1730880959834},{"duration":785,"success":true,"timestamp":1730881022820},{"duration":728,"success":true,"timestamp":1730881085815},{"duration":694,"success":true,"timestamp":1730881148831},{"duration":691,"success":true,"timestamp":1730881211824},{"duration":685,"success":true,"timestamp":1730881274830},{"duration":564,"success":true,"timestamp":1730881337838},{"duration":784,"success":true,"timestamp":1730881400838},{"duration":607,"success":true,"timestamp":1730881463824},{"duration":734,"success":true,"timestamp":1730881526821},{"duration":621,"success":true,"timestamp":1730881589827},{"duration":763,"success":true,"timestamp":1730881652845},{"duration":808,"success":true,"timestamp":1730881715840},{"duration":978,"success":true,"timestamp":1730881778867},{"duration":665,"success":true,"timestamp":1730881841854},{"duration":545,"success":true,"timestamp":1730881904870},{"duration":782,"success":true,"timestamp":1730881967849},{"duration":760,"success":true,"timestamp":1730882030891},{"duration":738,"success":true,"timestamp":1730882093863},{"duration":634,"success":true,"timestamp":1730882156875},{"duration":577,"success":true,"timestamp":1730882219862},{"duration":724,"success":true,"timestamp":1730882282856},{"duration":762,"success":true,"timestamp":1730882345866},{"duration":597,"success":true,"timestamp":1730882408844},{"duration":675,"success":true,"timestamp":1730882469387},{"duration":652,"success":true,"timestamp":1730882529499},{"duration":675,"success":true,"timestamp":1730882592506},{"duration":799,"success":true,"timestamp":1730882655554},{"duration":650,"success":true,"timestamp":1730882718506},{"duration":723,"success":true,"timestamp":1730882781517},{"duration":775,"success":true,"timestamp":1730882844508},{"duration":662,"success":true,"timestamp":1730882907540},{"duration":598,"success":true,"timestamp":1730882970552},{"duration":720,"success":true,"timestamp":1730883033545},{"duration":848,"success":true,"timestamp":1730883096551},{"duration":693,"success":true,"timestamp":1730883159545},{"duration":697,"success":true,"timestamp":1730883222577},{"duration":736,"success":true,"timestamp":1730883285549},{"duration":703,"success":true,"timestamp":1730883348561},{"duration":657,"success":true,"timestamp":1730883411569},{"duration":843,"success":true,"timestamp":1730883474565},{"duration":650,"success":true,"timestamp":1730883537583},{"duration":662,"success":true,"timestamp":1730883600589},{"duration":633,"success":true,"timestamp":1730883663582},{"duration":702,"success":true,"timestamp":1730883726581},{"duration":734,"success":true,"timestamp":1730883789572},{"duration":560,"success":true,"timestamp":1730883852568},{"duration":660,"success":true,"timestamp":1730883915577},{"duration":739,"success":true,"timestamp":1730883978584},{"duration":637,"success":true,"timestamp":1730884041564},{"duration":870,"success":true,"timestamp":1730884104552},{"duration":669,"success":true,"timestamp":1730884167575},{"duration":675,"success":true,"timestamp":1730884227705},{"duration":689,"success":true,"timestamp":1730884290651},{"duration":624,"success":true,"timestamp":1730884353663},{"duration":654,"success":true,"timestamp":1730884416661},{"duration":755,"success":true,"timestamp":1730884479678},{"duration":634,"success":true,"timestamp":1730884542656},{"duration":724,"success":true,"timestamp":1730884605677},{"duration":735,"success":true,"timestamp":1730884668666},{"duration":650,"success":true,"timestamp":1730884731656},{"duration":844,"success":true,"timestamp":1730884794672},{"duration":882,"success":true,"timestamp":1730884857690},{"duration":705,"success":true,"timestamp":1730884920692},{"duration":550,"success":true,"timestamp":1730884983674},{"duration":686,"success":true,"timestamp":1730885046686},{"duration":575,"success":true,"timestamp":1730885109730},{"duration":677,"success":true,"timestamp":1730885172690},{"duration":942,"success":true,"timestamp":1730885235698},{"duration":685,"success":true,"timestamp":1730885298698},{"duration":723,"success":true,"timestamp":1730885361715},{"duration":877,"success":true,"timestamp":1730885424731},{"duration":778,"success":true,"timestamp":1730885487752},{"duration":818,"success":true,"timestamp":1730885550730},{"duration":662,"success":true,"timestamp":1730885613726},{"duration":732,"success":true,"timestamp":1730885676723},{"duration":1085,"success":true,"timestamp":1730885739750},{"duration":691,"success":true,"timestamp":1730885802731},{"duration":718,"success":true,"timestamp":1730885865739},{"duration":727,"success":true,"timestamp":1730885928726},{"duration":702,"success":true,"timestamp":1730885991746},{"duration":696,"success":true,"timestamp":1730886054752},{"duration":695,"success":true,"timestamp":1730886117747},{"duration":764,"success":true,"timestamp":1730886180724},{"duration":763,"success":true,"timestamp":1730886243750},{"duration":693,"success":true,"timestamp":1730886306743},{"duration":543,"success":true,"timestamp":1730886369759},{"duration":722,"success":true,"timestamp":1730886432736},{"duration":683,"success":true,"timestamp":1730886495821},{"duration":730,"success":true,"timestamp":1730886558753},{"duration":724,"success":true,"timestamp":1730886621786},{"duration":673,"success":true,"timestamp":1730886684747},{"duration":460,"success":true,"timestamp":1730886747754},{"duration":759,"success":true,"timestamp":1730886810752},{"duration":802,"success":true,"timestamp":1730886873831},{"duration":835,"success":true,"timestamp":1730886936850},{"duration":673,"success":true,"timestamp":1730886999791},{"duration":637,"success":true,"timestamp":1730887062784},{"duration":14646,"success":true,"timestamp":1730887126546},{"duration":745,"success":true,"timestamp":1730887188802},{"duration":575,"success":true,"timestamp":1730887251917},{"duration":675,"success":true,"timestamp":1730887314779},{"duration":583,"success":true,"timestamp":1730887377796},{"duration":746,"success":true,"timestamp":1730887440792},{"duration":636,"success":true,"timestamp":1730887503817},{"duration":514,"success":true,"timestamp":1730887566802},{"duration":657,"success":true,"timestamp":1730887629828},{"duration":768,"success":true,"timestamp":1730887692810},{"duration":600,"success":true,"timestamp":1730887755908},{"duration":659,"success":true,"timestamp":1730887818808},{"duration":700,"success":true,"timestamp":1730887881818},{"duration":903,"success":true,"timestamp":1730887944819},{"duration":642,"success":true,"timestamp":1730888007865},{"duration":463,"success":true,"timestamp":1730888070828},{"duration":1103,"success":true,"timestamp":1730888133884},{"duration":701,"success":true,"timestamp":1730888196852},{"duration":695,"success":true,"timestamp":1730888259912},{"duration":834,"success":true,"timestamp":1730888322843},{"duration":498,"success":true,"timestamp":1730888385847},{"duration":699,"success":true,"timestamp":1730888448872},{"duration":620,"success":true,"timestamp":1730888511886},{"duration":579,"success":true,"timestamp":1730888574866},{"duration":693,"success":true,"timestamp":1730888637916},{"duration":737,"success":true,"timestamp":1730888700875},{"duration":635,"success":true,"timestamp":1730888763921},{"duration":764,"success":true,"timestamp":1730888826891},{"duration":627,"success":true,"timestamp":1730888889924},{"duration":743,"success":true,"timestamp":1730888952911},{"duration":864,"success":true,"timestamp":1730889015941},{"duration":596,"success":true,"timestamp":1730889078896},{"duration":1725,"success":true,"timestamp":1730889140449},{"duration":2672,"success":true,"timestamp":1730889202837},{"duration":641,"success":true,"timestamp":1730889265297},{"duration":660,"success":true,"timestamp":1730889328288},{"duration":694,"success":true,"timestamp":1730889391323},{"duration":760,"success":true,"timestamp":1730889454415},{"duration":687,"success":true,"timestamp":1730889517349},{"duration":686,"success":true,"timestamp":1730889580352},{"duration":646,"success":true,"timestamp":1730889643347},{"duration":749,"success":true,"timestamp":1730889706350},{"duration":1019,"success":true,"timestamp":1730889769493},{"duration":807,"success":true,"timestamp":1730889832337},{"duration":722,"success":true,"timestamp":1730889895369},{"duration":705,"success":true,"timestamp":1730889958373}],"last_run":{"metrics":{"duration":705,"gap_duration_s":null,"total_alerts_created":null,"total_alerts_detected":null,"total_indexing_duration_ms":null,"total_search_duration_ms":null},"timestamp":"2024-11-06T10:45:58.373Z"}}},"muteAll":false,"mutedInstanceIds":[],"name":"CPU Usage Alert","nextRun":"2024-11-06T10:46:58.288Z","notifyWhen":null,"params":{"alertOnGroupDisappear":true,"alertOnNoData":true,"criteria":[{"comparator":">","equation":"","metrics":[{"aggType":"avg","field":"kubernetes.pod.cpu.usage.node.pct","name":"A"}],"threshold":[0.01],"timeSize":5,"timeUnit":"m"}],"groupBy":["kubernetes.pod.name","kubernetes.labels.app_kubernetes_io/instance"],"searchConfiguration":{"indexRefName":"kibanaSavedObjectMeta.searchSourceJSON.index","query":{"language":"kuery","query":""}}},"revision":14,"running":false,"schedule":{"interval":"1m"},"scheduledTaskId":null,"snoozeSchedule":[],"tags":["simpl"],"throttle":null,"updatedAt":"2024-11-06T10:42:38.535Z","updatedBy":"elastic"},"coreMigrationVersion":"8.8.0","created_at":"2024-11-06T10:42:38.536Z","id":"cd389ea1-bbec-46c6-9882-6d5379118e88","managed":false,"references":[{"id":"4fb0e8df-b302-489e-9fb5-e5e5cebbdb1a","name":"action_0","type":"action"},{"id":"metricbeat-*","name":"param:kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"alert","typeMigrationVersion":"10.1.0","updated_at":"2024-11-06T10:45:59.084Z","version":"WzExMTg5OCwxXQ=="}
+{"attributes":{"allowHidden":false,"fieldAttrs":"{\"error.message\":{\"count\":3},\"url.full\":{\"count\":2},\"error.type\":{\"count\":3},\"state.status\":{\"count\":1},\"monitor.duration.us\":{\"count\":1}}","fieldFormatMap":"{}","fields":"[]","name":"heartbeat","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"heartbeat-*"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"c4f91074-4f10-4add-b270-cb223da812b2","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-10-23T07:51:04.353Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzcxMywxXQ=="}
+{"attributes":{"color":"#6ab8de","description":"","name":"simpl"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","managed":false,"references":[],"type":"tag","typeMigrationVersion":"8.0.0","updated_at":"2024-10-17T11:39:47.861Z","version":"WzksMV0="}
+{"attributes":{"columns":["url.full","error.message","state.status","monitor.duration.us"],"description":"","grid":{},"hideChart":false,"isTextBasedQuery":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"timeRestore":false,"title":"heartbeat saved search"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-23T07:51:56.906Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"d002abe7-9b23-478d-a867-c133eaa225eb","managed":false,"references":[{"id":"c4f91074-4f10-4add-b270-cb223da812b2","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"search","typeMigrationVersion":"10.4.0","updated_at":"2024-10-23T07:51:56.906Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzcxNiwxXQ=="}
+{"attributes":{"controlGroupInput":{"chainingSystem":"HIERARCHICAL","controlStyle":"oneLine","ignoreParentSettingsJSON":"{\"ignoreFilters\":false,\"ignoreQuery\":false,\"ignoreTimerange\":false,\"ignoreValidations\":false}","panelsJSON":"{\"85036c14-2970-49f0-814f-a37ae1bf7d25\":{\"type\":\"optionsListControl\",\"order\":1,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"85036c14-2970-49f0-814f-a37ae1bf7d25\",\"fieldName\":\"url.full\",\"title\":\"url.full\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"selectedOptions\":[],\"existsSelected\":true,\"enhancements\":{}}},\"3719fc55-a3a9-4ade-b4f9-f9f44dc4b5e6\":{\"type\":\"optionsListControl\",\"order\":2,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"3719fc55-a3a9-4ade-b4f9-f9f44dc4b5e6\",\"fieldName\":\"state.status\",\"title\":\"state.status\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}},\"d5cab7e7-f63e-4777-a6d4-36669a5ca858\":{\"type\":\"optionsListControl\",\"order\":0,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"d5cab7e7-f63e-4777-a6d4-36669a5ca858\",\"fieldName\":\"monitor.name\",\"title\":\"monitor.name\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}}}","showApplySelections":false},"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":10,\"i\":\"5a9a940a-d131-4fb3-84a8-67ae8f359eb3\"},\"panelIndex\":\"5a9a940a-d131-4fb3-84a8-67ae8f359eb3\",\"embeddableConfig\":{\"savedVis\":{\"id\":\"\",\"title\":\"Heartbeat - service status\",\"description\":\"\",\"type\":\"metrics\",\"params\":{\"time_range_mode\":\"last_value\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"6fce767d-e1c2-44c3-8962-a2141a2cc747\"}],\"bar_color_rules\":[{\"id\":\"851ea511-73e7-48f0-8c66-3294d74ee577\"}],\"drop_last_bucket\":0,\"gauge_color_rules\":[{\"id\":\"90109565-519e-4c34-9524-a4d9a0a6dde3\"}],\"gauge_inner_width\":10,\"gauge_style\":\"half\",\"gauge_width\":10,\"id\":\"f2707392-fa05-46e6-a65e-e11ff771c7a4\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"\",\"id\":\"e2c90f10-1350-43c7-82cd-bfe999c9e149\",\"line_width\":1,\"metrics\":[{\"order\":\"desc\",\"agg_with\":\"concat\",\"id\":\"8fec5be0-e26e-4503-a4cc-2f501de74bf1\",\"type\":\"top_hit\",\"field\":\"state.status\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"url.full\",\"label\":\"Status\",\"color_rules\":[{\"id\":\"0fbf50b5-bbca-40a0-9d20-178edfd00086\"}]},{\"time_range_mode\":\"entire_time_range\",\"id\":\"98ebc066-a978-453f-b189-94cbab1afc47\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"palette\":{\"type\":\"palette\",\"name\":\"default\"},\"metrics\":[{\"order\":\"desc\",\"agg_with\":\"concat\",\"id\":\"128b7b33-ecae-424f-9508-3e5ac304b7ef\",\"type\":\"top_hit\",\"field\":\"@timestamp\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"default\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"override_index_pattern\":0,\"series_drop_last_bucket\":0,\"label\":\"Last check\",\"color_rules\":[{\"id\":\"d39faaf5-f756-4aa6-954d-8ac07a8cc969\"}]},{\"time_range_mode\":\"entire_time_range\",\"id\":\"8db3fb2f-5a7f-4041-90fc-9111c6badc46\",\"color\":\"#68BC00\",\"split_mode\":\"everything\",\"palette\":{\"type\":\"palette\",\"name\":\"default\"},\"metrics\":[{\"order\":\"desc\",\"agg_with\":\"avg\",\"id\":\"10a839be-0079-4cd2-a479-a0e2935d68eb\",\"type\":\"top_hit\",\"field\":\"monitor.duration.us\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"default\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":1,\"fill\":0.5,\"stacked\":\"none\",\"override_index_pattern\":0,\"series_drop_last_bucket\":0,\"label\":\"Average response time [us]\",\"color_rules\":[{\"id\":\"d39faaf5-f756-4aa6-954d-8ac07a8cc969\"}]}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"table\",\"use_kibana_indexes\":true,\"markdown\":\"{{ icmp_elastic_kibana_kb_http_observability_svc.last.formatted }}\\r\\nsdfsdf\\r\\n\\r\\nsdfsfd\\r\\n{{ tcp_kibana_dev_simpl_europe_eu_443.label }}\",\"pivot_id\":[\"monitor.name\",\"url.full\"],\"pivot_type\":[\"string\",\"string\"],\"pivot_label\":\"Service name\",\"pivot_rows\":10,\"index_pattern_ref_name\":\"metrics_5a9a940a-d131-4fb3-84a8-67ae8f359eb3_0_index_pattern\"},\"uiState\":{},\"data\":{\"aggs\":[],\"searchSource\":{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}}},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":27,\"w\":48,\"h\":13,\"i\":\"ee3f47e6-78a6-421f-bd64-7fd1e3280d27\"},\"panelIndex\":\"ee3f47e6-78a6-421f-bd64-7fd1e3280d27\",\"embeddableConfig\":{\"attributes\":{\"title\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"c4f91074-4f10-4add-b270-cb223da812b2\",\"name\":\"indexpattern-datasource-layer-e0e8b57f-d759-48f8-98fa-731eef9ce714\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"e0e8b57f-d759-48f8-98fa-731eef9ce714\",\"accessors\":[\"e8f54984-0d6c-48f1-a07f-272607b3400e\"],\"position\":\"top\",\"seriesType\":\"area\",\"showGridlines\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"xAccessor\":\"a6ce823f-1b53-422c-b398-827bbe5a81aa\",\"splitAccessor\":\"e2702657-612f-47ec-a68d-a89319d0c1d8\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"e0e8b57f-d759-48f8-98fa-731eef9ce714\":{\"columns\":{\"a6ce823f-1b53-422c-b398-827bbe5a81aa\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"e8f54984-0d6c-48f1-a07f-272607b3400e\":{\"label\":\"Average of monitor.duration.us\",\"dataType\":\"number\",\"operationType\":\"average\",\"sourceField\":\"monitor.duration.us\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"emptyAsNull\":true}},\"e2702657-612f-47ec-a68d-a89319d0c1d8\":{\"label\":\"Top 10 values of url.full\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"url.full\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"e8f54984-0d6c-48f1-a07f-272607b3400e\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}}},\"columnOrder\":[\"e2702657-612f-47ec-a68d-a89319d0c1d8\",\"a6ce823f-1b53-422c-b398-827bbe5a81aa\",\"e8f54984-0d6c-48f1-a07f-272607b3400e\"],\"incompleteColumns\":{},\"sampling\":1}}},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"search\",\"gridData\":{\"x\":0,\"y\":10,\"w\":48,\"h\":17,\"i\":\"d5a35aba-9bcc-4390-9e2e-ccd8d1fbdc54\"},\"panelIndex\":\"d5a35aba-9bcc-4390-9e2e-ccd8d1fbdc54\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_d5a35aba-9bcc-4390-9e2e-ccd8d1fbdc54\"}]","timeRestore":false,"title":"Dashboard For Heartbeats","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-11-06T10:37:43.895Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"42a7122f-92a1-44ce-a8ba-ed9e2b990682","managed":false,"references":[{"id":"c4f91074-4f10-4add-b270-cb223da812b2","name":"5a9a940a-d131-4fb3-84a8-67ae8f359eb3:metrics_5a9a940a-d131-4fb3-84a8-67ae8f359eb3_0_index_pattern","type":"index-pattern"},{"id":"c4f91074-4f10-4add-b270-cb223da812b2","name":"ee3f47e6-78a6-421f-bd64-7fd1e3280d27:indexpattern-datasource-layer-e0e8b57f-d759-48f8-98fa-731eef9ce714","type":"index-pattern"},{"id":"d002abe7-9b23-478d-a867-c133eaa225eb","name":"d5a35aba-9bcc-4390-9e2e-ccd8d1fbdc54:panel_d5a35aba-9bcc-4390-9e2e-ccd8d1fbdc54","type":"search"},{"id":"c4f91074-4f10-4add-b270-cb223da812b2","name":"controlGroup_85036c14-2970-49f0-814f-a37ae1bf7d25:optionsListDataView","type":"index-pattern"},{"id":"c4f91074-4f10-4add-b270-cb223da812b2","name":"controlGroup_3719fc55-a3a9-4ade-b4f9-f9f44dc4b5e6:optionsListDataView","type":"index-pattern"},{"id":"c4f91074-4f10-4add-b270-cb223da812b2","name":"controlGroup_d5cab7e7-f63e-4777-a6d4-36669a5ca858:optionsListDataView","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-11-06T10:40:50.137Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzI5MzYsMV0="}
+{"attributes":{"allowHidden":false,"fieldAttrs":"{}","fieldFormatMap":"{}","fields":"[]","name":"bussines-logs","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"business-logs"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-10-17T11:39:47.861Z","version":"WzUsMV0="}
+{"attributes":{"columns":["message"],"description":"","grid":{"columns":{"business_operation":{"width":172},"destination":{"width":136},"message_type":{"width":152},"origin":{"width":102}}},"hideChart":false,"isTextBasedQuery":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"timeRestore":false,"title":"Business logs saved search"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"471ab5f9-981c-4764-ac15-ead3eb1dc384","managed":false,"references":[{"id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"search","typeMigrationVersion":"10.4.0","updated_at":"2024-10-17T11:39:47.861Z","version":"WzYsMV0="}
+{"attributes":{"controlGroupInput":{"chainingSystem":"HIERARCHICAL","controlStyle":"oneLine","ignoreParentSettingsJSON":"{\"ignoreFilters\":false,\"ignoreQuery\":false,\"ignoreTimerange\":false,\"ignoreValidations\":false}","panelsJSON":"{\"ccb1d84e-0b42-4f60-80cc-e520aa202568\":{\"type\":\"optionsListControl\",\"order\":0,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"ccb1d84e-0b42-4f60-80cc-e520aa202568\",\"fieldName\":\"business_operation\",\"title\":\"business_operation\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"selectedOptions\":[],\"enhancements\":{}}},\"3a982d1b-bcca-4900-b58d-859fe9de8bff\":{\"type\":\"optionsListControl\",\"order\":1,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"3a982d1b-bcca-4900-b58d-859fe9de8bff\",\"fieldName\":\"destination\",\"title\":\"destination\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}},\"5ba10667-1ace-40f8-b3cc-d8b2a4d7c37c\":{\"type\":\"optionsListControl\",\"order\":2,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"5ba10667-1ace-40f8-b3cc-d8b2a4d7c37c\",\"fieldName\":\"message_type\",\"title\":\"message_type\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}},\"ae5800be-b170-41a3-bcf4-518b382c56f3\":{\"type\":\"optionsListControl\",\"order\":3,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"ae5800be-b170-41a3-bcf4-518b382c56f3\",\"fieldName\":\"origin\",\"title\":\"origin\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}}}","showApplySelections":false},"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":15,\"i\":\"8528ae10-12ee-4504-aba2-550a503f558f\"},\"panelIndex\":\"8528ae10-12ee-4504-aba2-550a503f558f\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bussines operations\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\",\"name\":\"indexpattern-datasource-layer-d2e8034a-221f-4501-9eea-e7044d193e95\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"d2e8034a-221f-4501-9eea-e7044d193e95\",\"seriesType\":\"area\",\"xAccessor\":\"0c191345-cd8f-45b0-b4e4-43bf0b192ed7\",\"accessors\":[\"d16aa28a-5955-470c-aebd-62c13699886a\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"splitAccessor\":\"76dd6878-2d92-43d2-a824-233c413b5ef0\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"d2e8034a-221f-4501-9eea-e7044d193e95\":{\"columns\":{\"0c191345-cd8f-45b0-b4e4-43bf0b192ed7\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"d16aa28a-5955-470c-aebd-62c13699886a\":{\"label\":\"Number of bussines operations\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"customLabel\":true},\"76dd6878-2d92-43d2-a824-233c413b5ef0\":{\"label\":\"Top 8 values of business_operation\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"business_operation\",\"isBucketed\":true,\"params\":{\"size\":8,\"orderBy\":{\"type\":\"column\",\"columnId\":\"d16aa28a-5955-470c-aebd-62c13699886a\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}}},\"columnOrder\":[\"76dd6878-2d92-43d2-a824-233c413b5ef0\",\"0c191345-cd8f-45b0-b4e4-43bf0b192ed7\",\"d16aa28a-5955-470c-aebd-62c13699886a\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\"}},\"currentIndexPatternId\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{},\"description\":\"\"},\"title\":\"Business operations\"},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":15,\"i\":\"2ffae7db-2e3e-4fae-8338-14bcf8596f2b\"},\"panelIndex\":\"2ffae7db-2e3e-4fae-8338-14bcf8596f2b\",\"embeddableConfig\":{\"attributes\":{\"title\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\",\"name\":\"indexpattern-datasource-layer-8e67f1e6-3b4e-4b14-ad58-2c9e1926eb5b\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"8e67f1e6-3b4e-4b14-ad58-2c9e1926eb5b\",\"accessors\":[\"a933f35f-f6bd-4b02-a6c4-e4b4af1ee8a2\"],\"position\":\"top\",\"seriesType\":\"area\",\"showGridlines\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"xAccessor\":\"985e4ec1-039a-48ec-9101-afc78e39f6bd\",\"splitAccessor\":\"f33a8351-939f-4a8f-90a8-1ef72b1b36d0\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"8e67f1e6-3b4e-4b14-ad58-2c9e1926eb5b\":{\"columns\":{\"985e4ec1-039a-48ec-9101-afc78e39f6bd\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"a933f35f-f6bd-4b02-a6c4-e4b4af1ee8a2\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true}},\"f33a8351-939f-4a8f-90a8-1ef72b1b36d0\":{\"label\":\"Top 9 values of destination\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"destination\",\"isBucketed\":true,\"params\":{\"size\":9,\"orderBy\":{\"type\":\"column\",\"columnId\":\"a933f35f-f6bd-4b02-a6c4-e4b4af1ee8a2\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}}},\"columnOrder\":[\"f33a8351-939f-4a8f-90a8-1ef72b1b36d0\",\"985e4ec1-039a-48ec-9101-afc78e39f6bd\",\"a933f35f-f6bd-4b02-a6c4-e4b4af1ee8a2\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\"}},\"currentIndexPatternId\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}},\"title\":\"Destinations\"},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":15,\"w\":24,\"h\":15,\"i\":\"e4d83867-56f7-4bdb-a96c-c3e8689efd6c\"},\"panelIndex\":\"e4d83867-56f7-4bdb-a96c-c3e8689efd6c\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Message Types\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\",\"name\":\"indexpattern-datasource-layer-2afba61b-ea12-4154-b161-383da9aa0e8a\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"2afba61b-ea12-4154-b161-383da9aa0e8a\",\"seriesType\":\"area\",\"xAccessor\":\"48b4bc65-b6bd-4a0a-a3cf-ba8b156d5c19\",\"splitAccessor\":\"e61c39f6-63c0-4ef9-9072-2bdf93ca9f03\",\"accessors\":[\"1bc2e81d-53c7-4832-800a-40b6b4a91dd5\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"2afba61b-ea12-4154-b161-383da9aa0e8a\":{\"columns\":{\"e61c39f6-63c0-4ef9-9072-2bdf93ca9f03\":{\"label\":\"Top 5 values of message_type\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"message_type\",\"isBucketed\":true,\"params\":{\"size\":5,\"orderBy\":{\"type\":\"column\",\"columnId\":\"1bc2e81d-53c7-4832-800a-40b6b4a91dd5\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"48b4bc65-b6bd-4a0a-a3cf-ba8b156d5c19\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"1bc2e81d-53c7-4832-800a-40b6b4a91dd5\":{\"label\":\"Message types\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"customLabel\":true}},\"columnOrder\":[\"e61c39f6-63c0-4ef9-9072-2bdf93ca9f03\",\"48b4bc65-b6bd-4a0a-a3cf-ba8b156d5c19\",\"1bc2e81d-53c7-4832-800a-40b6b4a91dd5\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\"}},\"currentIndexPatternId\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":15,\"w\":24,\"h\":15,\"i\":\"08d77cd4-7797-490a-8ee9-65e3da54a0e4\"},\"panelIndex\":\"08d77cd4-7797-490a-8ee9-65e3da54a0e4\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bussins Logs - Origin\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\",\"name\":\"indexpattern-datasource-layer-3a24fced-bd13-466b-be5a-327aac485dbc\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"3a24fced-bd13-466b-be5a-327aac485dbc\",\"seriesType\":\"area\",\"xAccessor\":\"2dd1b40d-4bd4-4a0c-8559-963d7cd89217\",\"accessors\":[\"5e06f6e8-aca2-4495-b8a3-1bbe0b3de6aa\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"splitAccessor\":\"1b533510-3950-4dc1-8631-6df8870f6bcb\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"3a24fced-bd13-466b-be5a-327aac485dbc\":{\"columns\":{\"2dd1b40d-4bd4-4a0c-8559-963d7cd89217\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"5e06f6e8-aca2-4495-b8a3-1bbe0b3de6aa\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true}},\"1b533510-3950-4dc1-8631-6df8870f6bcb\":{\"label\":\"Top 10 values of origin\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"origin\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"5e06f6e8-aca2-4495-b8a3-1bbe0b3de6aa\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}}},\"columnOrder\":[\"1b533510-3950-4dc1-8631-6df8870f6bcb\",\"2dd1b40d-4bd4-4a0c-8559-963d7cd89217\",\"5e06f6e8-aca2-4495-b8a3-1bbe0b3de6aa\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\"}},\"currentIndexPatternId\":\"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{},\"description\":\"\"},\"title\":\"Business Logs - Origin\"},{\"type\":\"search\",\"gridData\":{\"x\":0,\"y\":30,\"w\":48,\"h\":17,\"i\":\"d9362c30-a383-46e4-a8fe-d4f383df7878\"},\"panelIndex\":\"d9362c30-a383-46e4-a8fe-d4f383df7878\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_d9362c30-a383-46e4-a8fe-d4f383df7878\"}]","timeRestore":false,"title":"Business Monitoring Dashboard","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"c216499a-b42f-49fe-a230-a967bfb4f709","managed":false,"references":[{"id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","name":"8528ae10-12ee-4504-aba2-550a503f558f:indexpattern-datasource-layer-d2e8034a-221f-4501-9eea-e7044d193e95","type":"index-pattern"},{"id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","name":"2ffae7db-2e3e-4fae-8338-14bcf8596f2b:indexpattern-datasource-layer-8e67f1e6-3b4e-4b14-ad58-2c9e1926eb5b","type":"index-pattern"},{"id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","name":"e4d83867-56f7-4bdb-a96c-c3e8689efd6c:indexpattern-datasource-layer-2afba61b-ea12-4154-b161-383da9aa0e8a","type":"index-pattern"},{"id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","name":"08d77cd4-7797-490a-8ee9-65e3da54a0e4:indexpattern-datasource-layer-3a24fced-bd13-466b-be5a-327aac485dbc","type":"index-pattern"},{"id":"471ab5f9-981c-4764-ac15-ead3eb1dc384","name":"d9362c30-a383-46e4-a8fe-d4f383df7878:panel_d9362c30-a383-46e4-a8fe-d4f383df7878","type":"search"},{"id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","name":"controlGroup_ccb1d84e-0b42-4f60-80cc-e520aa202568:optionsListDataView","type":"index-pattern"},{"id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","name":"controlGroup_3a982d1b-bcca-4900-b58d-859fe9de8bff:optionsListDataView","type":"index-pattern"},{"id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","name":"controlGroup_5ba10667-1ace-40f8-b3cc-d8b2a4d7c37c:optionsListDataView","type":"index-pattern"},{"id":"8fb2ef7f-dfa5-4b7a-8792-48083812a9c7","name":"controlGroup_ae5800be-b170-41a3-bcf4-518b382c56f3:optionsListDataView","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-11-06T10:35:04.922Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzI4OTgsMV0="}
+{"attributes":{"state":{"datasourceStates":{"formBased":{"layers":{"307ec163-d913-4ce0-8e9b-6dfc777def59":{"columnOrder":["8c03fc54-6e2d-49ff-b294-bb80ae6a1a8e","7b682fd2-3fd6-4834-8067-a546ab543764","e9919412-9d5f-4db8-96bf-ab35a7b11c87","b1ecf062-bf74-4458-9598-2c7018cdae3d"],"columns":{"7b682fd2-3fd6-4834-8067-a546ab543764":{"customLabel":true,"dataType":"string","filter":{"language":"kuery","query":"kubernetes.pod.status.phase: *"},"isBucketed":false,"label":"Phase","operationType":"last_value","params":{"sortField":"@timestamp"},"scale":"ordinal","sourceField":"kubernetes.pod.status.phase"},"8c03fc54-6e2d-49ff-b294-bb80ae6a1a8e":{"customLabel":true,"dataType":"string","isBucketed":true,"label":"Pod","operationType":"terms","params":{"missingBucket":false,"orderBy":{"fallback":false,"type":"alphabetical"},"orderDirection":"asc","otherBucket":true,"parentFormat":{"id":"terms"},"size":1000},"scale":"ordinal","sourceField":"kubernetes.pod.name"},"b1ecf062-bf74-4458-9598-2c7018cdae3d":{"customLabel":true,"dataType":"string","filter":{"language":"kuery","query":"kubernetes.pod.status.scheduled: *"},"isBucketed":false,"label":"Scheduled","operationType":"last_value","params":{"sortField":"@timestamp"},"scale":"ordinal","sourceField":"kubernetes.pod.status.scheduled"},"e9919412-9d5f-4db8-96bf-ab35a7b11c87":{"customLabel":true,"dataType":"string","filter":{"language":"kuery","query":"kubernetes.pod.status.ready: *"},"isBucketed":false,"label":"Ready","operationType":"last_value","params":{"sortField":"@timestamp"},"scale":"ordinal","sourceField":"kubernetes.pod.status.ready"}},"incompleteColumns":{}}}}},"filters":[{"$state":{"store":"appState"},"meta":{"alias":null,"disabled":false,"index":"8436b682-edd9-4a0c-bcf4-9dd60f324200","key":"metricset.name","negate":false,"params":{"query":"state_pod"},"type":"phrase"},"query":{"match_phrase":{"metricset.name":"state_pod"}}}],"query":{"language":"kuery","query":""},"visualization":{"columns":[{"collapseFn":"","columnId":"8c03fc54-6e2d-49ff-b294-bb80ae6a1a8e","isTransposed":false},{"alignment":"right","columnId":"7b682fd2-3fd6-4834-8067-a546ab543764","hidden":false,"isTransposed":false},{"alignment":"right","columnId":"e9919412-9d5f-4db8-96bf-ab35a7b11c87","isTransposed":false},{"alignment":"right","columnId":"b1ecf062-bf74-4458-9598-2c7018cdae3d","isTransposed":false}],"headerRowHeight":"single","headerRowHeightLines":1,"layerId":"307ec163-d913-4ce0-8e9b-6dfc777def59","layerType":"data","paging":{"enabled":true,"size":10},"sorting":{"direction":"none"}}},"title":"Status per Pod [Metricbeat Kubernetes]","visualizationType":"lnsDatatable"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"95f0b070-db48-11ec-a23d-5dd6249f86b6","managed":false,"references":[{"id":"metricbeat-*","name":"indexpattern-datasource-layer-307ec163-d913-4ce0-8e9b-6dfc777def59","type":"index-pattern"},{"id":"metricbeat-*","name":"8436b682-edd9-4a0c-bcf4-9dd60f324200","type":"index-pattern"}],"type":"lens","typeMigrationVersion":"8.9.0","updated_at":"2024-10-17T11:39:47.861Z","version":"WzksMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"CPU Usage to Node [Metricbeat Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CPU Usage to Node [Metricbeat Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"effbda00-b658-11ec-b432-f55b76073132\"}],\"drop_last_bucket\":0,\"filter\":{\"language\":\"kuery\",\"query\":\"metricset.name :\\\"pod\\\" \"},\"id\":\"034a1b39-789a-4c21-ba0f-3a3f01c132c0\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"7cc97db7-b10d-4452-9ea8-8f9ac149c901\",\"label\":\"\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.pod.cpu.usage.node.pct\",\"id\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"type\":\"avg\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.pod.name\",\"terms_order_by\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\"},{\"id\":\"672f48c0-8701-4b65-8fcf-1402598b823e\",\"color\":\"rgba(232,44,44,1)\",\"split_mode\":\"everything\",\"palette\":{\"type\":\"palette\",\"name\":\"default\"},\"metrics\":[{\"id\":\"a0114dcd-4ac9-49b3-8d98-0c86d5ce65d2\",\"type\":\"static\",\"value\":\"0.75\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"override_index_pattern\":0,\"series_drop_last_bucket\":0,\"label\":\"CPU Threshold\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true,\"index_pattern_ref_name\":\"metrics_0_index_pattern\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"kubernetes-9abe1bb0-bcb7-11ec-b64f-7dd6e8e82013","managed":false,"references":[{"id":"metricbeat-*","name":"metrics_0_index_pattern","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:45:30.540Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIyNDUsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"CPU Usage to Limit [Metricbeat Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CPU Usage to Limit [Metricbeat Kubernetes]\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"effbda00-b658-11ec-b432-f55b76073132\"}],\"drop_last_bucket\":0,\"filter\":{\"query\":\"\",\"language\":\"kuery\"},\"id\":\"034a1b39-789a-4c21-ba0f-3a3f01c132c0\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"7cc97db7-b10d-4452-9ea8-8f9ac149c901\",\"label\":\"\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.pod.cpu.usage.limit.pct\",\"id\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"type\":\"avg\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.pod.name\",\"terms_order_by\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"terms_direction\":\"desc\",\"terms_size\":\"10\"},{\"id\":\"179e78bc-d4e8-4487-a0e8-5597d4437a1a\",\"color\":\"rgba(241,14,14,1)\",\"split_mode\":\"everything\",\"palette\":{\"type\":\"palette\",\"name\":\"default\"},\"metrics\":[{\"id\":\"2a438287-9dc4-4b7b-a5d2-e1f7e0deecac\",\"type\":\"static\",\"value\":\"0.75\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"override_index_pattern\":0,\"series_drop_last_bucket\":0,\"label\":\"CPU Threshold\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true,\"index_pattern_ref_name\":\"metrics_0_index_pattern\"}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"kubernetes-9e5c9f30-bcb7-11ec-b64f-7dd6e8e82013","managed":false,"references":[{"id":"metricbeat-*","name":"metrics_0_index_pattern","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:46:12.010Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIyNTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"filter\":[],\"query\":{\"language\":\"kuery\",\"query\":\"\"}}"},"title":"Pod Memory Usage to Node [Metricbeat Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"effbda00-b658-11ec-b432-f55b76073132\"}],\"drop_last_bucket\":0,\"filter\":{\"language\":\"kuery\",\"query\":\"metricset.name :\\\"pod\\\" \"},\"id\":\"034a1b39-789a-4c21-ba0f-3a3f01c132c0\",\"index_pattern_ref_name\":\"metrics_0_index_pattern\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"7cc97db7-b10d-4452-9ea8-8f9ac149c901\",\"label\":\"\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.pod.memory.usage.node.pct\",\"id\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"type\":\"avg\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"kubernetes.pod.name\",\"terms_order_by\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"time_range_mode\":\"entire_time_range\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true},\"title\":\"Pod Memory Usage to Node [Metricbeat Kubernetes]\",\"type\":\"metrics\"}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"kubernetes-17849f40-bcb6-11ec-b64f-7dd6e8e82013","managed":false,"references":[{"id":"metricbeat-*","name":"metrics_0_index_pattern","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-17T11:39:47.861Z","version":"WzEyLDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"title":"Memory Usage to Limit [Metricbeat Kubernetes]","uiStateJSON":"{}","version":1,"visState":"{\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"background_color_rules\":[{\"id\":\"effbda00-b658-11ec-b432-f55b76073132\"}],\"drop_last_bucket\":0,\"filter\":{\"language\":\"kuery\",\"query\":\"metricset.name :\\\"pod\\\" \"},\"id\":\"034a1b39-789a-4c21-ba0f-3a3f01c132c0\",\"interval\":\"\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"7cc97db7-b10d-4452-9ea8-8f9ac149c901\",\"label\":\"\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.pod.memory.usage.limit.pct\",\"id\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"type\":\"avg\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_direction\":\"desc\",\"terms_field\":[\"kubernetes.pod.name\",\"kubernetes.namespace\"],\"terms_order_by\":\"9080d8bd-59d3-4b3e-b75b-13262188d8d3\",\"time_range_mode\":\"entire_time_range\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"time_range_mode\":\"entire_time_range\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true,\"index_pattern_ref_name\":\"metrics_0_index_pattern\"},\"title\":\"Memory Usage to Limit [Metricbeat Kubernetes]\",\"type\":\"metrics\"}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"kubernetes-f8dc7fc0-bcb7-11ec-b64f-7dd6e8e82013","managed":false,"references":[{"id":"metricbeat-*","name":"metrics_0_index_pattern","type":"index-pattern"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-22T14:22:23.859Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzY4NSwxXQ=="}
+{"attributes":{"allowHidden":false,"fieldAttrs":"{\"loglevel\":{\"count\":1},\"message\":{\"count\":1},\"error\":{\"count\":2},\"event.original\":{\"count\":1},\"kubernetes.container.name\":{\"count\":1}}","fieldFormatMap":"{}","fields":"[]","name":"technical-logs","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"technical-logs"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"51dec46a-a4ef-4f74-a997-851bd2164f4f","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-11-04T15:52:50.898Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzI1NzYsMV0="}
+{"attributes":{"columns":["message"],"description":"","grid":{"columns":{"business_operation":{"width":172},"destination":{"width":136},"message_type":{"width":152},"origin":{"width":102}}},"hideChart":false,"isTextBasedQuery":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"timeRestore":false,"title":"Technical logs saved search"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"aaaf5147-90fe-412f-b3e4-785570921006","managed":false,"references":[{"id":"51dec46a-a4ef-4f74-a997-851bd2164f4f","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"search","typeMigrationVersion":"10.4.0","updated_at":"2024-10-17T11:39:47.861Z","version":"WzE2LDFd"}
+{"attributes":{"controlGroupInput":{"chainingSystem":"HIERARCHICAL","controlStyle":"oneLine","ignoreParentSettingsJSON":"{\"ignoreFilters\":false,\"ignoreQuery\":false,\"ignoreTimerange\":false,\"ignoreValidations\":false}","panelsJSON":"{\"64e3aa0a-3a68-4ad1-887b-81f1198dcefa\":{\"type\":\"optionsListControl\",\"order\":0,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"64e3aa0a-3a68-4ad1-887b-81f1198dcefa\",\"fieldName\":\"kubernetes.pod.name\",\"title\":\"kubernetes.pod.name\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}}}","showApplySelections":false},"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":44,\"h\":15,\"i\":\"6ffdce5b-20d9-40e2-8522-d04c0758fa03\"},\"panelIndex\":\"6ffdce5b-20d9-40e2-8522-d04c0758fa03\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"panelRefName\":\"panel_6ffdce5b-20d9-40e2-8522-d04c0758fa03\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":15,\"w\":22,\"h\":15,\"i\":\"b3176175-156b-4269-9a04-fa6d0dbadd6a\"},\"panelIndex\":\"b3176175-156b-4269-9a04-fa6d0dbadd6a\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"title\":\"CPU Usage as Pct of the Total Node CPU [Metricbeat Kubernetes]\",\"panelRefName\":\"panel_b3176175-156b-4269-9a04-fa6d0dbadd6a\"},{\"type\":\"visualization\",\"gridData\":{\"x\":22,\"y\":15,\"w\":22,\"h\":15,\"i\":\"0a84cfb3-6a02-4284-8836-042e612e7a24\"},\"panelIndex\":\"0a84cfb3-6a02-4284-8836-042e612e7a24\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"title\":\"CPU Usage as Pct of the Defined Pod Limit [Metricbeat Kubernetes]\",\"panelRefName\":\"panel_0a84cfb3-6a02-4284-8836-042e612e7a24\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":30,\"w\":22,\"h\":15,\"i\":\"44004b79-006a-4190-92b2-91cc334f4cb3\"},\"panelIndex\":\"44004b79-006a-4190-92b2-91cc334f4cb3\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"title\":\"Memory Usage as Pct of the Total Node Memory [Metricbeat Kubernetes]\",\"panelRefName\":\"panel_44004b79-006a-4190-92b2-91cc334f4cb3\"},{\"type\":\"visualization\",\"gridData\":{\"x\":22,\"y\":30,\"w\":22,\"h\":15,\"i\":\"11c530a1-50b3-4701-a09c-cf1483133b11\"},\"panelIndex\":\"11c530a1-50b3-4701-a09c-cf1483133b11\",\"embeddableConfig\":{\"enhancements\":{},\"hidePanelTitles\":false},\"title\":\"Memory Usage as Pct of the Defined Pod Limit [Metricbeat Kubernetes]\",\"panelRefName\":\"panel_11c530a1-50b3-4701-a09c-cf1483133b11\"},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":45,\"w\":24,\"h\":15,\"i\":\"48c2aa0e-9f2c-4979-a1e7-ee38c7c8c68c\"},\"panelIndex\":\"48c2aa0e-9f2c-4979-a1e7-ee38c7c8c68c\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Pods volumes used\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"metricbeat-*\",\"name\":\"indexpattern-datasource-layer-af68de9e-a8e1-4676-8c87-64848360656a\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\",\"legendSize\":\"xlarge\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"af68de9e-a8e1-4676-8c87-64848360656a\",\"seriesType\":\"area\",\"xAccessor\":\"c25291b7-309d-4ff3-a861-6c2e3018f05b\",\"splitAccessor\":\"2e20bf6e-65e7-4ce8-b650-bd1965b1b9a3\",\"accessors\":[\"70dedd1c-d495-4609-ba3a-4a0cae73371b\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"af68de9e-a8e1-4676-8c87-64848360656a\":{\"columns\":{\"c25291b7-309d-4ff3-a861-6c2e3018f05b\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"70dedd1c-d495-4609-ba3a-4a0cae73371b\":{\"label\":\"Average of kubernetes.volume.fs.used.pct\",\"dataType\":\"number\",\"operationType\":\"average\",\"sourceField\":\"kubernetes.volume.fs.used.pct\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"emptyAsNull\":true,\"format\":{\"id\":\"percent\",\"params\":{\"decimals\":2}}}},\"2e20bf6e-65e7-4ce8-b650-bd1965b1b9a3\":{\"label\":\"Top values of kubernetes.volume.name + 1 other\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"kubernetes.volume.name\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"70dedd1c-d495-4609-ba3a-4a0cae73371b\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"multi_terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false,\"secondaryFields\":[\"agent.hostname\"],\"accuracyMode\":false}}},\"columnOrder\":[\"2e20bf6e-65e7-4ce8-b650-bd1965b1b9a3\",\"c25291b7-309d-4ff3-a861-6c2e3018f05b\",\"70dedd1c-d495-4609-ba3a-4a0cae73371b\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"metricbeat-*\"}},\"currentIndexPatternId\":\"metricbeat-*\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":45,\"w\":24,\"h\":15,\"i\":\"e5f13f3d-e822-4b81-9ad6-35c41ee9a6d0\"},\"panelIndex\":\"e5f13f3d-e822-4b81-9ad6-35c41ee9a6d0\",\"embeddableConfig\":{\"savedVis\":{\"id\":\"\",\"title\":\"Pods volumes used\",\"description\":\"\",\"type\":\"metrics\",\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":0,\"id\":\"2ae904a9-1ff4-49ab-ba44-82630534045e\",\"interval\":\"\",\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"afe89741-0fee-475b-ac1e-2520defead1f\",\"label\":\"Pods volumes used\",\"line_width\":1,\"metrics\":[{\"field\":\"kubernetes.volume.fs.used.pct\",\"id\":\"e633bb3f-871d-4eeb-ae11-eb9133eab7b6\",\"type\":\"max\"}],\"override_index_pattern\":0,\"palette\":{\"name\":\"default\",\"type\":\"palette\"},\"point_size\":1,\"separate_axis\":0,\"series_drop_last_bucket\":0,\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":[\"kubernetes.volume.name\",\"kubernetes.pod.name\"],\"terms_order_by\":\"e633bb3f-871d-4eeb-ae11-eb9133eab7b6\",\"terms_direction\":\"desc\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"timeseries\",\"use_kibana_indexes\":true,\"isModelInvalid\":false,\"index_pattern_ref_name\":\"metrics_e5f13f3d-e822-4b81-9ad6-35c41ee9a6d0_0_index_pattern\"},\"uiState\":{},\"data\":{\"aggs\":[],\"searchSource\":{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}}},\"enhancements\":{}}},{\"type\":\"search\",\"gridData\":{\"x\":0,\"y\":60,\"w\":48,\"h\":40,\"i\":\"36f2c9c9-2dac-49c9-9e2f-8f2fc1e83f6f\"},\"panelIndex\":\"36f2c9c9-2dac-49c9-9e2f-8f2fc1e83f6f\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_36f2c9c9-2dac-49c9-9e2f-8f2fc1e83f6f\"}]","timeRestore":false,"title":"Agents Usage Monitoring","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-11-06T10:33:48.517Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"1ef84803-e44e-4c63-ab0b-21f1b3242a15","managed":false,"references":[{"id":"95f0b070-db48-11ec-a23d-5dd6249f86b6","name":"6ffdce5b-20d9-40e2-8522-d04c0758fa03:panel_6ffdce5b-20d9-40e2-8522-d04c0758fa03","type":"lens"},{"id":"kubernetes-9abe1bb0-bcb7-11ec-b64f-7dd6e8e82013","name":"b3176175-156b-4269-9a04-fa6d0dbadd6a:panel_b3176175-156b-4269-9a04-fa6d0dbadd6a","type":"visualization"},{"id":"kubernetes-9e5c9f30-bcb7-11ec-b64f-7dd6e8e82013","name":"0a84cfb3-6a02-4284-8836-042e612e7a24:panel_0a84cfb3-6a02-4284-8836-042e612e7a24","type":"visualization"},{"id":"kubernetes-17849f40-bcb6-11ec-b64f-7dd6e8e82013","name":"44004b79-006a-4190-92b2-91cc334f4cb3:panel_44004b79-006a-4190-92b2-91cc334f4cb3","type":"visualization"},{"id":"kubernetes-f8dc7fc0-bcb7-11ec-b64f-7dd6e8e82013","name":"11c530a1-50b3-4701-a09c-cf1483133b11:panel_11c530a1-50b3-4701-a09c-cf1483133b11","type":"visualization"},{"id":"metricbeat-*","name":"48c2aa0e-9f2c-4979-a1e7-ee38c7c8c68c:indexpattern-datasource-layer-af68de9e-a8e1-4676-8c87-64848360656a","type":"index-pattern"},{"id":"metricbeat-*","name":"e5f13f3d-e822-4b81-9ad6-35c41ee9a6d0:metrics_e5f13f3d-e822-4b81-9ad6-35c41ee9a6d0_0_index_pattern","type":"index-pattern"},{"id":"aaaf5147-90fe-412f-b3e4-785570921006","name":"36f2c9c9-2dac-49c9-9e2f-8f2fc1e83f6f:panel_36f2c9c9-2dac-49c9-9e2f-8f2fc1e83f6f","type":"search"},{"id":"metricbeat-*","name":"controlGroup_64e3aa0a-3a68-4ad1-887b-81f1198dcefa:optionsListDataView","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-11-06T10:33:48.517Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzI4OTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"CPU Usage Gauge [Metricbeat System] ECS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CPU Usage Gauge [Metricbeat System] ECS\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"filter\":\"\",\"gauge_color_rules\":[{\"gauge\":\"rgba(104,188,0,1)\",\"id\":\"4ef2c3b0-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0},{\"gauge\":\"rgba(254,146,0,1)\",\"id\":\"e6561ae0-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0.7},{\"gauge\":\"rgba(211,49,21,1)\",\"id\":\"ec655040-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0.85},{\"gauge\":\"rgba(104,188,0,1)\",\"id\":\"c0fd001c-ec63-436b-90f8-8cc93f28c76c\",\"operator\":\"empty\",\"value\":null}],\"gauge_inner_width\":\"10\",\"gauge_max\":\"1\",\"gauge_style\":\"half\",\"gauge_width\":10,\"hide_last_value_indicator\":true,\"id\":\"4c9e2550-1b91-11e7-bec4-a5e9ec5cab8b\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"4c9e2551-1b91-11e7-bec4-a5e9ec5cab8b\",\"label\":\"CPU Usage\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.user.pct\",\"id\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\"},{\"field\":\"system.cpu.system.pct\",\"id\":\"225c2140-5fd7-11e7-a63a-a937b7c1a7e1\",\"type\":\"avg\"},{\"field\":\"system.cpu.cores\",\"id\":\"837a30c0-5fd7-11e7-a63a-a937b7c1a7e1\",\"type\":\"avg\"},{\"id\":\"587aa510-1b91-11e7-bec4-a5e9ec5cab8b\",\"script\":\"params.n > 0 ? (params.user+params.system)/params.n : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"4c9e2552-1b91-11e7-bec4-a5e9ec5cab8b\",\"id\":\"5a19af10-1b91-11e7-bec4-a5e9ec5cab8b\",\"name\":\"user\"},{\"field\":\"225c2140-5fd7-11e7-a63a-a937b7c1a7e1\",\"id\":\"32b54f80-5fd7-11e7-a63a-a937b7c1a7e1\",\"name\":\"system\"},{\"field\":\"837a30c0-5fd7-11e7-a63a-a937b7c1a7e1\",\"id\":\"8ba6eef0-5fd7-11e7-a63a-a937b7c1a7e1\",\"name\":\"n\"}]}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\",\"time_range_mode\":\"entire_time_range\",\"terms_order_by\":\"_key\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"last_value\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"gauge\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"83e12df0-1b91-11e7-bec4-a5e9ec5cab8b-ecs","managed":false,"references":[],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-17T11:39:47.861Z","version":"WzE4LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory Usage Gauge [Metricbeat System] ECS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory Usage Gauge [Metricbeat System] ECS\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"filter\":\"\",\"gauge_color_rules\":[{\"gauge\":\"rgba(104,188,0,1)\",\"id\":\"a0d522e0-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0},{\"gauge\":\"rgba(254,146,0,1)\",\"id\":\"b45ad8f0-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0.7},{\"gauge\":\"rgba(211,49,21,1)\",\"id\":\"c06e9550-1b91-11e7-bec4-a5e9ec5cab8b\",\"operator\":\"gte\",\"value\":0.85},{\"gauge\":\"rgba(104,188,0,1)\",\"id\":\"4a3b1da6-e38b-4d74-82b7-cdfde708d5f5\",\"operator\":\"empty\",\"value\":null}],\"gauge_inner_width\":10,\"gauge_max\":\"1\",\"gauge_style\":\"half\",\"gauge_width\":10,\"hide_last_value_indicator\":true,\"id\":\"9f51b730-1b91-11e7-bec4-a5e9ec5cab8b\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"9f51b731-1b91-11e7-bec4-a5e9ec5cab8b\",\"label\":\"Memory Usage\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.pct\",\"id\":\"9f51b732-1b91-11e7-bec4-a5e9ec5cab8b\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"time_range_mode\":\"entire_time_range\",\"terms_order_by\":\"_key\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"time_range_mode\":\"last_value\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":1,\"type\":\"gauge\",\"use_kibana_indexes\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"d3166e80-1b91-11e7-bec4-a5e9ec5cab8b-ecs","managed":false,"references":[],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-17T11:39:47.861Z","version":"WzE5LDFd"}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network Traffic (Bytes) [Metricbeat System] ECS AB in","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network Traffic (Bytes) [Metricbeat System] ECS AB in\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"filter\":{\"language\":\"lucene\",\"query\":\"-system.network.name:l*\"},\"id\":\"da1046f0-faa0-11e6-86b1-cd7735ff7e23\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"0.2\",\"formatter\":\"bytes\",\"id\":\"da1046f1-faa0-11e6-86b1-cd7735ff7e23\",\"label\":\"Inbound \",\"line_width\":\"0\",\"metrics\":[{\"field\":\"system.network.in.bytes\",\"id\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\"},{\"field\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"field\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"a87398e0-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"unit\":\"\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"value_template\":\"{{value}}/s\",\"terms_order_by\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(250,40,255,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"id\":\"fbbd5720-faa0-11e6-86b1-cd7735ff7e23\",\"label\":\"Outbound \",\"line_width\":\"0\",\"metrics\":[{\"field\":\"system.network.out.bytes\",\"id\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\"},{\"field\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"id\":\"17e597a0-faa1-11e6-86b1-cd7735ff7e23\",\"script\":\"params.rate != null && params.rate > 0 ? params.rate * -1 : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"1940bad0-faa1-11e6-86b1-cd7735ff7e23\",\"name\":\"rate\"}]},{\"function\":\"sum\",\"id\":\"533da9b0-2c2d-11e7-be71-3162da85303f\",\"type\":\"series_agg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"system.network.name\",\"value_template\":\"{{value}}/s\",\"hidden\":true}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":0,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"41f6e91c-eb91-48c2-9d8f-dc1d037dc8a1","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:31:22.623Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIxOTQsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Network Traffic (Bytes) [Metricbeat System] ECS AB out","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Network Traffic (Bytes) [Metricbeat System] ECS AB out\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"filter\":{\"language\":\"lucene\",\"query\":\"-system.network.name:l*\"},\"id\":\"da1046f0-faa0-11e6-86b1-cd7735ff7e23\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"isModelInvalid\":false,\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"0.2\",\"formatter\":\"bytes\",\"id\":\"da1046f1-faa0-11e6-86b1-cd7735ff7e23\",\"label\":\"Inbound \",\"line_width\":\"0\",\"metrics\":[{\"field\":\"system.network.in.bytes\",\"id\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\"},{\"field\":\"da1046f2-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"field\":\"f41f9280-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"a87398e0-1b93-11e7-8ada-3df93aab833e\",\"type\":\"positive_only\",\"unit\":\"\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"value_template\":\"{{value}}/s\",\"hidden\":true},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(250,40,255,1)\",\"fill\":\"0.2\",\"formatter\":\"bytes\",\"hidden\":false,\"id\":\"fbbd5720-faa0-11e6-86b1-cd7735ff7e23\",\"label\":\"Outbound \",\"line_width\":\"0\",\"metrics\":[{\"field\":\"system.network.out.bytes\",\"id\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"max\"},{\"field\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"type\":\"derivative\",\"unit\":\"1s\"},{\"unit\":\"\",\"id\":\"17e597a0-faa1-11e6-86b1-cd7735ff7e23\",\"script\":\"params.rate != null && params.rate > 0 ? params.rate * -1 : null\",\"type\":\"positive_only\",\"variables\":[{\"field\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\",\"id\":\"1940bad0-faa1-11e6-86b1-cd7735ff7e23\",\"name\":\"rate\"}],\"field\":\"fbbd7e31-faa0-11e6-86b1-cd7735ff7e23\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"value_template\":\"{{value}}/s\",\"terms_order_by\":\"fbbd7e30-faa0-11e6-86b1-cd7735ff7e23\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":0,\"type\":\"timeseries\",\"use_kibana_indexes\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"08624284-6bbb-4ad8-aad4-8989b5309335","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:30:30.241Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIxODcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Top Processes By CPU [Metricbeat System] ECS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Top Processes By CPU [Metricbeat System] ECS\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"last_value\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"bar_color_rules\":[{\"value\":0.75,\"bar_color\":\"rgba(247,10,10,1)\",\"id\":\"60e11be0-1b18-11e7-b09e-037021c4f8df\",\"operator\":\"gte\"},{\"bar_color\":\"rgba(104,188,0,1)\",\"id\":\"147a3da2-60a6-4c32-b2c8-18a40db90c6c\",\"operator\":\"empty\",\"value\":null}],\"drilldown_url\":\"\",\"filter\":\"\",\"hide_last_value_indicator\":true,\"id\":\"5f5b8d50-1b18-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"5f5b8d51-1b18-11e7-b09e-037021c4f8df\",\"line_width\":1,\"metrics\":[{\"field\":\"system.process.cpu.total.pct\",\"id\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"process.name\",\"terms_order_by\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"top_n\",\"use_kibana_indexes\":false,\"drop_last_bucket\":1,\"axis_scale\":\"normal\",\"truncate_legend\":1,\"max_lines_legend\":1,\"tooltip_mode\":\"show_all\",\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"e0f001c0-1b18-11e7-b09e-037021c4f8df-ecs","managed":false,"references":[],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:31:41.771Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIxOTcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"System Load [Metricbeat System] ECS load.norm.5 AB","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"System Load [Metricbeat System] ECS load.norm.5 AB\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"f6264ad0-1b14-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(115,216,255,1)\",\"fill\":\"0\",\"formatter\":\"number\",\"id\":\"f62671e0-1b14-11e7-b09e-037021c4f8df\",\"label\":\"1m\",\"line_width\":\"3\",\"metrics\":[{\"field\":\"system.load.norm.5\",\"id\":\"f62671e1-1b14-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\",\"terms_order_by\":\"f62671e1-1b14-11e7-b09e-037021c4f8df\",\"hidden\":false},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"0\",\"formatter\":\"number\",\"id\":\"1c324850-1b15-11e7-b09e-037021c4f8df\",\"label\":\"5m\",\"line_width\":\"3\",\"metrics\":[{\"field\":\"system.load.5\",\"id\":\"1c324851-1b15-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"none\",\"hidden\":true},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,98,177,1)\",\"fill\":\"0\",\"formatter\":\"number\",\"id\":\"3287e740-1b15-11e7-b09e-037021c4f8df\",\"label\":\"15m\",\"line_width\":\"3\",\"metrics\":[{\"field\":\"system.load.15\",\"id\":\"32880e50-1b15-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"none\",\"hidden\":true},{\"time_range_mode\":\"entire_time_range\",\"id\":\"e612851e-31c2-4bdf-bbe9-b4dd9353c06a\",\"color\":\"rgba(231,102,76,1)\",\"split_mode\":\"everything\",\"palette\":{\"type\":\"palette\",\"name\":\"default\"},\"metrics\":[{\"id\":\"85ed436d-b022-4a1e-b6ce-58c747a31c55\",\"type\":\"static\",\"value\":\"0.75\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"number\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"override_index_pattern\":0,\"series_drop_last_bucket\":0,\"label\":\"System Load Threshold\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":0,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"1f90151d-da59-411c-a2e6-27f6768c8936","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:32:17.335Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIyMDMsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory Usage [Metricbeat System] ECS Used AB ","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory Usage [Metricbeat System] ECS Used AB \",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"32f46f40-1b16-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(211,49,21,1)\",\"fill\":\"0.1\",\"formatter\":\"bytes\",\"id\":\"4ff61fd0-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Used\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"4ff61fd1-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\",\"terms_order_by\":\"4ff61fd1-1b16-11e7-b09e-037021c4f8df\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"id\":\"753a6080-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Cache\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"field\":\"system.memory.used.bytes\",\"id\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"id\":\"869cc160-1b16-11e7-b09e-037021c4f8df\",\"script\":\"params.actual != null && params.used != null ? params.used - params.actual : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"id\":\"890f9620-1b16-11e7-b09e-037021c4f8df\",\"name\":\"actual\"},{\"field\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"id\":\"8f3ab7f0-1b16-11e7-b09e-037021c4f8df\",\"name\":\"used\"}]}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\",\"hidden\":true},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":\"1\",\"formatter\":\"bytes\",\"id\":\"32f46f41-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Free\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.free\",\"id\":\"32f46f42-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\",\"hidden\":true}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":0,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"35df6afd-02bd-41dd-912c-ba133b1b18e1","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:32:52.924Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIyMDgsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory Usage [Metricbeat System] ECS Cached AB","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory Usage [Metricbeat System] ECS Cached AB\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"32f46f40-1b16-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(211,49,21,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"hidden\":true,\"id\":\"4ff61fd0-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Used\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"4ff61fd1-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"0.1\",\"formatter\":\"bytes\",\"id\":\"753a6080-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Cache\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"field\":\"system.memory.used.bytes\",\"id\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"id\":\"869cc160-1b16-11e7-b09e-037021c4f8df\",\"script\":\"params.actual != null && params.used != null ? params.used - params.actual : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"id\":\"890f9620-1b16-11e7-b09e-037021c4f8df\",\"name\":\"actual\"},{\"field\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"id\":\"8f3ab7f0-1b16-11e7-b09e-037021c4f8df\",\"name\":\"used\"}]}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\",\"terms_order_by\":\"_key\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":\"1\",\"formatter\":\"bytes\",\"id\":\"32f46f41-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Free\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.free\",\"id\":\"32f46f42-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\",\"hidden\":true}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":0,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"0055f937-3ec3-4e88-ad90-5590bbd5f354","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:34:08.473Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIyMTIsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Memory Usage [Metricbeat System] ECS Free AB","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Memory Usage [Metricbeat System] ECS Free AB\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"32f46f40-1b16-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(211,49,21,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"hidden\":true,\"id\":\"4ff61fd0-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Used\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"4ff61fd1-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(0,156,224,1)\",\"fill\":\"1\",\"formatter\":\"bytes\",\"hidden\":true,\"id\":\"753a6080-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Cache\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.actual.used.bytes\",\"id\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"field\":\"system.memory.used.bytes\",\"id\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"},{\"id\":\"869cc160-1b16-11e7-b09e-037021c4f8df\",\"script\":\"params.actual != null && params.used != null ? params.used - params.actual : null\",\"type\":\"calculation\",\"variables\":[{\"field\":\"753a6081-1b16-11e7-b09e-037021c4f8df\",\"id\":\"890f9620-1b16-11e7-b09e-037021c4f8df\",\"name\":\"actual\"},{\"field\":\"7c9d3f00-1b16-11e7-b09e-037021c4f8df\",\"id\":\"8f3ab7f0-1b16-11e7-b09e-037021c4f8df\",\"name\":\"used\"}]}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":\"0.1\",\"formatter\":\"bytes\",\"id\":\"32f46f41-1b16-11e7-b09e-037021c4f8df\",\"label\":\"Free\",\"line_width\":1,\"metrics\":[{\"field\":\"system.memory.free\",\"id\":\"32f46f42-1b16-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.name\",\"terms_order_by\":\"32f46f42-1b16-11e7-b09e-037021c4f8df\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_all\",\"truncate_legend\":0,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"ee1920dd-ebb1-41fb-b821-db2035fd308b","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:34:28.441Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIyMTYsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"Top Processes By CPU [Metricbeat System] ECS AB","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"Top Processes By CPU [Metricbeat System] ECS AB\",\"type\":\"metrics\",\"aggs\":[],\"params\":{\"time_range_mode\":\"last_value\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"bar_color_rules\":[{\"bar_color\":\"rgba(104,188,0,1)\",\"id\":\"60e11be0-1b18-11e7-b09e-037021c4f8df\",\"operator\":\"gte\",\"value\":0},{\"bar_color\":\"rgba(104,188,0,1)\",\"id\":\"147a3da2-60a6-4c32-b2c8-18a40db90c6c\",\"operator\":\"empty\",\"value\":null}],\"drilldown_url\":\"\",\"filter\":\"\",\"hide_last_value_indicator\":true,\"id\":\"5f5b8d50-1b18-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":0.5,\"formatter\":\"percent\",\"id\":\"5f5b8d51-1b18-11e7-b09e-037021c4f8df\",\"line_width\":1,\"metrics\":[{\"field\":\"system.process.cpu.total.pct\",\"id\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":1,\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"process.name\",\"terms_order_by\":\"5f5b8d52-1b18-11e7-b09e-037021c4f8df\",\"terms_size\":\"30\"},{\"time_range_mode\":\"entire_time_range\",\"id\":\"617f18f5-b98c-404f-b290-51e424bfa95e\",\"color\":\"rgba(231,102,76,1)\",\"split_mode\":\"everything\",\"palette\":{\"type\":\"palette\",\"name\":\"default\"},\"metrics\":[{\"id\":\"aeb4e650-e35f-4216-bf32-4208da87cd26\",\"type\":\"static\",\"value\":\"0.75\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"override_index_pattern\":0,\"series_drop_last_bucket\":0,\"label\":\"CPU Threshold\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"drop_last_bucket\":1,\"axis_scale\":\"normal\",\"truncate_legend\":0,\"max_lines_legend\":1,\"tooltip_mode\":\"show_all\",\"background_color_rules\":[{\"id\":\"ebd2fa74-7d3b-44e4-aa77-43e6c3770ba5\"}],\"isModelInvalid\":false}}"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-17T11:39:47.861Z","id":"94d81971-c4ac-40b2-a92a-c9f2b4ed7b59","managed":false,"references":[{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"visualization","typeMigrationVersion":"8.5.0","updated_at":"2024-10-30T09:35:01.567Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIyMjAsMV0="}
+{"attributes":{"controlGroupInput":{"chainingSystem":"HIERARCHICAL","controlStyle":"oneLine","ignoreParentSettingsJSON":"{\"ignoreFilters\":false,\"ignoreQuery\":false,\"ignoreTimerange\":false,\"ignoreValidations\":false}","panelsJSON":"{\"533e58a4-be6f-4410-8013-5437cf1d8e7d\":{\"type\":\"optionsListControl\",\"order\":0,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"533e58a4-be6f-4410-8013-5437cf1d8e7d\",\"fieldName\":\"agent.hostname\",\"title\":\"agent.hostname\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}},\"849d9fc4-289a-47b7-a26a-772114f2ebed\":{\"type\":\"optionsListControl\",\"order\":1,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"849d9fc4-289a-47b7-a26a-772114f2ebed\",\"fieldName\":\"process.name\",\"title\":\"process.name\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}}}","showApplySelections":false},"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":9,\"i\":\"7963083f-50ba-4366-88a3-0d6ee573e7e6\"},\"panelIndex\":\"7963083f-50ba-4366-88a3-0d6ee573e7e6\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"CPU Usage\",\"panelRefName\":\"panel_7963083f-50ba-4366-88a3-0d6ee573e7e6\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":9,\"w\":48,\"h\":10,\"i\":\"68fdf26b-dac0-4738-8289-270528c4765b\"},\"panelIndex\":\"68fdf26b-dac0-4738-8289-270528c4765b\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Memory Usage\",\"panelRefName\":\"panel_68fdf26b-dac0-4738-8289-270528c4765b\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":19,\"w\":24,\"h\":15,\"i\":\"ee32ad47-d8b3-46ea-8c4f-aa49e1bee952\"},\"panelIndex\":\"ee32ad47-d8b3-46ea-8c4f-aa49e1bee952\",\"embeddableConfig\":{\"savedVis\":{\"title\":\"\",\"description\":\"\",\"type\":\"metrics\",\"params\":{\"time_range_mode\":\"entire_time_range\",\"axis_formatter\":\"number\",\"axis_position\":\"left\",\"axis_scale\":\"normal\",\"drop_last_bucket\":1,\"id\":\"80a04950-1b19-11e7-b09e-037021c4f8df\",\"index_pattern\":\"metricbeat-*\",\"interval\":\"auto\",\"max_lines_legend\":1,\"series\":[{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"#68BC00\",\"fill\":\"0.1\",\"formatter\":\"percent\",\"id\":\"80a04951-1b19-11e7-b09e-037021c4f8df\",\"label\":\"user\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.total.norm.pct\",\"id\":\"80a04952-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"terms\",\"stacked\":\"none\",\"terms_field\":\"agent.hostname\",\"terms_order_by\":\"80a04952-1b19-11e7-b09e-037021c4f8df\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(211,49,21,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"993acf30-1b19-11e7-b09e-037021c4f8df\",\"label\":\"system\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.system.pct\",\"id\":\"993acf31-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(123,100,255,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"65ca35e0-1b1a-11e7-b09e-037021c4f8df\",\"label\":\"nice\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.nice.pct\",\"id\":\"65ca5cf0-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(226,115,0,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"741b5f20-1b1a-11e7-b09e-037021c4f8df\",\"label\":\"irq\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.irq.pct\",\"id\":\"741b5f21-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(176,188,0,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"2efc5d40-1b1a-11e7-b09e-037021c4f8df\",\"label\":\"softirq\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.softirq.pct\",\"id\":\"2efc5d41-1b1a-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"axis_position\":\"right\",\"chart_type\":\"line\",\"color\":\"rgba(15,20,25,1)\",\"fill\":\"1\",\"formatter\":\"percent\",\"hidden\":true,\"id\":\"ae644a30-1b19-11e7-b09e-037021c4f8df\",\"label\":\"iowait\",\"line_width\":1,\"metrics\":[{\"field\":\"system.cpu.iowait.pct\",\"id\":\"ae644a31-1b19-11e7-b09e-037021c4f8df\",\"type\":\"avg\"}],\"point_size\":\"0\",\"seperate_axis\":0,\"split_color_mode\":\"gradient\",\"split_mode\":\"everything\",\"stacked\":\"stacked\"},{\"time_range_mode\":\"entire_time_range\",\"id\":\"e8419d7e-c142-4bf0-9043-8be0375e44b0\",\"color\":\"rgba(231,102,76,1)\",\"split_mode\":\"everything\",\"palette\":{\"type\":\"palette\",\"name\":\"default\"},\"metrics\":[{\"id\":\"1bce585e-48ab-4274-85b4-2169b197795e\",\"type\":\"static\",\"value\":\"0.75\"}],\"separate_axis\":0,\"axis_position\":\"right\",\"formatter\":\"percent\",\"chart_type\":\"line\",\"line_width\":1,\"point_size\":\"0\",\"fill\":\"0\",\"stacked\":\"none\",\"override_index_pattern\":0,\"series_drop_last_bucket\":0,\"label\":\"CPU threshold\",\"value_template\":\"{{value}}\"}],\"show_grid\":1,\"show_legend\":1,\"time_field\":\"@timestamp\",\"tooltip_mode\":\"show_focused\",\"truncate_legend\":0,\"type\":\"timeseries\",\"use_kibana_indexes\":false,\"isModelInvalid\":false},\"uiState\":{},\"data\":{\"aggs\":[],\"searchSource\":{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}}},\"enhancements\":{},\"description\":\"\"},\"title\":\"CPU Total Usage\"},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":19,\"w\":24,\"h\":15,\"i\":\"0fad7e75-1d6b-4f19-9cd4-62a307461c30\"},\"panelIndex\":\"0fad7e75-1d6b-4f19-9cd4-62a307461c30\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Network In Traffic in Bytes\",\"panelRefName\":\"panel_0fad7e75-1d6b-4f19-9cd4-62a307461c30\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":34,\"w\":24,\"h\":15,\"i\":\"94a9f456-efc5-42f6-b50d-f4a1bd247f58\"},\"panelIndex\":\"94a9f456-efc5-42f6-b50d-f4a1bd247f58\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Network Out Traffic in Bytes\",\"panelRefName\":\"panel_94a9f456-efc5-42f6-b50d-f4a1bd247f58\"},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":34,\"w\":24,\"h\":15,\"i\":\"929eaf27-d9e5-4982-ab5b-daa39246c0b4\"},\"panelIndex\":\"929eaf27-d9e5-4982-ab5b-daa39246c0b4\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_929eaf27-d9e5-4982-ab5b-daa39246c0b4\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":49,\"w\":24,\"h\":15,\"i\":\"a01e7958-75fb-4013-a550-97651eaaf4ea\"},\"panelIndex\":\"a01e7958-75fb-4013-a550-97651eaaf4ea\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"System Load Norm 5\",\"panelRefName\":\"panel_a01e7958-75fb-4013-a550-97651eaaf4ea\"},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":49,\"w\":24,\"h\":15,\"i\":\"72694df9-5728-431b-9db7-321b1dd75b9f\"},\"panelIndex\":\"72694df9-5728-431b-9db7-321b1dd75b9f\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Memory Used\",\"panelRefName\":\"panel_72694df9-5728-431b-9db7-321b1dd75b9f\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":64,\"w\":24,\"h\":15,\"i\":\"5fdb58a4-509e-4e12-96c2-598c96a83114\"},\"panelIndex\":\"5fdb58a4-509e-4e12-96c2-598c96a83114\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Memory Cached\",\"panelRefName\":\"panel_5fdb58a4-509e-4e12-96c2-598c96a83114\"},{\"type\":\"visualization\",\"gridData\":{\"x\":24,\"y\":64,\"w\":24,\"h\":15,\"i\":\"10fa3966-36e1-42c9-82d4-cd3f50c47818\"},\"panelIndex\":\"10fa3966-36e1-42c9-82d4-cd3f50c47818\",\"embeddableConfig\":{\"enhancements\":{},\"description\":\"\"},\"title\":\"Memory Free\",\"panelRefName\":\"panel_10fa3966-36e1-42c9-82d4-cd3f50c47818\"},{\"type\":\"visualization\",\"gridData\":{\"x\":0,\"y\":79,\"w\":24,\"h\":15,\"i\":\"ae2f33cf-a681-4ff9-8d5b-c4f2f0935a02\"},\"panelIndex\":\"ae2f33cf-a681-4ff9-8d5b-c4f2f0935a02\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_ae2f33cf-a681-4ff9-8d5b-c4f2f0935a02\"},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":79,\"w\":24,\"h\":15,\"i\":\"ca6fb568-a584-42e5-89b7-8aed8c3d7505\"},\"panelIndex\":\"ca6fb568-a584-42e5-89b7-8aed8c3d7505\",\"embeddableConfig\":{\"attributes\":{\"title\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"metricbeat-*\",\"name\":\"indexpattern-datasource-layer-c35fcaea-4d34-41fc-a6a7-c77ecaa8a77d\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\",\"legendSize\":\"auto\",\"shouldTruncate\":false},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area_stacked\",\"layers\":[{\"layerId\":\"c35fcaea-4d34-41fc-a6a7-c77ecaa8a77d\",\"accessors\":[\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527\"],\"position\":\"top\",\"seriesType\":\"area_stacked\",\"showGridlines\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"xAccessor\":\"9c2accad-7d6d-4af9-8cbf-ac49852d2c34\",\"splitAccessor\":\"75320640-72a6-4310-b3a6-203602f1b514\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"c35fcaea-4d34-41fc-a6a7-c77ecaa8a77d\":{\"columns\":{\"9c2accad-7d6d-4af9-8cbf-ac49852d2c34\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X0\":{\"label\":\"Part of Energy efficiency [W]\",\"dataType\":\"number\",\"operationType\":\"average\",\"sourceField\":\"system.load.norm.5\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"emptyAsNull\":false},\"customLabel\":true},\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X1\":{\"label\":\"Part of Energy efficiency [W]\",\"dataType\":\"number\",\"operationType\":\"math\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"tinymathAst\":{\"type\":\"function\",\"name\":\"multiply\",\"args\":[\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X0\",200],\"location\":{\"min\":0,\"max\":33},\"text\":\"average(system.load.norm.5) * 200\"}},\"references\":[\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X0\"],\"customLabel\":true},\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527\":{\"label\":\"Energy efficiency [W]\",\"dataType\":\"number\",\"operationType\":\"formula\",\"isBucketed\":false,\"scale\":\"ratio\",\"params\":{\"formula\":\"average(system.load.norm.5) * 200\",\"isFormulaBroken\":false,\"format\":{\"id\":\"number\",\"params\":{\"decimals\":2,\"compact\":false}}},\"references\":[\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X1\"],\"customLabel\":true},\"75320640-72a6-4310-b3a6-203602f1b514\":{\"label\":\"Top 10 values of agent.hostname\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"agent.hostname\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"custom\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false,\"orderAgg\":{\"label\":\"Last value of system.load.norm.5\",\"dataType\":\"number\",\"operationType\":\"last_value\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"system.load.norm.5\",\"filter\":{\"query\":\"\\\"system.load.norm.5\\\": *\",\"language\":\"kuery\"},\"params\":{\"sortField\":\"@timestamp\"}}}}},\"columnOrder\":[\"75320640-72a6-4310-b3a6-203602f1b514\",\"9c2accad-7d6d-4af9-8cbf-ac49852d2c34\",\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527\",\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X0\",\"d9bbd3fd-04c9-4e50-9651-fef7d9ae9527X1\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"metricbeat-*\"}},\"currentIndexPatternId\":\"metricbeat-*\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}},\"title\":\"Energy efficiency\"}]","timeRestore":false,"title":"Kubernetes Cluster Nodes Overview","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-11-06T10:32:33.973Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"e8064087-e0e3-4449-868a-447c350cfff9","managed":false,"references":[{"id":"83e12df0-1b91-11e7-bec4-a5e9ec5cab8b-ecs","name":"7963083f-50ba-4366-88a3-0d6ee573e7e6:panel_7963083f-50ba-4366-88a3-0d6ee573e7e6","type":"visualization"},{"id":"d3166e80-1b91-11e7-bec4-a5e9ec5cab8b-ecs","name":"68fdf26b-dac0-4738-8289-270528c4765b:panel_68fdf26b-dac0-4738-8289-270528c4765b","type":"visualization"},{"id":"41f6e91c-eb91-48c2-9d8f-dc1d037dc8a1","name":"0fad7e75-1d6b-4f19-9cd4-62a307461c30:panel_0fad7e75-1d6b-4f19-9cd4-62a307461c30","type":"visualization"},{"id":"08624284-6bbb-4ad8-aad4-8989b5309335","name":"94a9f456-efc5-42f6-b50d-f4a1bd247f58:panel_94a9f456-efc5-42f6-b50d-f4a1bd247f58","type":"visualization"},{"id":"e0f001c0-1b18-11e7-b09e-037021c4f8df-ecs","name":"929eaf27-d9e5-4982-ab5b-daa39246c0b4:panel_929eaf27-d9e5-4982-ab5b-daa39246c0b4","type":"visualization"},{"id":"1f90151d-da59-411c-a2e6-27f6768c8936","name":"a01e7958-75fb-4013-a550-97651eaaf4ea:panel_a01e7958-75fb-4013-a550-97651eaaf4ea","type":"visualization"},{"id":"35df6afd-02bd-41dd-912c-ba133b1b18e1","name":"72694df9-5728-431b-9db7-321b1dd75b9f:panel_72694df9-5728-431b-9db7-321b1dd75b9f","type":"visualization"},{"id":"0055f937-3ec3-4e88-ad90-5590bbd5f354","name":"5fdb58a4-509e-4e12-96c2-598c96a83114:panel_5fdb58a4-509e-4e12-96c2-598c96a83114","type":"visualization"},{"id":"ee1920dd-ebb1-41fb-b821-db2035fd308b","name":"10fa3966-36e1-42c9-82d4-cd3f50c47818:panel_10fa3966-36e1-42c9-82d4-cd3f50c47818","type":"visualization"},{"id":"94d81971-c4ac-40b2-a92a-c9f2b4ed7b59","name":"ae2f33cf-a681-4ff9-8d5b-c4f2f0935a02:panel_ae2f33cf-a681-4ff9-8d5b-c4f2f0935a02","type":"visualization"},{"id":"metricbeat-*","name":"ca6fb568-a584-42e5-89b7-8aed8c3d7505:indexpattern-datasource-layer-c35fcaea-4d34-41fc-a6a7-c77ecaa8a77d","type":"index-pattern"},{"id":"metricbeat-*","name":"controlGroup_533e58a4-be6f-4410-8013-5437cf1d8e7d:optionsListDataView","type":"index-pattern"},{"id":"metricbeat-*","name":"controlGroup_849d9fc4-289a-47b7-a26a-772114f2ebed:optionsListDataView","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-11-06T10:32:33.973Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzI4ODMsMV0="}
+{"attributes":{"controlGroupInput":{"chainingSystem":"HIERARCHICAL","controlStyle":"oneLine","ignoreParentSettingsJSON":"{\"ignoreFilters\":false,\"ignoreQuery\":false,\"ignoreTimerange\":false,\"ignoreValidations\":false}","panelsJSON":"{\"adfdc059-bb89-40d5-bca5-94048a89cb22\":{\"type\":\"optionsListControl\",\"order\":0,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"adfdc059-bb89-40d5-bca5-94048a89cb22\",\"fieldName\":\"loglevel\",\"title\":\"Loglevel\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}},\"1b24698c-84b6-41cf-ad2e-1750f973f1be\":{\"type\":\"optionsListControl\",\"order\":1,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"1b24698c-84b6-41cf-ad2e-1750f973f1be\",\"fieldName\":\"kubernetes.container.name.keyword\",\"title\":\"Container name\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}}}","showApplySelections":false},"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":15,\"i\":\"717b5036-183d-47ec-8eb5-019005f95d54\"},\"panelIndex\":\"717b5036-183d-47ec-8eb5-019005f95d54\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Technical logs - events\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"id\":\"51dec46a-a4ef-4f74-a997-851bd2164f4f\",\"name\":\"indexpattern-datasource-layer-3ea1ad4f-420a-4948-af37-af0540cc02d6\",\"type\":\"index-pattern\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"3ea1ad4f-420a-4948-af37-af0540cc02d6\",\"seriesType\":\"area\",\"xAccessor\":\"9f07133a-79a7-4040-870b-f79ca192d5e0\",\"splitAccessor\":\"3697ffee-e63c-4b7e-b028-4838f4d80107\",\"accessors\":[\"ceec1970-2860-467b-b8a6-db9162de75ce\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"3ea1ad4f-420a-4948-af37-af0540cc02d6\":{\"columns\":{\"3697ffee-e63c-4b7e-b028-4838f4d80107\":{\"label\":\"Top 5 values of loglevel\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"loglevel\",\"isBucketed\":true,\"params\":{\"size\":5,\"orderBy\":{\"type\":\"column\",\"columnId\":\"ceec1970-2860-467b-b8a6-db9162de75ce\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"9f07133a-79a7-4040-870b-f79ca192d5e0\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"ceec1970-2860-467b-b8a6-db9162de75ce\":{\"label\":\"Number of events\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"customLabel\":true}},\"columnOrder\":[\"3697ffee-e63c-4b7e-b028-4838f4d80107\",\"9f07133a-79a7-4040-870b-f79ca192d5e0\",\"ceec1970-2860-467b-b8a6-db9162de75ce\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"51dec46a-a4ef-4f74-a997-851bd2164f4f\"}},\"currentIndexPatternId\":\"51dec46a-a4ef-4f74-a997-851bd2164f4f\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":15,\"i\":\"378f63ef-322a-4d83-a580-4350dfb8c699\"},\"panelIndex\":\"378f63ef-322a-4d83-a580-4350dfb8c699\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Technical logs - log types\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"51dec46a-a4ef-4f74-a997-851bd2164f4f\",\"name\":\"indexpattern-datasource-layer-a75f7889-21e4-46ab-aa8c-df68e87d4228\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\",\"legendSize\":\"xlarge\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"area\",\"layers\":[{\"layerId\":\"a75f7889-21e4-46ab-aa8c-df68e87d4228\",\"seriesType\":\"area\",\"xAccessor\":\"78a47e3b-3a54-436b-9b96-e20ec6252c1f\",\"accessors\":[\"65996567-4c46-46e1-900d-037d9513be29\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"splitAccessor\":\"74683c84-4870-4993-abe4-5a1597088d85\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"a75f7889-21e4-46ab-aa8c-df68e87d4228\":{\"columns\":{\"78a47e3b-3a54-436b-9b96-e20ec6252c1f\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"65996567-4c46-46e1-900d-037d9513be29\":{\"label\":\"Number of log types\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"customLabel\":true},\"74683c84-4870-4993-abe4-5a1597088d85\":{\"label\":\"Top 15 values of kubernetes.container.name.keyword\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"kubernetes.container.name.keyword\",\"isBucketed\":true,\"params\":{\"size\":15,\"orderBy\":{\"type\":\"column\",\"columnId\":\"65996567-4c46-46e1-900d-037d9513be29\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false,\"secondaryFields\":[]}}},\"columnOrder\":[\"74683c84-4870-4993-abe4-5a1597088d85\",\"78a47e3b-3a54-436b-9b96-e20ec6252c1f\",\"65996567-4c46-46e1-900d-037d9513be29\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"51dec46a-a4ef-4f74-a997-851bd2164f4f\"}},\"currentIndexPatternId\":\"51dec46a-a4ef-4f74-a997-851bd2164f4f\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"search\",\"gridData\":{\"x\":0,\"y\":15,\"w\":48,\"h\":19,\"i\":\"dbe0c8cf-ed82-4d4b-80fd-d953ff4e4316\"},\"panelIndex\":\"dbe0c8cf-ed82-4d4b-80fd-d953ff4e4316\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_dbe0c8cf-ed82-4d4b-80fd-d953ff4e4316\"}]","timeRestore":false,"title":"Technical Monitoring Dashboard","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-11-06T10:31:18.811Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"77c33df6-5cdb-4b50-91ce-ab2fb65b4eb7","managed":false,"references":[{"id":"51dec46a-a4ef-4f74-a997-851bd2164f4f","name":"717b5036-183d-47ec-8eb5-019005f95d54:indexpattern-datasource-layer-3ea1ad4f-420a-4948-af37-af0540cc02d6","type":"index-pattern"},{"id":"51dec46a-a4ef-4f74-a997-851bd2164f4f","name":"378f63ef-322a-4d83-a580-4350dfb8c699:indexpattern-datasource-layer-a75f7889-21e4-46ab-aa8c-df68e87d4228","type":"index-pattern"},{"id":"aaaf5147-90fe-412f-b3e4-785570921006","name":"dbe0c8cf-ed82-4d4b-80fd-d953ff4e4316:panel_dbe0c8cf-ed82-4d4b-80fd-d953ff4e4316","type":"search"},{"id":"51dec46a-a4ef-4f74-a997-851bd2164f4f","name":"controlGroup_adfdc059-bb89-40d5-bca5-94048a89cb22:optionsListDataView","type":"index-pattern"},{"id":"51dec46a-a4ef-4f74-a997-851bd2164f4f","name":"controlGroup_1b24698c-84b6-41cf-ad2e-1750f973f1be:optionsListDataView","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-11-06T10:31:18.811Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzI4NzYsMV0="}
+{"attributes":{"allowHidden":false,"fieldAttrs":"{\"agent.hostname\":{\"count\":1},\"event.dataset\":{\"count\":1},\"event.kind\":{\"count\":1},\"event.module\":{\"count\":1},\"log.file.path\":{\"count\":2},\"log.level\":{\"count\":3},\"message\":{\"count\":3},\"event.original\":{\"count\":1},\"data_stream.dataset\":{\"count\":1}}","fieldFormatMap":"{}","fields":"[]","name":"filebeat-elk","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"filebeat-*"},"coreMigrationVersion":"8.8.0","created_at":"2024-11-04T09:22:52.058Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-11-04T15:51:58.942Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzI1NzIsMV0="}
+{"attributes":{"columns":["log.level","event.module","event.dataset","message"],"description":"","grid":{"columns":{"event.dataset":{"width":147},"event.module":{"width":131},"log.level":{"width":95}}},"hideChart":false,"isTextBasedQuery":false,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"sort":[["@timestamp","desc"]],"timeRestore":false,"title":"ELK - logs"},"coreMigrationVersion":"8.8.0","created_at":"2024-11-04T10:42:20.167Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"4d1d8210-cd83-4669-9e7a-b12748fb0829","managed":false,"references":[{"id":"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"search","typeMigrationVersion":"10.4.0","updated_at":"2024-11-04T10:42:20.167Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzI0NjcsMV0="}
+{"attributes":{"controlGroupInput":{"chainingSystem":"HIERARCHICAL","controlStyle":"oneLine","ignoreParentSettingsJSON":"{\"ignoreFilters\":false,\"ignoreQuery\":false,\"ignoreTimerange\":false,\"ignoreValidations\":false}","panelsJSON":"{\"012659cf-cb1f-42fc-8ef7-eba9b8791e67\":{\"type\":\"optionsListControl\",\"order\":0,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"012659cf-cb1f-42fc-8ef7-eba9b8791e67\",\"fieldName\":\"event.dataset\",\"title\":\"event.dataset\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"selectedOptions\":[],\"enhancements\":{}}},\"a89f3e68-663d-46d6-bcd7-9e93af1a7b62\":{\"type\":\"optionsListControl\",\"order\":1,\"grow\":true,\"width\":\"medium\",\"explicitInput\":{\"id\":\"a89f3e68-663d-46d6-bcd7-9e93af1a7b62\",\"fieldName\":\"event.module\",\"title\":\"event.module\",\"grow\":true,\"width\":\"medium\",\"searchTechnique\":\"prefix\",\"enhancements\":{}}}}","showApplySelections":false},"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":48,\"h\":16,\"i\":\"d090e283-491e-4019-8963-8c40c0eb3857\"},\"panelIndex\":\"d090e283-491e-4019-8963-8c40c0eb3857\",\"embeddableConfig\":{\"attributes\":{\"title\":\"ELK - total events\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\",\"name\":\"indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\",\"seriesType\":\"bar_stacked\",\"xAccessor\":\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"splitAccessor\":\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"accessors\":[\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\":{\"columns\":{\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\":{\"label\":\"Top 10 values of log.level\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"log.level\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"21abc746-2603-41ac-a34d-8dd4deca6135\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"21abc746-2603-41ac-a34d-8dd4deca6135\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true}}},\"columnOrder\":[\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"}},\"currentIndexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":16,\"w\":24,\"h\":13,\"i\":\"5d2a07e3-7071-451b-acb1-3b5a3c465263\"},\"panelIndex\":\"5d2a07e3-7071-451b-acb1-3b5a3c465263\",\"embeddableConfig\":{\"attributes\":{\"title\":\"ELK - total events\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\",\"name\":\"indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\",\"seriesType\":\"bar_stacked\",\"xAccessor\":\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"splitAccessor\":\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"accessors\":[\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\":{\"columns\":{\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\":{\"label\":\"Top 10 values of log.level\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"log.level\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"21abc746-2603-41ac-a34d-8dd4deca6135\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"21abc746-2603-41ac-a34d-8dd4deca6135\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"filter\":{\"query\":\"event.module :\\\"elasticsearch\\\"\",\"language\":\"kuery\"}}},\"columnOrder\":[\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"}},\"currentIndexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{},\"description\":\"\"},\"title\":\"ELK - Elasticsearch total events\"},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":16,\"w\":24,\"h\":13,\"i\":\"9bf7e7cf-19ea-4dbd-8add-048c215ef580\"},\"panelIndex\":\"9bf7e7cf-19ea-4dbd-8add-048c215ef580\",\"embeddableConfig\":{\"attributes\":{\"title\":\"ELK - total events\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\",\"name\":\"indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\",\"seriesType\":\"bar_stacked\",\"xAccessor\":\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"splitAccessor\":\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"accessors\":[\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\":{\"columns\":{\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\":{\"label\":\"Top 10 values of log.level\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"log.level\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"21abc746-2603-41ac-a34d-8dd4deca6135\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"21abc746-2603-41ac-a34d-8dd4deca6135\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"filter\":{\"query\":\"event.dataset :\\\"elasticsearch.server\\\" \",\"language\":\"kuery\"}}},\"columnOrder\":[\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"}},\"currentIndexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{},\"description\":\"\"},\"title\":\"ELK - Elasticsearch server events\"},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":29,\"w\":48,\"h\":14,\"i\":\"7adda9bd-8934-490f-9b96-74961d5c7d56\"},\"panelIndex\":\"7adda9bd-8934-490f-9b96-74961d5c7d56\",\"embeddableConfig\":{\"attributes\":{\"title\":\"ELK - total events\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\",\"name\":\"indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\",\"seriesType\":\"bar_stacked\",\"xAccessor\":\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"splitAccessor\":\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"accessors\":[\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\":{\"columns\":{\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\":{\"label\":\"Top 10 values of log.level\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"log.level\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"21abc746-2603-41ac-a34d-8dd4deca6135\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"21abc746-2603-41ac-a34d-8dd4deca6135\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"filter\":{\"query\":\"event.module :\\\"logstash\\\"\",\"language\":\"kuery\"}}},\"columnOrder\":[\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"}},\"currentIndexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{},\"description\":\"\"},\"title\":\"ELK - Logstash total events\"},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":43,\"w\":48,\"h\":14,\"i\":\"8e83d811-18c8-4d0a-9ef3-15dea3ac1cc3\"},\"panelIndex\":\"8e83d811-18c8-4d0a-9ef3-15dea3ac1cc3\",\"embeddableConfig\":{\"attributes\":{\"title\":\"ELK - total events\",\"description\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\",\"name\":\"indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\",\"seriesType\":\"bar_stacked\",\"xAccessor\":\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"splitAccessor\":\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"accessors\":[\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"0ee1d5dc-ded6-4cf3-b258-68bff83c84aa\":{\"columns\":{\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\":{\"label\":\"Top 10 values of log.level\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"log.level\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"21abc746-2603-41ac-a34d-8dd4deca6135\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"21abc746-2603-41ac-a34d-8dd4deca6135\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true},\"filter\":{\"query\":\"event.module :\\\"kibana\\\" \",\"language\":\"kuery\"}}},\"columnOrder\":[\"80e15d56-6b89-44d5-87a2-8ad1e3e06182\",\"e1e2ddf5-e528-4fdb-8c23-527e95a9281c\",\"21abc746-2603-41ac-a34d-8dd4deca6135\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"}},\"currentIndexPatternId\":\"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{},\"description\":\"\"},\"title\":\"ELK - Kibana total events\"},{\"type\":\"search\",\"gridData\":{\"x\":0,\"y\":57,\"w\":48,\"h\":18,\"i\":\"71ebd378-436e-4a2e-9265-bf64df03d042\"},\"panelIndex\":\"71ebd378-436e-4a2e-9265-bf64df03d042\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_71ebd378-436e-4a2e-9265-bf64df03d042\"}]","timeRestore":false,"title":"Dashboard - ELK infrastructure syslog","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-11-04T09:28:48.622Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"4d85219a-fcb8-4949-851f-d83b5a9a1d81","managed":false,"references":[{"id":"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8","name":"d090e283-491e-4019-8963-8c40c0eb3857:indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa","type":"index-pattern"},{"id":"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8","name":"5d2a07e3-7071-451b-acb1-3b5a3c465263:indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa","type":"index-pattern"},{"id":"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8","name":"9bf7e7cf-19ea-4dbd-8add-048c215ef580:indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa","type":"index-pattern"},{"id":"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8","name":"7adda9bd-8934-490f-9b96-74961d5c7d56:indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa","type":"index-pattern"},{"id":"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8","name":"8e83d811-18c8-4d0a-9ef3-15dea3ac1cc3:indexpattern-datasource-layer-0ee1d5dc-ded6-4cf3-b258-68bff83c84aa","type":"index-pattern"},{"id":"4d1d8210-cd83-4669-9e7a-b12748fb0829","name":"71ebd378-436e-4a2e-9265-bf64df03d042:panel_71ebd378-436e-4a2e-9265-bf64df03d042","type":"search"},{"id":"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8","name":"controlGroup_012659cf-cb1f-42fc-8ef7-eba9b8791e67:optionsListDataView","type":"index-pattern"},{"id":"1c64b4ae-c063-419e-88b9-0fff6bf3ceb8","name":"controlGroup_a89f3e68-663d-46d6-bcd7-9e93af1a7b62:optionsListDataView","type":"index-pattern"},{"id":"588fa1a6-4f7c-448c-9a5c-54a0f82a4307","name":"tag-ref-588fa1a6-4f7c-448c-9a5c-54a0f82a4307","type":"tag"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-11-04T11:02:16.392Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzI0ODcsMV0="}
+{"attributes":{"allowHidden":false,"fieldAttrs":"{\"rule_name\":{\"count\":4},\"current_disk_usage\":{\"count\":1}}","fieldFormatMap":"{}","fields":"[]","name":"custom-alerts","runtimeFieldMap":"{}","sourceFilters":"[]","timeFieldName":"@timestamp","title":"custom-alerts"},"coreMigrationVersion":"8.8.0","created_at":"2024-10-29T09:01:31.494Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"53f4058f-e299-4a3d-af6f-85e5f3f96ed3","managed":false,"references":[],"type":"index-pattern","typeMigrationVersion":"8.0.0","updated_at":"2024-10-29T15:09:32.714Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzIwNTcsMV0="}
+{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"optionsJSON":"{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}","panelsJSON":"[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":25,\"h\":14,\"i\":\"a2460db5-5dfd-44d6-b0fa-1692efd5b627\"},\"panelIndex\":\"a2460db5-5dfd-44d6-b0fa-1692efd5b627\",\"embeddableConfig\":{\"attributes\":{\"title\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"53f4058f-e299-4a3d-af6f-85e5f3f96ed3\",\"name\":\"indexpattern-datasource-layer-74555f1f-1404-4847-b51f-a3d7527d8037\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"74555f1f-1404-4847-b51f-a3d7527d8037\",\"accessors\":[\"6e0c0f04-9781-4d2a-aa4b-058b00af46e7\"],\"position\":\"top\",\"seriesType\":\"bar_stacked\",\"showGridlines\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"xAccessor\":\"63f2ac4f-d83b-420d-a36d-f9ca48966420\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"74555f1f-1404-4847-b51f-a3d7527d8037\":{\"columns\":{\"63f2ac4f-d83b-420d-a36d-f9ca48966420\":{\"label\":\"Top 10 values of rule_name.keyword\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"rule_name.keyword\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"6e0c0f04-9781-4d2a-aa4b-058b00af46e7\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}},\"6e0c0f04-9781-4d2a-aa4b-058b00af46e7\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true}}},\"columnOrder\":[\"63f2ac4f-d83b-420d-a36d-f9ca48966420\",\"6e0c0f04-9781-4d2a-aa4b-058b00af46e7\"],\"incompleteColumns\":{},\"sampling\":1}}},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":14,\"w\":48,\"h\":18,\"i\":\"0082c4f9-3c39-4c01-9bd1-c640b29826da\"},\"panelIndex\":\"0082c4f9-3c39-4c01-9bd1-c640b29826da\",\"embeddableConfig\":{\"attributes\":{\"title\":\"\",\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"references\":[{\"type\":\"index-pattern\",\"id\":\"53f4058f-e299-4a3d-af6f-85e5f3f96ed3\",\"name\":\"indexpattern-datasource-layer-050e624b-b919-4458-b259-feb5947ca7f5\"}],\"state\":{\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\",\"shouldTruncate\":false},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"050e624b-b919-4458-b259-feb5947ca7f5\",\"accessors\":[\"3c05731a-8e66-4931-926b-c6c56b4b64e0\"],\"position\":\"top\",\"seriesType\":\"bar_stacked\",\"showGridlines\":false,\"layerType\":\"data\",\"colorMapping\":{\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"loop\"},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}},\"xAccessor\":\"5d65f014-cedd-4667-8de7-d7b3703b2c64\",\"splitAccessor\":\"5b90cb26-a5ce-4ee8-bcc0-a304679c5491\"}]},\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filters\":[],\"datasourceStates\":{\"formBased\":{\"layers\":{\"050e624b-b919-4458-b259-feb5947ca7f5\":{\"columns\":{\"5d65f014-cedd-4667-8de7-d7b3703b2c64\":{\"label\":\"@timestamp\",\"dataType\":\"date\",\"operationType\":\"date_histogram\",\"sourceField\":\"@timestamp\",\"isBucketed\":true,\"scale\":\"interval\",\"params\":{\"interval\":\"auto\",\"includeEmptyRows\":true,\"dropPartials\":false}},\"3c05731a-8e66-4931-926b-c6c56b4b64e0\":{\"label\":\"Count of records\",\"dataType\":\"number\",\"operationType\":\"count\",\"isBucketed\":false,\"scale\":\"ratio\",\"sourceField\":\"___records___\",\"params\":{\"emptyAsNull\":true}},\"5b90cb26-a5ce-4ee8-bcc0-a304679c5491\":{\"label\":\"Top 10 values of rule_name.keyword\",\"dataType\":\"string\",\"operationType\":\"terms\",\"scale\":\"ordinal\",\"sourceField\":\"rule_name.keyword\",\"isBucketed\":true,\"params\":{\"size\":10,\"orderBy\":{\"type\":\"column\",\"columnId\":\"3c05731a-8e66-4931-926b-c6c56b4b64e0\"},\"orderDirection\":\"desc\",\"otherBucket\":true,\"missingBucket\":false,\"parentFormat\":{\"id\":\"terms\"},\"include\":[],\"exclude\":[],\"includeIsRegex\":false,\"excludeIsRegex\":false}}},\"columnOrder\":[\"5d65f014-cedd-4667-8de7-d7b3703b2c64\",\"5b90cb26-a5ce-4ee8-bcc0-a304679c5491\",\"3c05731a-8e66-4931-926b-c6c56b4b64e0\"],\"incompleteColumns\":{},\"sampling\":1,\"indexPatternId\":\"53f4058f-e299-4a3d-af6f-85e5f3f96ed3\"}},\"currentIndexPatternId\":\"53f4058f-e299-4a3d-af6f-85e5f3f96ed3\"},\"indexpattern\":{\"layers\":{}},\"textBased\":{\"layers\":{}}},\"internalReferences\":[],\"adHocDataViews\":{}}},\"enhancements\":{}}}]","timeRestore":false,"title":"Alerts Dashboard","version":2},"coreMigrationVersion":"8.8.0","created_at":"2024-10-29T14:23:33.028Z","created_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","id":"f1496216-db00-43de-b37a-e600f4ac515d","managed":false,"references":[{"id":"53f4058f-e299-4a3d-af6f-85e5f3f96ed3","name":"a2460db5-5dfd-44d6-b0fa-1692efd5b627:indexpattern-datasource-layer-74555f1f-1404-4847-b51f-a3d7527d8037","type":"index-pattern"},{"id":"53f4058f-e299-4a3d-af6f-85e5f3f96ed3","name":"0082c4f9-3c39-4c01-9bd1-c640b29826da:indexpattern-datasource-layer-050e624b-b919-4458-b259-feb5947ca7f5","type":"index-pattern"}],"type":"dashboard","typeMigrationVersion":"10.2.0","updated_at":"2024-10-29T14:23:33.028Z","updated_by":"u_mGBROF_q5bmFCATbLXAcCwKa0k8JvONAwSruelyKA5E_0","version":"WzE5MDQsMV0="}
+{"excludedObjects":[{"id":"75515b4e-9f81-435a-abd9-4e121569045a","reason":"excluded","type":"alert"},{"id":"22fc30ba-3d50-4ee2-86f9-ebbd3e8fa8ac","reason":"excluded","type":"alert"}],"excludedObjectsCount":2,"exportedCount":37,"missingRefCount":0,"missingReferences":[]}
\ No newline at end of file
diff --git a/charts/kibana/dashboards/load_dashboards.sh b/charts/kibana/dashboards/load_dashboards.sh
new file mode 100644
index 0000000..360e00b
--- /dev/null
+++ b/charts/kibana/dashboards/load_dashboards.sh
@@ -0,0 +1,19 @@
+#!/bin/bash
+
+#Wait 10 minutes ( 120 * 5 seconds delay ) for elasticsearch GREEN to load dashboards
+COUNT=120
+
+#temp log file
+LOG_FILE="/mnt/dashboards/load_dashboard.tmp"
+
+for i in `seq 1 $COUNT`
+do
+ echo "Attempt no. $i to load dashoards."
+ curl -k -Ss -u elastic:${ELASTIC_PASSWORD} -X POST https://127.0.0.1:5601/api/saved_objects/_import?createNewCopies=false -H 'kbn-xsrf: true' --form file=@/mnt/dashboards/charts/kibana/dashboards/dashboards.ndjson > $LOG_FILE
+ if [[ `cat $LOG_FILE | awk -F"\"" '{print $2 $4}'` == "successCountsuccess" ]]
+ then
+ echo "Dashboards have been loaded successfully."
+ break
+ fi
+ sleep 5
+done
diff --git a/charts/kibana/scripts/load_objects.sh b/charts/kibana/scripts/load_objects.sh
new file mode 100644
index 0000000..b2a0978
--- /dev/null
+++ b/charts/kibana/scripts/load_objects.sh
@@ -0,0 +1,51 @@
+#!/bin/bash
+
+LOG_FILE="/mnt/ilm/load_ilm.tmp"
+
+#Loading ILMs
+
+echo "Starting loading objects..."
+for x in business-ilm technical-ilm
+do
+ i=1
+ echo "Starting loading ILM: $x"
+ while :
+ do
+ echo "Attempt no. $i to load ILM"
+ curl -k -Ss -u elastic:${ELASTIC_PASSWORD} -X PUT https://${RELEASE_NAME}-elasticsearch-es-http:9200/_ilm/policy/$x -H 'Content-Type: application/json' -H 'kbn-xsrf: true' -d @/usr/share/logstash/ilm/logstash-$x.json > $LOG_FILE
+ echo "Response:"
+ cat $LOG_FILE
+ echo -e "\n--------"
+ if [[ `cat $LOG_FILE | awk -F"\"" '{print $2}'` == "acknowledged" ]]
+ then
+ echo "ILM $x has been loaded successfully."
+ break
+ fi
+ i=`expr $i + 1`
+ sleep 5
+ done
+done
+
+#Loading templates
+
+for x in business-template technical-template
+do
+ i=1
+ echo "Starting template $x"
+ while :
+ do
+ echo "Attempt no. $i to load template"
+ curl -k -Ss -u elastic:${ELASTIC_PASSWORD} -X PUT https://${RELEASE_NAME}-elasticsearch-es-http:9200/_index_template/$x -H 'Content-Type: application/json' -H 'kbn-xsrf: true' -d @/mnt/ilm/charts/kibana/templates/$x-log.json > $LOG_FILE
+ echo "Response:"
+ cat $LOG_FILE
+ echo -e "\n--------"
+ if [[ `cat $LOG_FILE | awk -F"\"" '{print $2}'` == "acknowledged" ]]
+ then
+ echo "Teamplte $x has been loaded successfully."
+ break
+ fi
+ i=`expr $i + 1`
+ sleep 5
+ done
+done
+
diff --git a/charts/kibana/templates/business-template-log.json b/charts/kibana/templates/business-template-log.json
new file mode 100644
index 0000000..4e6897a
--- /dev/null
+++ b/charts/kibana/templates/business-template-log.json
@@ -0,0 +1,45 @@
+{
+ "template": {
+ "settings": {
+ "index": {
+ "lifecycle": {
+ "name": "business-ilm"
+ }
+ }
+ },
+ "mappings": {
+ "properties": {
+ "@timestamp": {
+ "type": "date"
+ },
+ "timestamp": {
+ "type": "date"
+ },
+ "origin": {
+ "type": "keyword"
+ },
+ "destination": {
+ "type": "keyword"
+ },
+ "business_operation": {
+ "type": "keyword"
+ },
+ "message_type": {
+ "type": "keyword"
+ },
+ "correlation_id": {
+ "type": "keyword"
+ }
+ }
+ }
+ },
+ "index_patterns": [
+ "business-logs"
+ ],
+ "data_stream": {
+ "hidden": false,
+ "allow_custom_routing": false
+ },
+ "composed_of": [],
+ "priority": 200
+}
\ No newline at end of file
diff --git a/charts/kibana/templates/technical-template-log.json b/charts/kibana/templates/technical-template-log.json
new file mode 100644
index 0000000..5182d9c
--- /dev/null
+++ b/charts/kibana/templates/technical-template-log.json
@@ -0,0 +1,93 @@
+{
+ "template": {
+ "settings": {
+ "index": {
+ "lifecycle": {
+ "name": "technical-ilm"
+ }
+ }
+ },
+ "mappings": {
+ "properties": {
+ "@timestamp": {
+ "type": "date"
+ },
+ "timestamp": {
+ "type": "date"
+ },
+ "logger": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "loglevel": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "message": {
+ "type": "match_only_text"
+ },
+ "method": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "msg": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "namespace": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "operation": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "path": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "pid": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "request_id": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "tags": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "thread": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "thread_name": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "ts": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "uri": {
+ "type": "keyword",
+ "ignore_above": 1024
+ },
+ "version": {
+ "type": "keyword",
+ "ignore_above": 1024
+ }
+ }
+ }
+ },
+ "index_patterns": [
+ "technical-logs"
+ ],
+ "data_stream": {
+ "hidden": false,
+ "allow_custom_routing": false
+ },
+ "composed_of": [],
+ "priority": 200
+}
\ No newline at end of file
diff --git a/charts/templates/_helpers.tpl b/charts/templates/_helpers.tpl
index 75540a3..3410292 100644
--- a/charts/templates/_helpers.tpl
+++ b/charts/templates/_helpers.tpl
@@ -2,13 +2,13 @@
Kibana dns
*/}}
{{- define "kibana.dns" -}}
-kibana.{{ default .Release.Namespace .Values.namespaceTag }}.{{ .Values.domainSuffix }}
+kibana.{{ .Values.namespaceTag }}.{{ .Values.domainSuffix }}
{{- end -}}
{{/*
Kibana full URL with base path
*/}}
{{- define "kibana.dns.fullPath" -}}
-https://{{ template "kibana.dns" . }}{{- if eq .Values.openStandardHttpsPorts false -}}:25602{{- end -}}{{- if and (.Values.kibana.ingressSubpath) (ne "/" .Values.kibana.ingressSubpath) }}{{- .Values.kibana.ingressSubpath}}{{- end }}
+https://{{ template "kibana.dns" . }}
{{- end -}}
@@ -17,14 +17,14 @@ https://{{ template "kibana.dns" . }}{{- if eq .Values.openStandardHttpsPorts fa
Elasticsearch api dns
*/}}
{{- define "elasticsearch.dns" -}}
-elasticsearch.{{ default .Release.Namespace .Values.namespaceTag }}.{{ .Values.domainSuffix }}
+elasticsearch.{{ .Values.namespaceTag }}.{{ .Values.domainSuffix }}
{{- end -}}
{{/*
Logstash input dns
*/}}
{{- define "logstash.dns" -}}
-logstash.{{ .Values.logstash.beats.pipelines_group_name }}.{{ default .Release.Namespace .Values.namespaceTag }}.{{ .Values.domainSuffix }}
+logstash.{{ .Values.namespaceTag }}.{{ .Values.logstash.beats.pipelines_group_name }}.{{ .Values.domainSuffix }}
{{- end -}}
{{/*
@@ -44,7 +44,7 @@ Logstash input dns for many ingressRouteTCPs
Filebeat input dns
*/}}
{{- define "filebeat.dns" -}}
-filebeat.{{ default .Release.Namespace .Values.namespaceTag }}.{{ .Values.domainSuffix }}
+filebeat.{{ .Values.namespaceTag }}.{{ .Values.domainSuffix }}
{{- end -}}
@@ -52,5 +52,5 @@ filebeat.{{ default .Release.Namespace .Values.namespaceTag }}.{{ .Values.domain
Filebeat for agents input dns
*/}}
{{- define "filebeat4agents.dns" -}}
-filebeat4agents.{{ default .Release.Namespace .Values.namespaceTag }}.{{ .Values.domainSuffix }}
-{{- end -}}
\ No newline at end of file
+filebeat4agents.{{ .Values.namespaceTag }}.{{ .Values.domainSuffix }}
+{{- end -}}
diff --git a/charts/templates/elasticsearch.yaml b/charts/templates/elasticsearch.yaml
index 1b7e565..86e932f 100644
--- a/charts/templates/elasticsearch.yaml
+++ b/charts/templates/elasticsearch.yaml
@@ -17,9 +17,8 @@ spec:
- secretName: logstash-writer-secret
- secretName: user-monitoring-secret
nodeSets:
- {{- range .Values.elasticsearch.nodeSets }}
- - name: {{ .name }}
- count: {{ .count}}
+ - name: {{ .Values.elasticsearch.name }}
+ count: {{ .Values.elasticsearch.count }}
config:
xpack.security.authc.token.enabled: true
http.cors.enabled : true
@@ -35,12 +34,12 @@ spec:
- ReadWriteOnce
resources:
requests:
- storage: {{ .diskSpace }}
- storageClassName: {{ .storageClassName }}
+ storage: {{ .Values.elasticsearch.diskSpace }}
+ storageClassName: {{ .Values.elasticsearch.storageClassName }}
podTemplate:
metadata:
labels:
- stack-namespace: {{$.Release.Namespace}}
+ stack-namespace: {{ .Release.Namespace }}
spec:
initContainers:
- name: sysctl
@@ -64,24 +63,23 @@ spec:
imagePullPolicy: Always
securityContext:
runAsNonRoot: true
- {{- with .resources }}
+ {{- with .Values.elasticsearch.resources }}
resources:
{{- toYaml . | nindent 12 }}
- {{- end }}
+ {{- end }}
env:
- name: ELASTICSEARCH_PASSWORD
valueFrom:
secretKeyRef:
- name: {{ $.Release.Name -}}-elasticsearch-es-elastic-user
+ name: {{ .Release.Name -}}-elasticsearch-es-elastic-user
key: elastic
- {{- with $.Values.elasticsearch.env }}
+ {{- with .Values.elasticsearch.env }}
{{- toYaml . | nindent 10 }}
{{- end }}
volumes:
- name: certs
secret:
- secretName: {{ $.Release.Name }}-elasticsearch-http-cert-secret-internal
- {{- end }}
+ secretName: {{ .Release.Name }}-elasticsearch-http-cert-secret-internal
http:
tls:
certificate:
@@ -202,15 +200,6 @@ metadata:
spec:
selfSigned: {}
---
-# apiVersion: rbac.authorization.k8s.io/v1
-# kind: Role
-# metadata:
-# name: issuer-reader
-# rules:
-# - apiGroups: ["cert-manager.io"]
-# resources: ["issuers"]
-# verbs: ["get", "list", "watch"]
----
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
diff --git a/charts/templates/filebeat-agents.yaml b/charts/templates/filebeat-agents.yaml
index 0818838..d706d34 100644
--- a/charts/templates/filebeat-agents.yaml
+++ b/charts/templates/filebeat-agents.yaml
@@ -41,7 +41,7 @@ spec:
fieldRef:
fieldPath: spec.nodeName
- name: ELASTIC_ELASTICSEARCH_ES_HOSTS
- value: 'https://elastic-elasticsearch-es-http.{{ .Release.Namespace }}.svc:9200'
+ value: 'https://{{ .Release.Name }}-elasticsearch-es-http.{{ .Release.Namespace }}.svc:9200'
- name: LOGSTASH_HOSTS
value: 'logstash-{{ .Values.logstash.beats.pipelines_group_name }}-ls-api.{{ .Release.Namespace }}:5044'
- name: MONITORING_USER
@@ -53,7 +53,9 @@ spec:
valueFrom:
secretKeyRef:
name: user-monitoring-secret
- key: password
+ key: password
+ - name: MONITORED_NAMESPACE
+ value: '{{ .Release.Namespace }}'
volumes:
- name: varlogcontainers
@@ -71,7 +73,7 @@ spec:
defaultMode: 0555
- name: es-certs # used for monitoring
secret:
- secretName: elastic-elasticsearch-http-cert-secret-internal
+ secretName: {{ .Release.Name }}-elasticsearch-http-cert-secret-internal
- name: filebeat-certs
secret:
secretName: filebeat4agents-certs-secret
@@ -106,7 +108,7 @@ spec:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
- name: filebeat4agents-role
+ name: filebeat4agents-role-{{ .Release.Namespace }}
rules:
- apiGroups: [""] # "" indicates the core API group
resources:
@@ -141,13 +143,45 @@ metadata:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: filebeat4agents-rolebinding
+ name: filebeat4agents-rolebinding-{{ .Release.Namespace }}
subjects:
- kind: ServiceAccount
name: filebeat4agents-account
namespace: {{ .Release.Namespace }}
roleRef:
kind: ClusterRole
- name: filebeat4agents-role
+ name: filebeat4agents-role-{{ .Release.Namespace }}
apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: filebeat-ilm-configmap
+data:
+ filebeat-bussines-ilm.json: |
+ {
+ "policy": {
+ "phases": {
+ "hot": {
+ "actions": {
+ "rollover": {
+ "max_age": "{{ .Values.heartbeat.ilm.hot.max_age }}",
+ "max_primary_shard_size": "{{ .Values.heartbeat.ilm.hot.max_primary_shard_size }}"
+ },
+ "set_priority": {
+ "priority": 100
+ }
+ },
+ "min_age": "0ms"
+ },
+ "delete": {
+ "min_age": "{{ .Values.heartbeat.ilm.delete.min_age }}",
+ "actions": {
+ "delete": {}
+ }
+ }
+ }
+ }
+ }
+---
diff --git a/charts/templates/filebeat.yaml b/charts/templates/filebeat.yaml
index 62d6fad..c8e7bfb 100644
--- a/charts/templates/filebeat.yaml
+++ b/charts/templates/filebeat.yaml
@@ -15,19 +15,6 @@ spec:
securityContext:
runAsUser: 0
fsGroup: 1000
- initContainers:
- - name: git-clone
- image: alpine/git
- args:
- - clone
- - --single-branch
- - --branch
- - feature/removed-roles # or the branch where your logs are
- - https://code.europa.eu/simpl/simpl-open/development/monitoring/eck-monitoring.git
- - /mnt/repo
- volumeMounts:
- - name: repo
- mountPath: /mnt/repo
containers:
- name: filebeat
command: ['sh', '-c', 'exec /usr/share/filebeat/logs/example.sh & exec /usr/share/filebeat/filebeat -e -c /usr/share/filebeat/filebeat.yml']
@@ -39,14 +26,12 @@ spec:
name: filebeat-certs
- mountPath: /usr/share/filebeat/es-certs # used for monitoring
name: es-certs
- - mountPath: /mnt/repo
- name: repo
- mountPath: /usr/share/filebeat/logs/example.sh
subPath: example.sh
name: example-script
env:
- name: ELASTIC_ELASTICSEARCH_ES_HOSTS
- value: 'https://elastic-elasticsearch-es-http.{{ .Release.Namespace }}.svc:9200'
+ value: 'https://{{ .Release.Name }}-elasticsearch-es-http.{{ .Release.Namespace }}.svc:9200'
- name: LOGSTASH_HOSTS
value: 'logstash-{{ .Values.logstash.beats.pipelines_group_name }}-ls-api.{{ .Release.Namespace }}:5044'
- name: MONITORING_USER
@@ -69,9 +54,7 @@ spec:
secretName: filebeat-certs-secret
- name: es-certs # used for monitoring
secret:
- secretName: elastic-elasticsearch-http-cert-secret-internal
- - name: repo
- emptyDir: {}
+ secretName: {{ .Release.Name }}-elasticsearch-http-cert-secret-internal
- name: example-script
configMap:
name: filebeat-example-script
@@ -174,7 +157,7 @@ data:
- TIMESTAMP=$(date +"%Y-%m-%d %H:%M:%S")
+ TIMESTAMP=$(date +"%Y-%m-%dT%H:%M:%S")
echo "$TIMESTAMP|$ORIGIN|$DESTINATION|$BUSINESS_OPERATION|$MESSAGE_TYPE|$CORRELATION_ID" >> "$LOG_FILE"
count=$((count + 1))
done
diff --git a/charts/templates/heartbeat.yaml b/charts/templates/heartbeat.yaml
index fe7debb..7740a69 100644
--- a/charts/templates/heartbeat.yaml
+++ b/charts/templates/heartbeat.yaml
@@ -9,21 +9,58 @@ spec:
elasticsearchRef:
name: {{ .Release.Name }}-elasticsearch
config:
- heartbeat.monitors:
- - type: tcp
- schedule: '@every 5s'
- hosts: ["elastic-elasticsearch-es-http.observability.svc:9200"]
- - type: tcp
- schedule: '@every 5s'
- hosts: ["kibana.dev.simpl-europe.eu:443"]
- - type: icmp
- id: ping-myhost
- name: My Host Ping
- hosts: ["elastic-kibana-kb-http.observability.svc"]
- schedule: '*/5 * * * * * *'
+ {{- with .Values.heartbeat.services }}
+ {{- toYaml . | nindent 4 }}
+ {{- end }}
+ setup.ilm.enabled: true
+ setup.ilm.policy_name: heartbeat-ilm
+ setup.ilm.policy_file: "/usr/share/heartbeat/ilm/heartbeat-ilm.json"
deployment:
replicas: 1
podTemplate:
spec:
securityContext:
runAsUser: 0
+ containers:
+ - name: heartbeat
+ volumeMounts:
+ - mountPath: /usr/share/heartbeat/ilm/heartbeat-ilm.json
+ name: heartbeat-ilm-vol
+ subPath: heartbeat-ilm.json
+ volumes:
+ - name: heartbeat-ilm-vol
+ configMap:
+ name: heartbeat-ilm-configmap
+ defaultMode: 511
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: heartbeat-ilm-configmap
+data:
+ heartbeat-ilm.json: |
+ {
+ "policy": {
+ "phases": {
+ "hot": {
+ "actions": {
+ "rollover": {
+ "max_age": "{{ .Values.heartbeat.ilm.hot.max_age }}",
+ "max_primary_shard_size": "{{ .Values.heartbeat.ilm.hot.max_primary_shard_size }}"
+ },
+ "set_priority": {
+ "priority": 100
+ }
+ },
+ "min_age": "0ms"
+ },
+ "delete": {
+ "min_age": "{{ .Values.heartbeat.ilm.delete.min_age }}",
+ "actions": {
+ "delete": {}
+ }
+ }
+ }
+ }
+ }
+---
\ No newline at end of file
diff --git a/charts/templates/kibana.yaml b/charts/templates/kibana.yaml
index 2bf546a..1de015d 100644
--- a/charts/templates/kibana.yaml
+++ b/charts/templates/kibana.yaml
@@ -14,13 +14,7 @@ spec:
config:
server.ssl.enabled: true
elasticsearch.requestTimeout: 120000
- #elasticsearch.ssl.verificationMode: certificate
- #elasticsearch.ssl.certificateAuthorities: ["/usr/share/kibana/config/certs/ca.crt"]
server.publicBaseUrl: "{{ template "kibana.dns.fullPath" . }}"
- {{- if and (.Values.kibana.ingressSubpath) (ne "/" .Values.kibana.ingressSubpath) }}
- server.basePath: {{ .Values.kibana.ingressSubpath }}
- server.rewriteBasePath: true
- {{- end }}
xpack.reporting.enabled: true
xpack.reporting.kibanaServer.protocol: "https"
{{- with .Values.kibana.config }}
@@ -36,30 +30,47 @@ spec:
securityContext:
runAsUser: 1000
fsGroup: 1000
+ initContainers:
+ - name: git-clone
+ image: alpine/git
+ args:
+ - clone
+ - --single-branch
+ - --branch
+ - {{ .Values.kibana.dashboardsBranch }}
+ - https://code.europa.eu/simpl/simpl-open/development/monitoring/eck-monitoring.git
+ - /mnt/dashboards
+ volumeMounts:
+ - name: repo
+ mountPath: /mnt/dashboards
containers:
- - name: kibana
- imagePullPolicy: Always
- {{- with .Values.kibana.resources }}
- resources:
- {{- toYaml . | nindent 12 }}
- {{- end }}
- #volumeMounts:
- #- name: es-certs
- # mountPath: /usr/share/kibana/config/certs
- #- name: lets-encrypt-ca
- # mountPath: /usr/share/kibana/config/certs-ca
- readinessProbe:
- httpGet:
- scheme: HTTPS
- path: {{- with .Values.kibana.ingressSubpath }} {{ . }} {{- end }}
- port: 5601
- #volumes:
- #- name: es-certs
- # secret:
- # secretName: elastic-elasticsearch-es-http-certs-internal
- #- name: lets-encrypt-ca
- # secret:
- # secretName: lets-encrypt-ca
+ - name: kibana
+ imagePullPolicy: Always
+ {{- with .Values.kibana.resources }}
+ resources:
+ {{- toYaml . | nindent 12 }}
+ {{- end }}
+ readinessProbe:
+ httpGet:
+ scheme: HTTPS
+ path: "/"
+ port: 5601
+ env:
+ - name: ELASTIC_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: {{ .Release.Name }}-elasticsearch-es-elastic-user
+ key: elastic
+ lifecycle:
+ postStart:
+ exec:
+ command: ["/bin/sh", "-c", "cd /mnt/dashboards/charts/kibana/dashboards/; chmod +x ./load_dashboards.sh; ./load_dashboards.sh > /mnt/dashboards/load_dashboard.log"]
+ volumeMounts:
+ - name: repo
+ mountPath: /mnt/dashboards
+ volumes:
+ - name: repo
+ emptyDir: {}
http:
tls:
certificate:
@@ -72,18 +83,18 @@ metadata:
annotations:
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
acme.cert-manager.io/http01-edit-in-place: "true"
- cert-manager.io/cluster-issuer: dev-staging
+ cert-manager.io/cluster-issuer: {{ .Values.clusterIssuer }}
spec:
ingressClassName: nginx
tls:
- hosts:
- {{ template "kibana.dns" . }}
- secretName: {{ .Release.Name }}-kibana-cert-secret
+ secretName: {{ .Release.Name }}-kibana-ssl
rules:
- host: {{ template "kibana.dns" . }}
http:
paths:
- - path: {{ default "/" .Values.kibana.ingressSubpath }}
+ - path: "/"
pathType: Prefix
backend:
service:
diff --git a/charts/templates/logstash_beats.yaml b/charts/templates/logstash_beats.yaml
index b11febb..855c66f 100644
--- a/charts/templates/logstash_beats.yaml
+++ b/charts/templates/logstash_beats.yaml
@@ -7,7 +7,7 @@ metadata:
spec:
image: {{ .Values.logstash.image }}:{{ default .Values.elasticVersion .Values.logstash.imageTag }}
version: {{ .Values.elasticVersion }}
- count: {{ .Values.logstash.count }}
+ count: {{ .Values.logstash.count_beats }}
elasticsearchRefs:
- name: {{ .Release.Name }}-elasticsearch
clusterName: {{ .Release.Name }}-elasticsearch
@@ -49,6 +49,41 @@ spec:
labels:
stack-namespace: {{ .Release.Namespace }}
spec:
+ securityContext:
+ runAsUser: 1000
+ fsGroup: 1000
+ initContainers:
+ - name: git-clone
+ image: alpine/git
+ args:
+ - clone
+ - --single-branch
+ - --branch
+ - {{ .Values.kibana.dashboardsBranch }}
+ - https://code.europa.eu/simpl/simpl-open/development/monitoring/eck-monitoring.git
+ - /mnt/ilm/
+ volumeMounts:
+ - name: repo
+ mountPath: /mnt/ilm/
+ - name: load-objects
+ command: ["/bin/sh", "-c", "cd /mnt/ilm/charts/kibana/scripts; chmod +x ./load_objects.sh; ./load_objects.sh 2>&1 "]
+ volumeMounts:
+ - name: repo
+ mountPath: /mnt/ilm/
+ - name: logstash-business-ilm-vol
+ mountPath: /usr/share/logstash/ilm/logstash-business-ilm.json
+ subPath: logstash-business-ilm.json
+ - name: logstash-technical-ilm-vol
+ mountPath: /usr/share/logstash/ilm/logstash-technical-ilm.json
+ subPath: logstash-technical-ilm.json
+ env:
+ - name: RELEASE_NAME
+ value: {{ .Release.Name }}
+ - name: ELASTIC_PASSWORD
+ valueFrom:
+ secretKeyRef:
+ name: {{ .Release.Name }}-elasticsearch-es-elastic-user
+ key: elastic
containers:
- name: logstash
{{- with .Values.logstash.resources }}
@@ -63,9 +98,19 @@ spec:
{{- end }}
- name: es-certs
mountPath: /usr/share/logstash/config/certs
- - mountPath: /usr/share/logstash/certs-logstash
- name: certs-logstash
+ - name: certs-logstash
+ mountPath: /usr/share/logstash/certs-logstash
+ - name: repo
+ mountPath: /mnt/ilm/
+ - name: logstash-business-ilm-vol
+ mountPath: /usr/share/logstash/ilm/logstash-business-ilm.json
+ subPath: logstash-business-ilm.json
+ - name: logstash-technical-ilm-vol
+ mountPath: /usr/share/logstash/ilm/logstash-technical-ilm.json
+ subPath: logstash-technical-ilm.json
env:
+ - name: LS_JAVA_OPTS
+ value: {{ .Values.logstash.env.ls_java_opts }}
- name: LOGSTASH_USER
valueFrom:
secretKeyRef:
@@ -87,7 +132,7 @@ spec:
name: user-monitoring-secret
key: password
- name: ELASTIC_ELASTICSEARCH_ES_HOSTS
- value: 'https://elastic-elasticsearch-es-http.{{ .Release.Namespace }}.svc:9200'
+ value: 'https://{{ .Release.Name }}-elasticsearch-es-http.{{ .Release.Namespace }}.svc:9200'
- name: ELASTICSEARCH_SSL_CERTIFICATE_VERIFICATION
value: "true"
- name: ELASTICSEARCH_SSL_CA_PATH
@@ -105,6 +150,16 @@ spec:
- name: certs-logstash
secret:
secretName: logstash-secret-{{ .Values.logstash.beats.pipelines_group_name }}
+ - name: repo
+ emptyDir: {}
+ - name: logstash-business-ilm-vol
+ configMap:
+ name: logstash-business-ilm-configmap
+ defaultMode: 511
+ - name: logstash-technical-ilm-vol
+ configMap:
+ name: logstash-technical-ilm-configmap
+ defaultMode: 511
pipelinesRef:
secretName: logstash-{{ .Values.logstash.beats.pipelines_group_name }}-pipelines-yml
---
@@ -187,4 +242,66 @@ spec:
kind: Issuer
privateKey:
encoding: "PKCS8"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: logstash-business-ilm-configmap
+data:
+ logstash-business-ilm.json: |
+ {
+ "policy": {
+ "phases": {
+ "hot": {
+ "actions": {
+ "rollover": {
+ "max_age": "{{ .Values.logstash.ilm.business.hot.max_age }}",
+ "max_primary_shard_size": "{{ .Values.logstash.ilm.business.hot.max_primary_shard_size }}"
+ },
+ "set_priority": {
+ "priority": 100
+ }
+ },
+ "min_age": "0ms"
+ },
+ "delete": {
+ "min_age": "{{ .Values.logstash.ilm.business.delete.min_age }}",
+ "actions": {
+ "delete": {}
+ }
+ }
+ }
+ }
+ }
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: logstash-technical-ilm-configmap
+data:
+ logstash-technical-ilm.json: |
+ {
+ "policy": {
+ "phases": {
+ "hot": {
+ "actions": {
+ "rollover": {
+ "max_age": "{{ .Values.logstash.ilm.technical.hot.max_age }}",
+ "max_primary_shard_size": "{{ .Values.logstash.ilm.technical.hot.max_primary_shard_size }}"
+ },
+ "set_priority": {
+ "priority": 100
+ }
+ },
+ "min_age": "0ms"
+ },
+ "delete": {
+ "min_age": "{{ .Values.logstash.ilm.technical.delete.min_age }}",
+ "actions": {
+ "delete": {}
+ }
+ }
+ }
+ }
+ }
---
\ No newline at end of file
diff --git a/charts/templates/logstash_syslog.yaml b/charts/templates/logstash_syslog.yaml
index a86c903..11cb6d7 100644
--- a/charts/templates/logstash_syslog.yaml
+++ b/charts/templates/logstash_syslog.yaml
@@ -7,7 +7,7 @@ metadata:
spec:
image: {{ .Values.logstash.image }}:{{ default .Values.elasticVersion .Values.logstash.imageTag }}
version: {{ .Values.elasticVersion }}
- count: {{ .Values.logstash.count }}
+ count: {{ .Values.logstash.count_syslog }}
elasticsearchRefs:
- name: {{ .Release.Name }}-elasticsearch
clusterName: {{ .Release.Name }}-elasticsearch
@@ -71,7 +71,7 @@ spec:
name: logstash-writer-secret
key: password
- name: ELASTIC_ELASTICSEARCH_ES_HOSTS
- value: 'https://elastic-elasticsearch-es-http.{{ .Release.Namespace }}.svc:9200'
+ value: 'https://{{ .Release.Name }}-elasticsearch-es-http.{{ .Release.Namespace }}.svc:9200'
volumes:
{{- range .Values.logstash.syslog.pipelines }}
- name: pipeline-config-{{- .name }}
diff --git a/charts/templates/metricbeat.yaml b/charts/templates/metricbeat.yaml
index 54c15bb..5ad5746 100644
--- a/charts/templates/metricbeat.yaml
+++ b/charts/templates/metricbeat.yaml
@@ -68,13 +68,20 @@ spec:
module: kubernetes
ssl:
verification_mode: none
+ setup.ilm.enabled: true
+ setup.ilm.policy_name: metricbeat-ilm
+ setup.ilm.policy_file: "/usr/share/metricbeat/ilm/metricbeat-ilm.json"
processors:
- add_cloud_metadata: {}
- add_host_metadata: {}
- {{- with .Values.metricbeat.dropEvent }}
- drop_event:
- {{- toYaml . | nindent 8 }}
- {{- end }}
+ when:
+ not:
+ or:
+ - equals:
+ kubernetes.namespace: {{ .Release.Namespace }}
+ - equals:
+ service.type: system
daemonSet:
podTemplate:
spec:
@@ -98,6 +105,9 @@ spec:
name: dockersock
- mountPath: /hostfs/proc
name: proc
+ - mountPath: /usr/share/metricbeat/ilm/metricbeat-ilm.json
+ name: metricbeat-ilm-vol
+ subPath: metricbeat-ilm.json
env:
- name: NODE_NAME
valueFrom:
@@ -118,11 +128,15 @@ spec:
- hostPath:
path: /proc
name: proc
+ - name: metricbeat-ilm-vol
+ configMap:
+ name: metricbeat-ilm-configmap
+ defaultMode: 511
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
- name: metricbeat
+ name: metricbeat-{{ .Release.Namespace }}
rules:
- apiGroups:
- ""
@@ -173,13 +187,44 @@ metadata:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
- name: metricbeat
+ name: metricbeat-{{ .Release.Namespace }}
subjects:
- kind: ServiceAccount
name: metricbeat
namespace: {{.Release.Namespace}}
roleRef:
kind: ClusterRole
- name: metricbeat
+ name: metricbeat-{{ .Release.Namespace }}
apiGroup: rbac.authorization.k8s.io
---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ name: metricbeat-ilm-configmap
+data:
+ metricbeat-ilm.json: |
+ {
+ "policy": {
+ "phases": {
+ "hot": {
+ "actions": {
+ "rollover": {
+ "max_age": "{{ .Values.metricbeat.ilm.hot.max_age }}",
+ "max_primary_shard_size": "{{ .Values.metricbeat.ilm.hot.max_primary_shard_size }}"
+ },
+ "set_priority": {
+ "priority": 100
+ }
+ },
+ "min_age": "0ms"
+ },
+ "delete": {
+ "min_age": "{{ .Values.metricbeat.ilm.delete.min_age }}",
+ "actions": {
+ "delete": {}
+ }
+ }
+ }
+ }
+ }
+---
diff --git a/charts/values/dev/observability/values.yaml b/charts/values/dev/observability/values.yaml
index f9c03cd..1114e68 100644
--- a/charts/values/dev/observability/values.yaml
+++ b/charts/values/dev/observability/values.yaml
@@ -1,84 +1,46 @@
# version of all elastic applications
elasticVersion: 8.15.1
-# Name of aws environment
-envTag: "dev"
+namespaceTag: "test-namespace"
# This suffix will be used to create subdomain of following template:
-# kibana.NAMESPACE_TAG.DOMAIN_SUFFIX
-domainSuffix: "simpl-europe.eu"
-
-# This value is used to create unique dns for each deployment. By default it equals to namespace.
-namespaceTag: "dev"
-
-
-# Spread pods evenly between subnets
-createTopologySpreadConstraints: true
-
-# Force pods to be scheduled evenly between separete AZ, this means if all nodes in AZ will be full pod won't be scheduled.
-# Turning this off will still create pods in seperate AZ, but k8s scheduler won't be able to respect topologySpreadConstrains, will schedule pods in the same AZ.
-forceDeployInSeperateAZ: true
-
-
-# Open port 443 for each component on the Traefik level.
-openStandardHttpsPorts: true
-
-# imagePullSecrets defines the secrets with credentials to docker registry, for example nexus.
-imagePullSecrets: []
-
-
-
-
-
+# kibana.NAMESPACE.NAMESPACE_TAG.DOMAIN_SUFFIX
+domainSuffix: "dev.simpl-europe.eu"
+#ClusterIssuer to generate Kibana SSL front certificate
+clusterIssuer: "dev-prod-dns01"
elasticsearch:
-
image: docker.elastic.co/elasticsearch/elasticsearch
# Elasticsearch's image tag, by default it equals to elasticVersion
- ccr_remote_ca_file: ccr-remote-ca.pem
imageTag: ""
- jvm_options_xms: 1g
- jvm_options_xmx: 1g
cert:
duration: 2160h0m0s # 90d
renewBefore: 360h0m0s # 15d
- #Environment variables to set in kibana pod
#Usage from cli:
# --set "elasticsearch.env[0].name=VARIABLE_NAME" --set "elasticsearch.env[0].value=VARIABLE_VALUE"
env: []
-
-
- # here you can specify several node groups (e.g. master, data groups)
- nodeSets:
- - name: "node"
- # number of elasticsearch nodes in each group
- count: 3
- # persistent volume claim size
- diskSpace: 60Gi
- # name of StorageClass that will be used to create VolumeClaims. (StorageClass must exist)
- storageClassName: csi-cinder-high-speed
- # here you can specify elasticsearch config e.g
- # config:
- # node.roles: ["master"]
- config: {}
- resources:
- requests:
- memory: 4Gi
- limits:
- memory: 4Gi
- cpu: "1"
+ name: node
+ count: 3
+ diskSpace: 60Gi
+ storageClassName: csi-cinder-high-speed
+ resources:
+ requests:
+ memory: 4Gi
+ limits:
+ memory: 4Gi
+ cpu: "1"
kibana:
- # set >0 to deploy kibana, 0 otherwise
count: 1
image: docker.elastic.co/kibana/kibana
+ #Branch name to donwload dashboards
+ dashboardsBranch: "develop"
# Kibana's image tag, by default it equals to elasticVersion
imageTag: ""
# name of helm release where elasticsearch is installed. If you install kibana together with elasticsearch, leave it empty.
elasticsearchReleaseName: ""
- # Kibana server will listen on that subpath
cert:
duration: 2160h0m0s # 90d
renewBefore: 360h0m0s # 15d
@@ -90,23 +52,34 @@ kibana:
memory: 1Gi
limits:
memory: 1Gi
-
#Environment variables to set in kibana pod
#Usage from cli:
# --set "kibana.env[0].name=VARIABLE_NAME" --set "kibana.env[0].value=VARIABLE_VALUE"
env: []
-
logstash:
- count: 2
+ ilm:
+ business:
+ hot:
+ max_age: 30d
+ max_primary_shard_size: 1gb
+ delete:
+ min_age: 30d
+ technical:
+ hot:
+ max_age: 30d
+ max_primary_shard_size: 1gb
+ delete:
+ min_age: 30d
+ count_beats: 1
+ count_syslog: 0
image: docker.elastic.co/logstash/logstash
- config: {}
diskSpace: 3Gi
# name of StorageClass that will be used to create VolumeClaims. (StorageClass must exist)
storageClassName: csi-cinder-high-speed
imageTag: ""
env:
- LS_JAVA_OPTS: "-Xmx256m -Xms256m"
+ ls_java_opts: "-Xms3g -Xmx3g"
resources:
requests:
memory: 4Gi
@@ -120,10 +93,6 @@ logstash:
path.config: "/app/elastic/logstash/config/pipelines/*.config"
pipeline.workers: 1
pipeline.batch.size: 125
-
- workers: 1
- batch:
- size: 125
beats:
pipelines_group_name: "beats"
pipelines:
@@ -141,71 +110,109 @@ logstash:
}
filter: |-
filter {
- if [fields][logtype] == "logs-sample-onboarding" {
+ if [kubernetes][container][name] == "ejbca-community-helm" {
grok {
+ match => {
+ "message" => [
+ '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{JAVACLASS:logger}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}',
+ '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{PATH:path}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}'
+ ]
+ }
+ overwrite => [ "message" ]
+ }
+ }
+ if [kubernetes][container][name] == "keycloak" {
+ grok {
+ match => {
+ "message" => [
+ '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{JAVACLASS:logger}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}'
+ ]
+ }
+ overwrite => [ "message" ]
+ }
+ }
+ if [kubernetes][container][name] == "onboarding" {
+ grok {
+ pattern_definitions => { "JAVA" => "[0-9A-Za-z\[\]\.\$]*" }
match => {
"message" => [
'%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{JAVACLASS:logger}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}',
'%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{PATH:path}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}',
'%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{JAVACLASS:logger}%{SPACE}:%{SPACE}\[%{DATA:request_id}\]%{SPACE}HTTP%{SPACE}%{WORD:http_method}%{SPACE}"%{DATA:uri}"',
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{JAVACLASS:logger}%{SPACE}:%{SPACE}%{GREEDYDATA:message}',
+ '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{JAVA:logger}%{SPACE}:%{SPACE}%{GREEDYDATA:message}',
'%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{DATA:logger}%{SPACE}:%{SPACE}\[%{DATA:request_id}\]%{SPACE}%{GREEDYDATA:message}'
]
}
overwrite => [ "message" ]
}
- }
- if [fields][logtype] == "logs-sample-sdtooling" {
+ }
+ if [kubernetes][container][name] == "postgresql" {
grok {
- pattern_definitions => { "JAVA" => "[0-9A-Za-z\[\]\.\$]*" }
match => {
"message" => [
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{JAVACLASS:logger}%{SPACE}:%{SPACE}Method:%{SPACE}%{DATA:method}%{SPACE}\-%{SPACE}%{GREEDYDATA:message}',
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{JAVA:logger}%{SPACE}:%{SPACE}%{GREEDYDATA:message}'
- ]
+ '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:timezone}%{SPACE}\[%{NUMBER:pid}\]%{SPACE}%{WORD:log_level}:%{SPACE}%{GREEDYDATA:message}'
+ ]
}
overwrite => [ "message" ]
}
- }
- if [fields][logtype] == "logs-sample-catalogue" {
+ }
+ if [kubernetes][container][name] == "vault" or [kubernetes][container][name] == "vault-agent-init" or [kubernetes][container][name] == "sidecar-injector" {
grok {
- pattern_definitions => { "JAVA" => "[0-9A-Za-z\[\]\.\$]*" }
match => {
- "message" => [
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{JAVACLASS:logger}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}',
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread_name}\]%{SPACE}\[%{DATA:exec_thread}\]%{SPACE}\[%{DATA:request_id}\]%{JAVA:logger}%{SPACE}:%{SPACE}%{GREEDYDATA:message}',
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread_name}\]%{SPACE}\[%{DATA:exec_thread}\]%{SPACE}%{JAVA:logger}%{SPACE}:%{SPACE}%{GREEDYDATA:message}'
- ]
+ "message" => [
+ '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}\[%{LOGLEVEL:loglevel}\]%{SPACE}%{DATA:handler}:%{SPACE}%{GREEDYDATA:message}'
+
+
+ ]
}
overwrite => [ "message" ]
}
- }
- if [fields][logtype] == "logs-sample-signer" {
- json {
- source => "message"
- }
- }
- if [fields][logtype] == "logs-sample-business" {
+ }
+ if [kubernetes][container][name] == "simpl-cloud-gateway" or [kubernetes][container][name] == "users-roles" {
grok {
- match => { "message" => '%{TIMESTAMP_ISO8601:timestamp}\|%{WORD:origin}\|%{WORD:destination}\|%{WORD:business_operation}\|%{DATA:message_type}\|%{WORD:correlation_id}' }
+ match => {
+ "message" => [
+ '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{JAVACLASS:logger}%{SPACE}:%{SPACE}%{GREEDYDATA:message}'
+ ]
+ }
+ overwrite => [ "message" ]
}
- } if [fields][logtype] == "logs-sample-wrapper" {
- if [message] !~ "^\{" {
- drop { }
+ }
+ if [kubernetes][container][name] == "neo4j" {
+ grok {
+ match => {
+ "message" => [
+ '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{GREEDYDATA:message}'
+ ]
}
- json {
- source => "message"
+ overwrite => [ "message" ]
+ }
+ }
+ if [kubernetes][container][name] == "redis" {
+ grok {
+ match => {
+ "message" => [
+ '%{NUMBER:process_id}:%{WORD:process_type}%{SPACE}%{MONTHDAY:day}%{SPACE}%{MONTH:month}%{SPACE}%{YEAR:year}%{SPACE}%{TIME:time}\.%{INT:milliseconds}%{SPACE}\*%{SPACE}%{GREEDYDATA:message}'
+ ]
+ }
+ overwrite => [ "message" ]
+ add_field => {
+ "timestamp" => "%{day} %{month} %{year} %{time}.%{milliseconds}"
}
+ }
+
+
}
- if [ts] {
- date {
- match => [ "ts", "ISO8601" ]
+
+ if [fields][logtype] == "logs-sample-business" {
+ grok {
+ match => { "message" => '%{TIMESTAMP_ISO8601:timestamp}\|%{WORD:origin}\|%{WORD:destination}\|%{WORD:business_operation}\|%{DATA:message_type}\|%{WORD:correlation_id}' }
}
- } else {
+ }
+
date {
- match => [ "timestamp", "yyyy-MM-dd HH:mm:ss.SSS", "ISO8601", "yyyy-MM-dd HH:mm:ss" ]
+ match => [ "timestamp", "yyyy-MM-dd HH:mm:ss.SSS", "ISO8601", "yyyy-MM-dd HH:mm:ss", "dd MMM yyyy HH:mm:ss.SSS" ]
}
- }
}
output: |-
output {
@@ -217,9 +224,9 @@ logstash:
ssl_enabled => "true"
ssl_verification_mode => "full"
ssl_certificate_authorities => "/usr/share/logstash/config/certs/ca.crt"
- data_stream => "true"
- data_stream_type => "logs"
- data_stream_dataset => "business"
+ index => "business-logs"
+ template_name => "business-template"
+ action => "create"
}
}
else if [fields][logtype] == "logs-sample-wrapper" {
@@ -230,22 +237,12 @@ logstash:
ssl_enabled => "true"
ssl_verification_mode => "full"
ssl_certificate_authorities => "/usr/share/logstash/config/certs/ca.crt"
- data_stream => "true"
- data_stream_type => "logs"
- data_stream_dataset => "business"
- }
- }
- else if [fields][logtype] == "agents" {
- elasticsearch {
- hosts => [ "${ELASTIC_ELASTICSEARCH_ES_HOSTS}" ]
- user => "${LOGSTASH_USER}"
- password => "${LOGSTASH_PASSWORD}"
- ssl_enabled => "true"
- ssl_verification_mode => "full"
- ssl_certificate_authorities => "/usr/share/logstash/config/certs/ca.crt"
- data_stream => "true"
- data_stream_type => "logs"
- data_stream_dataset => "agents"
+ #data_stream => "true"
+ #data_stream_type => "logs"
+ #data_stream_dataset => "business"
+ index => "business-logs"
+ template_name => "business-template"
+ action => "create"
}
}
else {
@@ -256,9 +253,12 @@ logstash:
ssl_enabled => "true"
ssl_verification_mode => "full"
ssl_certificate_authorities => "/usr/share/logstash/config/certs/ca.crt"
- data_stream => "true"
- data_stream_type => "logs"
- data_stream_dataset => "technical"
+ #data_stream => "true"
+ #data_stream_type => "logs"
+ #data_stream_dataset => "technical"
+ index => "technical-logs"
+ template_name => "technical-template"
+ action => "create"
}
}
#stdout {
@@ -297,13 +297,11 @@ logstash:
filebeat:
image: docker.elastic.co/beats/filebeat
- config: {}
- count: 0
+ count: 1
# name of StorageClass that will be used to create VolumeClaims. (StorageClass must exist)
imageTag: ""
# Total number of the sample messages to generate. Provide negative number to generate infinitely
totalMessages: 604800
-
# Number of messages per minute. Provide negative number to generate messages without time limit.
messagesPerMinute: 30
cert:
@@ -363,11 +361,6 @@ filebeat:
filebeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
- # processors:
- # - add_kubernetes_metadata:
- # in_cluster: true
- # logging.level: debug
- name: "test"
output: |
output.logstash:
hosts: ["${LOGSTASH_HOSTS}"]
@@ -384,19 +377,9 @@ filebeat:
password: "${MONITORING_PASSWORD}"
-
-
filebeat4agents:
image: docker.elastic.co/beats/filebeat
- config: {}
- destinationLogstashHost: logstash-beats-ls-api.observability:5044
- # name of StorageClass that will be used to create VolumeClaims. (StorageClass must exist)
imageTag: ""
- # Total number of the sample messages to generate. Provide negative number to generate infinitely
- totalMessages: 604800
-
- # Number of messages per minute. Provide negative number to generate messages without time limit.
- messagesPerMinute: 30
cert:
duration: 2160h0m0s # 90d
renewBefore: 360h0m0s # 15d
@@ -409,19 +392,30 @@ filebeat4agents:
- condition:
or:
- equals:
- kubernetes.namespace: "ingress-nginx"
- - equals:
- kubernetes.namespace: "kube-system"
+ kubernetes.namespace: "${MONITORED_NAMESPACE}"
+ config:
+ - type: container
+ paths:
+ - /var/log/containers/*-${data.kubernetes.container.id}.log
+ multiline:
+ type: pattern
+ pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
+ negate: true
+ match: after
+ - condition:
+ equals:
+ kubernetes.container.name: "redis"
config:
- type: container
paths:
- /var/log/containers/*-${data.kubernetes.container.id}.log
+ multiline:
+ pattern: '^\d+:\w+\s+\d{2}\s+\w{3}\s+\d{4}'
+ negate: true
+ match: after
processors:
- add_cloud_metadata: {}
- add_host_metadata: {}
- - add_fields:
- fields:
- logtype: "agents"
output: |
output.logstash:
hosts: ["${LOGSTASH_HOSTS}"]
@@ -430,33 +424,45 @@ filebeat4agents:
ssl.verification_mode: full
ssl.certificate: "/usr/share/filebeat/certs/tls.crt"
ssl.key: "/usr/share/filebeat/certs/tls.key"
- # monitoring.enabled: "true"
- # monitoring.elasticsearch:
- # hosts: ["${ELASTIC_ELASTICSEARCH_ES_HOSTS}"]
- # ssl.certificate_authorities: ["/usr/share/filebeat/es-certs/ca.crt"]
- # username: "${MONITORING_USER}"
- # password: "${MONITORING_PASSWORD}"
-
metricbeat:
+ ilm:
+ hot:
+ max_age: 30d
+ max_primary_shard_size: 1gb
+ delete:
+ min_age: 30d
resources:
requests:
memory: 500Mi
- cpu: 300m
+
limits:
memory: 500Mi
cpu: 300m
#Hostname to receive status_pod metrics
kubeStateHost: kube-state-metrics.kube-state-metrics.svc.cluster.local:8080
- #Filter for get metric data from specific services,namespaces
- dropEvent:
- when:
- not:
- or:
- - equals:
- kubernetes.namespace: observability
- - equals:
- kubernetes.namespace: argo-cd
- - equals:
- service.type: system
-
\ No newline at end of file
+
+heartbeat:
+ ilm:
+ hot:
+ max_age: 30d
+ max_primary_shard_size: 100mb
+ delete:
+ min_age: 30d
+ services:
+ heartbeat.monitors:
+ - type: tcp
+ name: Elasticsearch Service
+ id: elasticsearch:9200
+ schedule: '@every 5s'
+ hosts: ["elastic-elasticsearch-es-http.observability.svc:9200"]
+ - type: tcp
+ name: Kibana GUI
+ id: kibana:443
+ schedule: '@every 5s'
+ hosts: ["kibana.dev.simpl-europe.eu:443"]
+ - type: icmp
+ id: kibana/icmp
+ name: Kibana ICMP
+ hosts: ["elastic-kibana-kb-http.observability.svc"]
+ schedule: '*/5 * * * * * *'
\ No newline at end of file
diff --git a/charts/values_other.yml b/charts/values_other.yml
new file mode 100644
index 0000000..cb72627
--- /dev/null
+++ b/charts/values_other.yml
@@ -0,0 +1,19 @@
+elasticsearch:
+ count: 2
+ resources:
+ requests:
+ memory: 4Gi
+ limits:
+ memory: 4Gi
+ cpu: "1"
+
+kibana:
+ count: 1
+
+filebeat:
+ count: 0
+
+logstash:
+ count_beats: 1
+ count_syslog: 0
+
diff --git a/pipeline.variables.sh b/pipeline.variables.sh
index 4a3f9c4..3564d00 100644
--- a/pipeline.variables.sh
+++ b/pipeline.variables.sh
@@ -1 +1 @@
-PROJECT_VERSION_NUMBER="0.1.0"
\ No newline at end of file
+PROJECT_VERSION_NUMBER="0.1.2"
\ No newline at end of file
--
GitLab
From 79091b12de8cd288077b4d2dbe1fdb399b1186c3 Mon Sep 17 00:00:00 2001
From: Albert Brzozowski <albert.brzozowski.external@atos.net>
Date: Thu, 21 Nov 2024 11:57:41 +0100
Subject: [PATCH 4/4] Develop
---
.gitlab/CODEOWNERS | 2 +-
charts/Chart.yaml | 2 +-
charts/templates/kibana.yaml | 2 +-
charts/values/dev/observability/values.yaml | 173 ++++++++++----------
pipeline.variables.sh | 2 +-
5 files changed, 87 insertions(+), 94 deletions(-)
diff --git a/.gitlab/CODEOWNERS b/.gitlab/CODEOWNERS
index 8cc70c3..4b9b26a 100644
--- a/.gitlab/CODEOWNERS
+++ b/.gitlab/CODEOWNERS
@@ -1 +1 @@
-* @simpl/simpl-open/development/monitoring @n00bagqb
+* @simpl/simpl-open/development/monitoring @n00bagqb
\ No newline at end of file
diff --git a/charts/Chart.yaml b/charts/Chart.yaml
index f21aa4e..dc19d20 100644
--- a/charts/Chart.yaml
+++ b/charts/Chart.yaml
@@ -1,6 +1,6 @@
name: eck-monitoring
version: ${PROJECT_RELEASE_VERSION}
appVersion: "${PROJECT_RELEASE_VERSION}"
-#version: 0.1.0
+#version: 0.1.3
diff --git a/charts/templates/kibana.yaml b/charts/templates/kibana.yaml
index 1de015d..77a6bf0 100644
--- a/charts/templates/kibana.yaml
+++ b/charts/templates/kibana.yaml
@@ -74,7 +74,7 @@ spec:
http:
tls:
certificate:
- secretName: {{ .Release.Name }}-kibana-cert-secret
+ secretName: {{ .Release.Name }}-kibana-ssl
---
apiVersion: networking.k8s.io/v1
kind: Ingress
diff --git a/charts/values/dev/observability/values.yaml b/charts/values/dev/observability/values.yaml
index 1114e68..df345e9 100644
--- a/charts/values/dev/observability/values.yaml
+++ b/charts/values/dev/observability/values.yaml
@@ -28,6 +28,7 @@ elasticsearch:
resources:
requests:
memory: 4Gi
+ cpu: 300m
limits:
memory: 4Gi
cpu: "1"
@@ -36,7 +37,7 @@ kibana:
count: 1
image: docker.elastic.co/kibana/kibana
#Branch name to donwload dashboards
- dashboardsBranch: "develop"
+ dashboardsBranch: "main"
# Kibana's image tag, by default it equals to elasticVersion
imageTag: ""
# name of helm release where elasticsearch is installed. If you install kibana together with elasticsearch, leave it empty.
@@ -110,17 +111,48 @@ logstash:
}
filter: |-
filter {
- if [kubernetes][container][name] == "ejbca-community-helm" {
- grok {
- match => {
- "message" => [
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{JAVACLASS:logger}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}',
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{PATH:path}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}'
- ]
- }
- overwrite => [ "message" ]
+ ## removing ELK logs
+ if [kubernetes][container][name] == "filebeat" or [kubernetes][container][name] == "metricbeat" or [kubernetes][container][name] == "logstash" or [kubernetes][container][name] == "heartbeat" or [kubernetes][container][name] == "kibana" or [kubernetes][container][name] == "elasticsearch" {
+ drop { }
+ }
+
+ if [kubernetes][container][name] == "sd-creation-wizard-api" or [kubernetes][container][name] == "signer" or [kubernetes][container][name] == "sd-creation-wizard-api-validation" or [kubernetes][container][name] == "simpl-cloud-gateway" {
+ json {
+ source => "message"
+ skip_on_invalid_json => true
+ }
+ }
+
+ if [kubernetes][container][name] == "users-roles" {
+
+ json {
+ source => "message"
+ skip_on_invalid_json => true
+ }
+
+
+ ruby {
+ code => '
+ if event.get("[message]").is_a?(Hash)
+ event.set("is_json_message", true)
+ else
+ event.set("is_json_message", false)
+ end
+ '
}
+
+ if [is_json_message] {
+ if [message][httpStatus] { mutate { add_field => { "httpStatus" => "%{[message][httpStatus]}" } } }
+ if [message][msg] { mutate { add_field => { "msg" => "%{[message][msg]}" } } }
+ if [message][httpRequestSize] { mutate { add_field => { "httpRequestSize" => "%{[message][httpRequestSize]}" } } }
+ if [message][user] { mutate { add_field => { "user" => "%{[message][user]}" } } }
+ if [message][httpExecutionTime] { mutate { add_field => { "httpExecutionTime" => "%{[message][httpExecutionTime]}" } } }
+
+ mutate { remove_field => [ "[message]" ] }
+
+ }
}
+
if [kubernetes][container][name] == "keycloak" {
grok {
match => {
@@ -131,21 +163,7 @@ logstash:
overwrite => [ "message" ]
}
}
- if [kubernetes][container][name] == "onboarding" {
- grok {
- pattern_definitions => { "JAVA" => "[0-9A-Za-z\[\]\.\$]*" }
- match => {
- "message" => [
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{JAVACLASS:logger}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}',
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{WORD:loglevel}%{SPACE}\[%{PATH:path}\]%{SPACE}\(%{DATA:thread}\)%{SPACE}%{GREEDYDATA:message}',
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{JAVACLASS:logger}%{SPACE}:%{SPACE}\[%{DATA:request_id}\]%{SPACE}HTTP%{SPACE}%{WORD:http_method}%{SPACE}"%{DATA:uri}"',
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{JAVA:logger}%{SPACE}:%{SPACE}%{GREEDYDATA:message}',
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{DATA:logger}%{SPACE}:%{SPACE}\[%{DATA:request_id}\]%{SPACE}%{GREEDYDATA:message}'
- ]
- }
- overwrite => [ "message" ]
- }
- }
+
if [kubernetes][container][name] == "postgresql" {
grok {
match => {
@@ -156,67 +174,17 @@ logstash:
overwrite => [ "message" ]
}
}
- if [kubernetes][container][name] == "vault" or [kubernetes][container][name] == "vault-agent-init" or [kubernetes][container][name] == "sidecar-injector" {
- grok {
- match => {
- "message" => [
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}\[%{LOGLEVEL:loglevel}\]%{SPACE}%{DATA:handler}:%{SPACE}%{GREEDYDATA:message}'
-
-
- ]
- }
- overwrite => [ "message" ]
- }
- }
- if [kubernetes][container][name] == "simpl-cloud-gateway" or [kubernetes][container][name] == "users-roles" {
- grok {
- match => {
- "message" => [
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{NUMBER:pid}%{SPACE}---%{SPACE}\[%{DATA:thread}\]%{SPACE}%{JAVACLASS:logger}%{SPACE}:%{SPACE}%{GREEDYDATA:message}'
- ]
- }
- overwrite => [ "message" ]
- }
- }
- if [kubernetes][container][name] == "neo4j" {
- grok {
- match => {
- "message" => [
- '%{TIMESTAMP_ISO8601:timestamp}%{SPACE}%{LOGLEVEL:loglevel}%{SPACE}%{GREEDYDATA:message}'
- ]
- }
- overwrite => [ "message" ]
- }
- }
- if [kubernetes][container][name] == "redis" {
- grok {
- match => {
- "message" => [
- '%{NUMBER:process_id}:%{WORD:process_type}%{SPACE}%{MONTHDAY:day}%{SPACE}%{MONTH:month}%{SPACE}%{YEAR:year}%{SPACE}%{TIME:time}\.%{INT:milliseconds}%{SPACE}\*%{SPACE}%{GREEDYDATA:message}'
- ]
- }
- overwrite => [ "message" ]
- add_field => {
- "timestamp" => "%{day} %{month} %{year} %{time}.%{milliseconds}"
- }
- }
-
- }
-
- if [fields][logtype] == "logs-sample-business" {
- grok {
- match => { "message" => '%{TIMESTAMP_ISO8601:timestamp}\|%{WORD:origin}\|%{WORD:destination}\|%{WORD:business_operation}\|%{DATA:message_type}\|%{WORD:correlation_id}' }
- }
- }
-
- date {
- match => [ "timestamp", "yyyy-MM-dd HH:mm:ss.SSS", "ISO8601", "yyyy-MM-dd HH:mm:ss", "dd MMM yyyy HH:mm:ss.SSS" ]
- }
+ date {
+ match => [ "timestamp", "yyyy-MM-dd HH:mm:ss.SSS", "ISO8601", "yyyy-MM-dd HH:mm:ss", "dd MMM yyyy HH:mm:ss.SSS"]
+ }
+ date {
+ match => [ "ts", "yyyy-MM-dd HH:mm:ss.SSS", "ISO8601", "yyyy-MM-dd HH:mm:ss", "dd MMM yyyy HH:mm:ss.SSS"]
+ }
}
output: |-
output {
- if [fields][logtype] == "logs-sample-business" {
+ if [kubernetes][container][name] == "simpl-cloud-gateway" {
elasticsearch {
hosts => [ "${ELASTIC_ELASTICSEARCH_ES_HOSTS}" ]
user => "${LOGSTASH_USER}"
@@ -388,34 +356,59 @@ filebeat4agents:
filebeat.autodiscover:
providers:
- type: kubernetes
+ # Filter logs only from the monitored namespace
+ namespace: "${MONITORED_NAMESPACE}"
templates:
+ # Condition for redis container in the monitored namespace
- condition:
- or:
- - equals:
- kubernetes.namespace: "${MONITORED_NAMESPACE}"
+ equals:
+ kubernetes.container.name: "redis"
config:
- type: container
paths:
- /var/log/containers/*-${data.kubernetes.container.id}.log
multiline:
- type: pattern
- pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
+ pattern: '^\d+:\w+\s+\d{2}\s+\w{3}\s+\d{4}'
negate: true
match: after
+ # Condition for json structured logs
- condition:
- equals:
- kubernetes.container.name: "redis"
+ or:
+ - equals:
+ kubernetes.container.name: "users-roles"
+ - equals:
+ kubernetes.container.name: "signer"
+ - equals:
+ kubernetes.container.name: "sd-creation-wizard-api"
+ - equals:
+ kubernetes.container.name: "sd-creation-wizard-api-validation"
+ - equals:
+ kubernetes.container.name: "simpl-cloud-gateway"
+ config:
+ - type: container
+ paths:
+ - /var/log/containers/*-${data.kubernetes.container.id}.log
+ # Condition for plain text logs
+ - condition:
+ or:
+ - equals:
+ kubernetes.container.name: "keycloak"
+ - equals:
+ kubernetes.container.name: "postgresql"
config:
- type: container
paths:
- /var/log/containers/*-${data.kubernetes.container.id}.log
multiline:
- pattern: '^\d+:\w+\s+\d{2}\s+\w{3}\s+\d{4}'
+ type: pattern
+ pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
negate: true
match: after
processors:
+ # Add cloud and host metadata
- add_cloud_metadata: {}
- add_host_metadata: {}
+
output: |
output.logstash:
hosts: ["${LOGSTASH_HOSTS}"]
diff --git a/pipeline.variables.sh b/pipeline.variables.sh
index 3564d00..322e00a 100644
--- a/pipeline.variables.sh
+++ b/pipeline.variables.sh
@@ -1 +1 @@
-PROJECT_VERSION_NUMBER="0.1.2"
\ No newline at end of file
+PROJECT_VERSION_NUMBER="0.1.3"
\ No newline at end of file
--
GitLab