mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-20 07:53:06 +01:00
manint and monint
This commit is contained in:
@@ -82,7 +82,7 @@
|
|||||||
"measurement": "net",
|
"measurement": "net",
|
||||||
"orderByTime": "ASC",
|
"orderByTime": "ASC",
|
||||||
"policy": "default",
|
"policy": "default",
|
||||||
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_recv\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '{{ MANINT }}' AND $timeFilter GROUP BY time($interval) fill(null)",
|
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_recv\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '$manint' AND $timeFilter GROUP BY time($interval) fill(null)",
|
||||||
"rawQuery": false,
|
"rawQuery": false,
|
||||||
"refId": "A",
|
"refId": "A",
|
||||||
"resultFormat": "time_series",
|
"resultFormat": "time_series",
|
||||||
@@ -122,7 +122,7 @@
|
|||||||
"condition": "AND",
|
"condition": "AND",
|
||||||
"key": "interface",
|
"key": "interface",
|
||||||
"operator": "=",
|
"operator": "=",
|
||||||
"value": "{{ MANINT }}"
|
"value": "$manint"
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
@@ -146,7 +146,7 @@
|
|||||||
"measurement": "net",
|
"measurement": "net",
|
||||||
"orderByTime": "ASC",
|
"orderByTime": "ASC",
|
||||||
"policy": "default",
|
"policy": "default",
|
||||||
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_sent\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '{{ MANINT }}' AND $timeFilter GROUP BY time($interval) fill(null)",
|
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_sent\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '$manint' AND $timeFilter GROUP BY time($interval) fill(null)",
|
||||||
"rawQuery": false,
|
"rawQuery": false,
|
||||||
"refId": "B",
|
"refId": "B",
|
||||||
"resultFormat": "time_series",
|
"resultFormat": "time_series",
|
||||||
@@ -186,7 +186,7 @@
|
|||||||
"condition": "AND",
|
"condition": "AND",
|
||||||
"key": "interface",
|
"key": "interface",
|
||||||
"operator": "=",
|
"operator": "=",
|
||||||
"value": "{{ MANINT }}"
|
"value": "$manint"
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
@@ -211,7 +211,7 @@
|
|||||||
"measurement": "net",
|
"measurement": "net",
|
||||||
"orderByTime": "ASC",
|
"orderByTime": "ASC",
|
||||||
"policy": "so_long_term",
|
"policy": "so_long_term",
|
||||||
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_recv\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '{{ MANINT }}' AND $timeFilter GROUP BY time($interval) fill(null)",
|
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_recv\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '$manint' AND $timeFilter GROUP BY time($interval) fill(null)",
|
||||||
"rawQuery": false,
|
"rawQuery": false,
|
||||||
"refId": "C",
|
"refId": "C",
|
||||||
"resultFormat": "time_series",
|
"resultFormat": "time_series",
|
||||||
@@ -251,7 +251,7 @@
|
|||||||
"condition": "AND",
|
"condition": "AND",
|
||||||
"key": "interface",
|
"key": "interface",
|
||||||
"operator": "=",
|
"operator": "=",
|
||||||
"value": "{{ MANINT }}"
|
"value": "$manint"
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
@@ -276,7 +276,7 @@
|
|||||||
"measurement": "net",
|
"measurement": "net",
|
||||||
"orderByTime": "ASC",
|
"orderByTime": "ASC",
|
||||||
"policy": "so_long_term",
|
"policy": "so_long_term",
|
||||||
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_sent\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '{{ MANINT }}' AND $timeFilter GROUP BY time($interval) fill(null)",
|
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_sent\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '$manint' AND $timeFilter GROUP BY time($interval) fill(null)",
|
||||||
"rawQuery": false,
|
"rawQuery": false,
|
||||||
"refId": "D",
|
"refId": "D",
|
||||||
"resultFormat": "time_series",
|
"resultFormat": "time_series",
|
||||||
@@ -316,7 +316,7 @@
|
|||||||
"condition": "AND",
|
"condition": "AND",
|
||||||
"key": "interface",
|
"key": "interface",
|
||||||
"operator": "=",
|
"operator": "=",
|
||||||
"value": "{{ MANINT }}"
|
"value": "$manint"
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -82,7 +82,7 @@
|
|||||||
"measurement": "net",
|
"measurement": "net",
|
||||||
"orderByTime": "ASC",
|
"orderByTime": "ASC",
|
||||||
"policy": "default",
|
"policy": "default",
|
||||||
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_recv\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '{{ MONINT }}' AND $timeFilter GROUP BY time($interval) fill(null)",
|
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_recv\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '$monint' AND $timeFilter GROUP BY time($interval) fill(null)",
|
||||||
"rawQuery": false,
|
"rawQuery": false,
|
||||||
"refId": "A",
|
"refId": "A",
|
||||||
"resultFormat": "time_series",
|
"resultFormat": "time_series",
|
||||||
@@ -122,7 +122,7 @@
|
|||||||
"condition": "AND",
|
"condition": "AND",
|
||||||
"key": "interface",
|
"key": "interface",
|
||||||
"operator": "=",
|
"operator": "=",
|
||||||
"value": "{{ MONINT }}"
|
"value": "$monint"
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
@@ -147,7 +147,7 @@
|
|||||||
"measurement": "net",
|
"measurement": "net",
|
||||||
"orderByTime": "ASC",
|
"orderByTime": "ASC",
|
||||||
"policy": "so_long_term",
|
"policy": "so_long_term",
|
||||||
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_recv\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '{{ MONINT }}' AND $timeFilter GROUP BY time($interval) fill(null)",
|
"query": "SELECT 8 * non_negative_derivative(mean(\"bytes_recv\"),1s) FROM \"net\" WHERE \"host\" = 'JumpHost' AND \"interface\" = '$monint' AND $timeFilter GROUP BY time($interval) fill(null)",
|
||||||
"rawQuery": false,
|
"rawQuery": false,
|
||||||
"refId": "B",
|
"refId": "B",
|
||||||
"resultFormat": "time_series",
|
"resultFormat": "time_series",
|
||||||
@@ -187,7 +187,7 @@
|
|||||||
"condition": "AND",
|
"condition": "AND",
|
||||||
"key": "interface",
|
"key": "interface",
|
||||||
"operator": "=",
|
"operator": "=",
|
||||||
"value": "{{ MONINT }}"
|
"value": "$monint"
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user