grafana: config: server: root_url: "%(protocol)s://%(domain)s/grafana/" auth.anonymous: enabled: true org_name: Main Org. org_role: Viewer smtp: enabled: false # host: localhost:25 # user: myuser # If the password contains # or ; you have to wrap it with triple quotes wrapped by single quotes. Ex '"""#password;"""' # password: mypassword # cert_file: /etc/grafana/config/files/smtp_cert_file.crt # key_file: /etc/grafana/config/files/smtp_key_file.key # skip_verify: false from_address: admin@grafana.localhost from_name: Grafana # ehlo_identity: dashboard.example.com # auth.ldap: # enabled: false # config_file: /etc/grafana/config/files/ldap.toml # allow_sign_up: true # enterprise: # license_path: /opt/so/conf/grafana/etc/files/license.jwt dashboards: overview: title: 'Security Onion Grid Overview' templating: list: servername: text: All value: "$__all" role: allValue: true multi: true hide: 0 text: All value: "$__all" containers: {} manint: {} monint: {} cpucount: {} disk: {} panels: row_overview: gridPos: x: 0 y: 0 h: 1 w: 24 system_uptime_graph: gridPos: x: 0 y: 1 h: 8 w: 12 uptime_docker_combined_current_graph: gridPos: x: 12 y: 1 h: 8 w: 12 cpu_usage_current_graph: gridPos: x: 0 y: 9 h: 8 w: 24 memory_usage_percent_graph: gridPos: x: 0 y: 17 h: 8 w: 24 disk_usage_root_percent_graph: gridPos: x: 0 y: 25 h: 8 w: 24 disk_usage_nsm_percent_graph: gridPos: x: 0 y: 33 h: 8 w: 24 swap_usage_percent_graph: gridPos: x: 0 y: 41 h: 8 w: 24 io_wait_graph: gridPos: x: 0 y: 49 h: 8 w: 24 row_network: gridPos: x: 0 y: 57 h: 1 w: 24 management_interface_traffic_inbound_graph: gridPos: x: 0 y: 58 h: 8 w: 24 management_interface_traffic_outbound_graph: gridPos: x: 0 y: 64 h: 8 w: 24 management_interface_drops_inbound_graph: gridPos: x: 0 y: 72 h: 8 w: 24 management_interface_drops_outbound_graph: gridPos: x: 0 y: 80 h: 8 w: 24 monitor_interface_traffic_inbound_graph: gridPos: x: 0 y: 88 h: 8 w: 24 monitor_interface_drops_inbound_graph: gridPos: x: 0 y: 96 h: 8 w: 24 row_packet_loss: gridPos: x: 0 y: 104 h: 1 w: 24 zeek_packet_loss_graph: gridPos: x: 0 y: 105 h: 8 w: 24 hideTrend: true suricata_packet_loss_graph: gridPos: x: 0 y: 113 h: 8 w: 24 hideTrend: true stenographer_packet_loss_graph: gridPos: x: 0 y: 121 h: 8 w: 24 hideTrend: true row_cpu: gridPos: x: 0 y: 999 h: 1 w: 24 cpu_usage_tasks_running_graph: gridPos: x: 0 y: 1000 h: 8 w: 24 cpu_usage_tasks_zombies_graph: gridPos: x: 0 y: 1008 h: 8 w: 12 cpu_usage_tasks_stopped_graph: gridPos: x: 12 y: 1008 h: 8 w: 12 cpu_usage_tasks_sleeping_graph: gridPos: x: 0 y: 1016 h: 8 w: 12 cpu_usage_tasks_blocked_graph: gridPos: x: 12 y: 1016 h: 8 w: 12 cpu_usage_tasks_paging_graph: gridPos: x: 0 y: 1024 h: 8 w: 12 cpu_usage_tasks_unknown_graph: gridPos: x: 12 y: 1024 h: 8 w: 12 standalone: templating: list: servername: {} role: allValue: false multi: false hide: 2 containers: {} manint: {} monint: {} cpucount: {} disk: {} panels: row_overview: gridPos: x: 0 y: 0 h: 1 w: 24 system_uptime: gridPos: x: 0 y: 1 h: 4 w: 4 load_average_5_minute_stat: gridPos: x: 4 y: 1 h: 4 w: 4 cpu_usage_guage: gridPos: x: 8 y: 1 h: 4 w: 2 ram_usage_guage: gridPos: x: 10 y: 1 h: 4 w: 2 swap_usage_guage: gridPos: x: 12 y: 1 h: 4 w: 2 rootfs_used_guage: gridPos: x: 14 y: 1 h: 4 w: 2 nsm_used_guage: gridPos: x: 16 y: 1 h: 4 w: 2 pcap_retention_stat: gridPos: x: 18 y: 1 h: 4 w: 2 io_wait_stat: gridPos: x: 20 y: 1 h: 4 w: 4 logstash_estimated_eps_in_stat: gridPos: x: 0 y: 5 h: 4 w: 4 redis_queue_stat: gridPos: x: 4 y: 5 h: 4 w: 4 monitor_interface_traffic_stat: gridPos: x: 8 y: 5 h: 4 w: 4 zeek_packet_loss_stat: gridPos: x: 12 y: 5 h: 4 w: 4 suricata_packet_loss_stat: gridPos: x: 16 y: 5 h: 4 w: 4 stenographer_packet_loss_stat: gridPos: x: 20 y: 5 h: 4 w: 4 row_cpu: gridPos: x: 0 y: 9 h: 1 w: 24 cpu_usage_tasks_all_graph: gridPos: x: 0 y: 10 h: 8 w: 24 load_averages_graph: gridPos: x: 0 y: 18 h: 8 w: 12 process_status_graph: gridPos: x: 12 y: 18 h: 8 w: 12 row_memory: gridPos: x: 0 y: 26 h: 1 w: 24 memory_usage_graph: gridPos: x: 0 y: 27 h: 8 w: 24 row_swap: gridPos: x: 0 y: 35 h: 1 w: 24 swap_io_bytes_graph: gridPos: x: 0 y: 36 h: 8 w: 12 swap_usage_bytes_graph: gridPos: x: 12 y: 36 h: 8 w: 12 row_network: gridPos: x: 0 y: 44 h: 1 w: 24 management_interface_traffic_both_graph: gridPos: x: 0 y: 45 h: 8 w: 24 management_interface_packets_graph: gridPos: x: 0 y: 53 h: 8 w: 12 management_interface_drops_graph: gridPos: x: 12 y: 53 h: 8 w: 12 monitor_interface_traffic_both_graph: gridPos: x: 0 y: 61 h: 8 w: 24 monitor_interface_packets_graph: gridPos: x: 0 y: 69 h: 8 w: 12 monitor_interface_drops_graph: gridPos: x: 12 y: 69 h: 8 w: 12 row_disk_usage: gridPos: x: 0 y: 77 h: 1 w: 24 disk_usage_root_graph: gridPos: x: 0 y: 78 h: 8 w: 12 disk_usage_nsm_graph: gridPos: x: 12 y: 78 h: 8 w: 12 row_disk_iops: gridPos: x: 0 y: 86 h: 1 w: 24 disk_io_requests_graph: gridPos: x: 0 y: 87 h: 8 w: 8 disk_io_bytes_graph: gridPos: x: 8 y: 87 h: 8 w: 8 disk_io_time_graph: gridPos: x: 16 y: 87 h: 8 w: 8 row_docker_details: gridPos: x: 0 y: 95 h: 1 w: 24 cpu_docker_combined_current_graph: gridPos: x: 0 y: 96 h: 8 w: 24 cpu_docker_combined_trend_graph: gridPos: x: 0 y: 104 h: 8 w: 24 memory_used_docker_combined_current_graph: gridPos: x: 0 y: 112 h: 8 w: 24 memory_used_docker_combined_trend_graph: gridPos: x: 0 y: 120 h: 8 w: 24 network_usage_docker_combined_current_graph: gridPos: x: 0 y: 128 h: 8 w: 24 network_usage_docker_combined_trend_graph: gridPos: x: 0 y: 136 h: 8 w: 24 uptime_docker_combined_current_graph: gridPos: x: 0 y: 144 h: 8 w: 12 uptime_docker_combined_trend_graph: gridPos: x: 12 y: 144 h: 8 w: 12 row_logstash: gridPos: x: 0 y: 152 h: 1 w: 24 logstash_estimated_eps_in_graph: gridPos: x: 0 y: 153 h: 8 w: 24 row_elasticsearch: gridPos: x: 0 y: 161 h: 1 w: 24 elasticsearch_document_count_graph: gridPos: x: 0 y: 162 h: 8 w: 12 elasticsearch_thread_count_graph: gridPos: x: 12 y: 162 h: 8 w: 12 elasticsearch_store_size_graph: gridPos: x: 0 y: 170 h: 8 w: 12 elasticsearch_field_data_cache_size_graph: gridPos: x: 12 y: 170 h: 8 w: 12 row_redis: gridPos: x: 0 y: 178 h: 1 w: 24 redis_queue_graph: gridPos: x: 0 y: 179 h: 8 w: 24 row_zeek: gridPos: x: 0 y: 187 h: 1 w: 24 zeek_packet_loss_graph: gridPos: x: 0 y: 188 h: 8 w: 12 zeek_capture_loss_graph: gridPos: x: 12 y: 188 h: 8 w: 12 row_suricata: gridPos: x: 0 y: 196 h: 1 w: 24 suricata_packet_loss_graph: gridPos: x: 0 y: 197 h: 8 w: 24 row_stenographer: gridPos: x: 0 y: 205 h: 1 w: 24 stenographer_packet_loss_graph: gridPos: x: 0 y: 206 h: 8 w: 16 stenographer_pcap_retention_graph: gridPos: x: 16 y: 206 h: 8 w: 8 row_influxdb: gridPos: x: 0 y: 214 h: 1 w: 24 influxdb_db_size_graph: gridPos: x: 0 y: 214 h: 8 w: 24 manager: templating: list: servername: {} role: allValue: false multi: false hide: 2 containers: {} manint: {} monint: {} cpucount: {} disk: {} panels: row_overview: gridPos: x: 0 y: 0 h: 1 w: 24 system_uptime: gridPos: x: 0 y: 1 h: 4 w: 4 load_average_5_minute_stat: gridPos: x: 4 y: 1 h: 4 w: 4 cpu_usage_guage: gridPos: x: 8 y: 1 h: 4 w: 2 ram_usage_guage: gridPos: x: 10 y: 1 h: 4 w: 2 swap_usage_guage: gridPos: x: 12 y: 1 h: 4 w: 2 rootfs_used_guage: gridPos: x: 14 y: 1 h: 4 w: 2 nsm_used_guage: gridPos: x: 16 y: 1 h: 4 w: 2 io_wait_stat: gridPos: x: 20 y: 1 h: 4 w: 4 redis_queue_stat: gridPos: x: 0 y: 5 h: 4 w: 4 row_cpu: gridPos: x: 0 y: 9 h: 1 w: 24 cpu_usage_tasks_all_graph: gridPos: x: 0 y: 10 h: 8 w: 24 load_averages_graph: gridPos: x: 0 y: 18 h: 8 w: 12 process_status_graph: gridPos: x: 12 y: 18 h: 8 w: 12 row_memory: gridPos: x: 0 y: 26 h: 1 w: 24 memory_usage_graph: gridPos: x: 0 y: 27 h: 8 w: 24 row_swap: gridPos: x: 0 y: 35 h: 1 w: 24 swap_io_bytes_graph: gridPos: x: 0 y: 36 h: 8 w: 12 swap_usage_bytes_graph: gridPos: x: 12 y: 36 h: 8 w: 12 row_network: gridPos: x: 0 y: 44 h: 1 w: 24 management_interface_traffic_both_graph: gridPos: x: 0 y: 45 h: 8 w: 24 management_interface_packets_graph: gridPos: x: 0 y: 53 h: 8 w: 12 management_interface_drops_graph: gridPos: x: 12 y: 53 h: 8 w: 12 row_disk_usage: gridPos: x: 0 y: 77 h: 1 w: 24 disk_usage_root_graph: gridPos: x: 0 y: 78 h: 8 w: 12 disk_usage_nsm_graph: gridPos: x: 12 y: 78 h: 8 w: 12 row_disk_iops: gridPos: x: 0 y: 86 h: 1 w: 24 disk_io_requests_graph: gridPos: x: 0 y: 87 h: 8 w: 8 disk_io_bytes_graph: gridPos: x: 8 y: 87 h: 8 w: 8 disk_io_time_graph: gridPos: x: 16 y: 87 h: 8 w: 8 row_docker_details: gridPos: x: 0 y: 95 h: 1 w: 24 cpu_docker_combined_current_graph: gridPos: x: 0 y: 96 h: 8 w: 24 cpu_docker_combined_trend_graph: gridPos: x: 0 y: 104 h: 8 w: 24 memory_used_docker_combined_current_graph: gridPos: x: 0 y: 112 h: 8 w: 24 memory_used_docker_combined_trend_graph: gridPos: x: 0 y: 120 h: 8 w: 24 network_usage_docker_combined_current_graph: gridPos: x: 0 y: 128 h: 8 w: 24 network_usage_docker_combined_trend_graph: gridPos: x: 0 y: 136 h: 8 w: 24 uptime_docker_combined_current_graph: gridPos: x: 0 y: 144 h: 8 w: 12 uptime_docker_combined_trend_graph: gridPos: x: 12 y: 144 h: 8 w: 12 row_elasticsearch: gridPos: x: 0 y: 152 h: 1 w: 24 elasticsearch_document_count_graph: gridPos: x: 0 y: 153 h: 8 w: 12 elasticsearch_thread_count_graph: gridPos: x: 12 y: 153 h: 8 w: 12 elasticsearch_store_size_graph: gridPos: x: 0 y: 161 h: 8 w: 12 elasticsearch_field_data_cache_size_graph: gridPos: x: 12 y: 161 h: 8 w: 12 row_redis: gridPos: x: 0 y: 169 h: 1 w: 24 redis_queue_graph: gridPos: x: 0 y: 170 h: 8 w: 24 row_influxdb: gridPos: x: 0 y: 178 h: 1 w: 24 influxdb_db_size_graph: gridPos: x: 0 y: 179 h: 8 w: 24 managersearch: templating: list: servername: {} role: allValue: false multi: false hide: 2 containers: {} manint: {} monint: {} cpucount: {} disk: {} panels: row_overview: gridPos: x: 0 y: 0 h: 1 w: 24 system_uptime: gridPos: x: 0 y: 1 h: 4 w: 4 load_average_5_minute_stat: gridPos: x: 4 y: 1 h: 4 w: 4 cpu_usage_guage: gridPos: x: 8 y: 1 h: 4 w: 2 ram_usage_guage: gridPos: x: 10 y: 1 h: 4 w: 2 swap_usage_guage: gridPos: x: 12 y: 1 h: 4 w: 2 rootfs_used_guage: gridPos: x: 14 y: 1 h: 4 w: 2 nsm_used_guage: gridPos: x: 16 y: 1 h: 4 w: 2 io_wait_stat: gridPos: x: 20 y: 1 h: 4 w: 4 logstash_estimated_eps_in_stat: gridPos: x: 0 y: 5 h: 4 w: 4 redis_queue_stat: gridPos: x: 4 y: 5 h: 4 w: 4 row_cpu: gridPos: x: 0 y: 9 h: 1 w: 24 cpu_usage_tasks_all_graph: gridPos: x: 0 y: 10 h: 8 w: 24 load_averages_graph: gridPos: x: 0 y: 18 h: 8 w: 12 process_status_graph: gridPos: x: 12 y: 18 h: 8 w: 12 row_memory: gridPos: x: 0 y: 26 h: 1 w: 24 memory_usage_graph: gridPos: x: 0 y: 27 h: 8 w: 24 row_swap: gridPos: x: 0 y: 35 h: 1 w: 24 swap_io_bytes_graph: gridPos: x: 0 y: 36 h: 8 w: 12 swap_usage_bytes_graph: gridPos: x: 12 y: 36 h: 8 w: 12 row_network: gridPos: x: 0 y: 44 h: 1 w: 24 management_interface_traffic_both_graph: gridPos: x: 0 y: 45 h: 8 w: 24 management_interface_packets_graph: gridPos: x: 0 y: 53 h: 8 w: 12 management_interface_drops_graph: gridPos: x: 12 y: 53 h: 8 w: 12 row_disk_usage: gridPos: x: 0 y: 77 h: 1 w: 24 disk_usage_root_graph: gridPos: x: 0 y: 78 h: 8 w: 12 disk_usage_nsm_graph: gridPos: x: 12 y: 78 h: 8 w: 12 row_disk_iops: gridPos: x: 0 y: 86 h: 1 w: 24 disk_io_requests_graph: gridPos: x: 0 y: 87 h: 8 w: 8 disk_io_bytes_graph: gridPos: x: 8 y: 87 h: 8 w: 8 disk_io_time_graph: gridPos: x: 16 y: 87 h: 8 w: 8 row_docker_details: gridPos: x: 0 y: 95 h: 1 w: 24 cpu_docker_combined_current_graph: gridPos: x: 0 y: 96 h: 8 w: 24 cpu_docker_combined_trend_graph: gridPos: x: 0 y: 104 h: 8 w: 24 memory_used_docker_combined_current_graph: gridPos: x: 0 y: 112 h: 8 w: 24 memory_used_docker_combined_trend_graph: gridPos: x: 0 y: 120 h: 8 w: 24 network_usage_docker_combined_current_graph: gridPos: x: 0 y: 128 h: 8 w: 24 network_usage_docker_combined_trend_graph: gridPos: x: 0 y: 136 h: 8 w: 24 uptime_docker_combined_current_graph: gridPos: x: 0 y: 144 h: 8 w: 12 uptime_docker_combined_trend_graph: gridPos: x: 12 y: 144 h: 8 w: 12 row_logstash: gridPos: x: 0 y: 152 h: 1 w: 24 logstash_estimated_eps_in_graph: gridPos: x: 0 y: 153 h: 8 w: 24 row_elasticsearch: gridPos: x: 0 y: 161 h: 1 w: 24 elasticsearch_document_count_graph: gridPos: x: 0 y: 162 h: 8 w: 12 elasticsearch_thread_count_graph: gridPos: x: 12 y: 162 h: 8 w: 12 elasticsearch_store_size_graph: gridPos: x: 0 y: 170 h: 8 w: 12 elasticsearch_field_data_cache_size_graph: gridPos: x: 12 y: 170 h: 8 w: 12 row_redis: gridPos: x: 0 y: 178 h: 1 w: 24 redis_queue_graph: gridPos: x: 0 y: 179 h: 8 w: 24 row_influxdb: gridPos: x: 0 y: 214 h: 1 w: 24 influxdb_db_size_graph: gridPos: x: 0 y: 214 h: 8 w: 24 sensor: templating: list: servername: {} role: allValue: false multi: false hide: 2 containers: {} manint: {} monint: {} cpucount: {} disk: {} panels: row_overview: gridPos: x: 0 y: 0 h: 1 w: 24 system_uptime: gridPos: x: 0 y: 1 h: 4 w: 4 load_average_5_minute_stat: gridPos: x: 4 y: 1 h: 4 w: 4 cpu_usage_guage: gridPos: x: 8 y: 1 h: 4 w: 2 ram_usage_guage: gridPos: x: 10 y: 1 h: 4 w: 2 swap_usage_guage: gridPos: x: 12 y: 1 h: 4 w: 2 rootfs_used_guage: gridPos: x: 14 y: 1 h: 4 w: 2 nsm_used_guage: gridPos: x: 16 y: 1 h: 4 w: 2 pcap_retention_stat: gridPos: x: 18 y: 1 h: 4 w: 2 io_wait_stat: gridPos: x: 20 y: 1 h: 4 w: 4 monitor_interface_traffic_stat: gridPos: x: 8 y: 5 h: 4 w: 4 zeek_packet_loss_stat: gridPos: x: 12 y: 5 h: 4 w: 4 suricata_packet_loss_stat: gridPos: x: 16 y: 5 h: 4 w: 4 stenographer_packet_loss_stat: gridPos: x: 20 y: 5 h: 4 w: 4 row_cpu: gridPos: x: 0 y: 9 h: 1 w: 24 cpu_usage_tasks_all_graph: gridPos: x: 0 y: 10 h: 8 w: 24 load_averages_graph: gridPos: x: 0 y: 18 h: 8 w: 12 process_status_graph: gridPos: x: 12 y: 18 h: 8 w: 12 row_memory: gridPos: x: 0 y: 26 h: 1 w: 24 memory_usage_graph: gridPos: x: 0 y: 27 h: 8 w: 24 row_swap: gridPos: x: 0 y: 35 h: 1 w: 24 swap_io_bytes_graph: gridPos: x: 0 y: 36 h: 8 w: 12 swap_usage_bytes_graph: gridPos: x: 12 y: 36 h: 8 w: 12 row_network: gridPos: x: 0 y: 44 h: 1 w: 24 management_interface_traffic_both_graph: gridPos: x: 0 y: 45 h: 8 w: 24 management_interface_packets_graph: gridPos: x: 0 y: 53 h: 8 w: 12 management_interface_drops_graph: gridPos: x: 12 y: 53 h: 8 w: 12 monitor_interface_traffic_both_graph: gridPos: x: 0 y: 61 h: 8 w: 24 monitor_interface_traffic_inbound_total_graph: gridPos: x: 0 y: 69 h: 8 w: 24 monitor_interface_packets_graph: gridPos: x: 0 y: 77 h: 8 w: 12 monitor_interface_drops_graph: gridPos: x: 12 y: 77 h: 8 w: 12 row_disk_usage: gridPos: x: 0 y: 85 h: 1 w: 24 disk_usage_root_graph: gridPos: x: 0 y: 86 h: 8 w: 12 disk_usage_nsm_graph: gridPos: x: 12 y: 86 h: 8 w: 12 row_disk_iops: gridPos: x: 0 y: 94 h: 1 w: 24 disk_io_requests_graph: gridPos: x: 0 y: 95 h: 8 w: 8 disk_io_bytes_graph: gridPos: x: 8 y: 95 h: 8 w: 8 disk_io_time_graph: gridPos: x: 16 y: 95 h: 8 w: 8 row_docker_details: gridPos: x: 0 y: 103 h: 1 w: 24 cpu_docker_combined_current_graph: gridPos: x: 0 y: 104 h: 8 w: 24 cpu_docker_combined_trend_graph: gridPos: x: 0 y: 112 h: 8 w: 24 memory_used_docker_combined_current_graph: gridPos: x: 0 y: 120 h: 8 w: 24 memory_used_docker_combined_trend_graph: gridPos: x: 0 y: 128 h: 8 w: 24 network_usage_docker_combined_current_graph: gridPos: x: 0 y: 136 h: 8 w: 24 network_usage_docker_combined_trend_graph: gridPos: x: 0 y: 144 h: 8 w: 24 uptime_docker_combined_current_graph: gridPos: x: 0 y: 152 h: 8 w: 12 uptime_docker_combined_trend_graph: gridPos: x: 12 y: 152 h: 8 w: 12 row_zeek: gridPos: x: 0 y: 160 h: 1 w: 24 zeek_packet_loss_graph: gridPos: x: 0 y: 161 h: 8 w: 12 zeek_capture_loss_graph: gridPos: x: 12 y: 161 h: 8 w: 12 row_suricata: gridPos: x: 0 y: 169 h: 1 w: 24 suricata_packet_loss_graph: gridPos: x: 0 y: 170 h: 8 w: 24 row_stenographer: gridPos: x: 0 y: 178 h: 1 w: 24 stenographer_packet_loss_graph: gridPos: x: 0 y: 179 h: 8 w: 16 stenographer_pcap_retention_graph: gridPos: x: 16 y: 179 h: 8 w: 8 searchnode: templating: list: servername: {} role: allValue: false multi: false hide: 2 containers: {} manint: {} monint: {} cpucount: {} disk: {} panels: row_overview: gridPos: x: 0 y: 0 h: 1 w: 24 system_uptime: gridPos: x: 0 y: 1 h: 4 w: 4 load_average_5_minute_stat: gridPos: x: 4 y: 1 h: 4 w: 4 cpu_usage_guage: gridPos: x: 8 y: 1 h: 4 w: 2 ram_usage_guage: gridPos: x: 10 y: 1 h: 4 w: 2 swap_usage_guage: gridPos: x: 12 y: 1 h: 4 w: 2 rootfs_used_guage: gridPos: x: 14 y: 1 h: 4 w: 2 nsm_used_guage: gridPos: x: 16 y: 1 h: 4 w: 2 io_wait_stat: gridPos: x: 20 y: 1 h: 4 w: 4 logstash_estimated_eps_in_stat: gridPos: x: 0 y: 5 h: 4 w: 4 logstash_estimated_eps_out_stat: gridPos: x: 4 y: 5 h: 4 w: 4 row_cpu: gridPos: x: 0 y: 9 h: 1 w: 24 cpu_usage_tasks_all_graph: gridPos: x: 0 y: 10 h: 8 w: 24 load_averages_graph: gridPos: x: 0 y: 18 h: 8 w: 12 process_status_graph: gridPos: x: 12 y: 18 h: 8 w: 12 row_memory: gridPos: x: 0 y: 26 h: 1 w: 24 memory_usage_graph: gridPos: x: 0 y: 27 h: 8 w: 24 row_swap: gridPos: x: 0 y: 35 h: 1 w: 24 swap_io_bytes_graph: gridPos: x: 0 y: 36 h: 8 w: 12 swap_usage_bytes_graph: gridPos: x: 12 y: 36 h: 8 w: 12 row_network: gridPos: x: 0 y: 44 h: 1 w: 24 management_interface_traffic_both_graph: gridPos: x: 0 y: 45 h: 8 w: 24 management_interface_packets_graph: gridPos: x: 0 y: 53 h: 8 w: 12 management_interface_drops_graph: gridPos: x: 12 y: 53 h: 8 w: 12 row_disk_usage: gridPos: x: 0 y: 77 h: 1 w: 24 disk_usage_root_graph: gridPos: x: 0 y: 78 h: 8 w: 12 disk_usage_nsm_graph: gridPos: x: 12 y: 78 h: 8 w: 12 row_disk_iops: gridPos: x: 0 y: 86 h: 1 w: 24 disk_io_requests_graph: gridPos: x: 0 y: 87 h: 8 w: 8 disk_io_bytes_graph: gridPos: x: 8 y: 87 h: 8 w: 8 disk_io_time_graph: gridPos: x: 16 y: 87 h: 8 w: 8 row_docker_details: gridPos: x: 0 y: 95 h: 1 w: 24 cpu_docker_combined_current_graph: gridPos: x: 0 y: 96 h: 8 w: 24 cpu_docker_combined_trend_graph: gridPos: x: 0 y: 104 h: 8 w: 24 memory_used_docker_combined_current_graph: gridPos: x: 0 y: 112 h: 8 w: 24 memory_used_docker_combined_trend_graph: gridPos: x: 0 y: 120 h: 8 w: 24 network_usage_docker_combined_current_graph: gridPos: x: 0 y: 128 h: 8 w: 24 network_usage_docker_combined_trend_graph: gridPos: x: 0 y: 136 h: 8 w: 24 uptime_docker_combined_current_graph: gridPos: x: 0 y: 144 h: 8 w: 12 uptime_docker_combined_trend_graph: gridPos: x: 12 y: 144 h: 8 w: 12 row_logstash: gridPos: x: 0 y: 152 h: 1 w: 24 logstash_estimated_eps_in_graph: gridPos: x: 0 y: 153 h: 8 w: 24 logstash_estimated_eps_in_total_graph: gridPos: x: 0 y: 161 h: 8 w: 24 logstash_estimated_eps_out_graph: gridPos: x: 0 y: 169 h: 8 w: 24 logstash_estimated_eps_out_total_graph: gridPos: x: 0 y: 172 h: 8 w: 24 heavynode: templating: list: servername: {} role: allValue: false multi: false hide: 2 containers: {} manint: {} monint: {} cpucount: {} disk: {} panels: row_overview: gridPos: x: 0 y: 0 h: 1 w: 24 system_uptime: gridPos: x: 0 y: 1 h: 4 w: 4 load_average_5_minute_stat: gridPos: x: 4 y: 1 h: 4 w: 4 cpu_usage_guage: gridPos: x: 8 y: 1 h: 4 w: 2 ram_usage_guage: gridPos: x: 10 y: 1 h: 4 w: 2 swap_usage_guage: gridPos: x: 12 y: 1 h: 4 w: 2 rootfs_used_guage: gridPos: x: 14 y: 1 h: 4 w: 2 nsm_used_guage: gridPos: x: 16 y: 1 h: 4 w: 2 pcap_retention_stat: gridPos: x: 18 y: 1 h: 4 w: 2 io_wait_stat: gridPos: x: 20 y: 1 h: 4 w: 4 logstash_estimated_eps_in_stat: gridPos: x: 0 y: 5 h: 4 w: 4 monitor_interface_traffic_stat: gridPos: x: 4 y: 5 h: 4 w: 4 zeek_packet_loss_stat: gridPos: x: 8 y: 5 h: 4 w: 4 suricata_packet_loss_stat: gridPos: x: 12 y: 5 h: 4 w: 4 stenographer_packet_loss_stat: gridPos: x: 16 y: 5 h: 4 w: 4 row_cpu: gridPos: x: 0 y: 9 h: 1 w: 24 cpu_usage_tasks_all_graph: gridPos: x: 0 y: 10 h: 8 w: 24 load_averages_graph: gridPos: x: 0 y: 18 h: 8 w: 12 process_status_graph: gridPos: x: 12 y: 18 h: 8 w: 12 row_memory: gridPos: x: 0 y: 26 h: 1 w: 24 memory_usage_graph: gridPos: x: 0 y: 27 h: 8 w: 24 row_swap: gridPos: x: 0 y: 35 h: 1 w: 24 swap_io_bytes_graph: gridPos: x: 0 y: 36 h: 8 w: 12 swap_usage_bytes_graph: gridPos: x: 12 y: 36 h: 8 w: 12 row_network: gridPos: x: 0 y: 44 h: 1 w: 24 management_interface_traffic_both_graph: gridPos: x: 0 y: 45 h: 8 w: 24 management_interface_packets_graph: gridPos: x: 0 y: 53 h: 8 w: 12 management_interface_drops_graph: gridPos: x: 12 y: 53 h: 8 w: 12 monitor_interface_traffic_both_graph: gridPos: x: 0 y: 61 h: 8 w: 24 monitor_interface_packets_graph: gridPos: x: 0 y: 69 h: 8 w: 12 monitor_interface_drops_graph: gridPos: x: 12 y: 69 h: 8 w: 12 row_disk_usage: gridPos: x: 0 y: 77 h: 1 w: 24 disk_usage_root_graph: gridPos: x: 0 y: 78 h: 8 w: 12 disk_usage_nsm_graph: gridPos: x: 12 y: 78 h: 8 w: 12 row_disk_iops: gridPos: x: 0 y: 86 h: 1 w: 24 disk_io_requests_graph: gridPos: x: 0 y: 87 h: 8 w: 8 disk_io_bytes_graph: gridPos: x: 8 y: 87 h: 8 w: 8 disk_io_time_graph: gridPos: x: 16 y: 87 h: 8 w: 8 row_docker_details: gridPos: x: 0 y: 95 h: 1 w: 24 cpu_docker_combined_current_graph: gridPos: x: 0 y: 96 h: 8 w: 24 cpu_docker_combined_trend_graph: gridPos: x: 0 y: 104 h: 8 w: 24 memory_used_docker_combined_current_graph: gridPos: x: 0 y: 112 h: 8 w: 24 memory_used_docker_combined_trend_graph: gridPos: x: 0 y: 120 h: 8 w: 24 network_usage_docker_combined_current_graph: gridPos: x: 0 y: 128 h: 8 w: 24 network_usage_docker_combined_trend_graph: gridPos: x: 0 y: 136 h: 8 w: 24 uptime_docker_combined_current_graph: gridPos: x: 0 y: 144 h: 8 w: 12 uptime_docker_combined_trend_graph: gridPos: x: 12 y: 144 h: 8 w: 12 row_logstash: gridPos: x: 0 y: 152 h: 1 w: 24 logstash_estimated_eps_in_graph: gridPos: x: 0 y: 153 h: 8 w: 24 row_zeek: gridPos: x: 0 y: 170 h: 1 w: 24 zeek_packet_loss_graph: gridPos: x: 0 y: 171 h: 8 w: 12 zeek_capture_loss_graph: gridPos: x: 12 y: 171 h: 8 w: 12 row_suricata: gridPos: x: 0 y: 179 h: 1 w: 24 suricata_packet_loss_graph: gridPos: x: 0 y: 180 h: 8 w: 24 row_stenographer: gridPos: x: 0 y: 188 h: 1 w: 24 stenographer_packet_loss_graph: gridPos: x: 0 y: 189 h: 8 w: 16 stenographer_pcap_retention_graph: gridPos: x: 16 y: 189 h: 8 w: 8 eval: templating: list: servername: {} role: allValue: false multi: false hide: 2 containers: {} manint: {} monint: {} cpucount: {} disk: {} panels: row_overview: gridPos: x: 0 y: 0 h: 1 w: 24 system_uptime: gridPos: x: 0 y: 1 h: 4 w: 4 load_average_5_minute_stat: gridPos: x: 4 y: 1 h: 4 w: 4 cpu_usage_guage: gridPos: x: 8 y: 1 h: 4 w: 2 ram_usage_guage: gridPos: x: 10 y: 1 h: 4 w: 2 swap_usage_guage: gridPos: x: 12 y: 1 h: 4 w: 2 rootfs_used_guage: gridPos: x: 14 y: 1 h: 4 w: 2 nsm_used_guage: gridPos: x: 16 y: 1 h: 4 w: 2 pcap_retention_stat: gridPos: x: 18 y: 1 h: 4 w: 2 io_wait_stat: gridPos: x: 20 y: 1 h: 4 w: 4 redis_queue_stat: gridPos: x: 4 y: 5 h: 4 w: 4 monitor_interface_traffic_stat: gridPos: x: 8 y: 5 h: 4 w: 4 zeek_packet_loss_stat: gridPos: x: 12 y: 5 h: 4 w: 4 suricata_packet_loss_stat: gridPos: x: 16 y: 5 h: 4 w: 4 stenographer_packet_loss_stat: gridPos: x: 20 y: 5 h: 4 w: 4 row_cpu: gridPos: x: 0 y: 9 h: 1 w: 24 cpu_usage_tasks_all_graph: gridPos: x: 0 y: 10 h: 8 w: 24 load_averages_graph: gridPos: x: 0 y: 18 h: 8 w: 12 process_status_graph: gridPos: x: 12 y: 18 h: 8 w: 12 row_memory: gridPos: x: 0 y: 26 h: 1 w: 24 memory_usage_graph: gridPos: x: 0 y: 27 h: 8 w: 24 row_swap: gridPos: x: 0 y: 35 h: 1 w: 24 swap_io_bytes_graph: gridPos: x: 0 y: 36 h: 8 w: 12 swap_usage_bytes_graph: gridPos: x: 12 y: 36 h: 8 w: 12 row_network: gridPos: x: 0 y: 44 h: 1 w: 24 management_interface_traffic_both_graph: gridPos: x: 0 y: 45 h: 8 w: 24 management_interface_packets_graph: gridPos: x: 0 y: 53 h: 8 w: 12 management_interface_drops_graph: gridPos: x: 12 y: 53 h: 8 w: 12 monitor_interface_traffic_both_graph: gridPos: x: 0 y: 61 h: 8 w: 24 monitor_interface_packets_graph: gridPos: x: 0 y: 69 h: 8 w: 12 monitor_interface_drops_graph: gridPos: x: 12 y: 69 h: 8 w: 12 row_disk_usage: gridPos: x: 0 y: 77 h: 1 w: 24 disk_usage_root_graph: gridPos: x: 0 y: 78 h: 8 w: 12 disk_usage_nsm_graph: gridPos: x: 12 y: 78 h: 8 w: 12 row_disk_iops: gridPos: x: 0 y: 86 h: 1 w: 24 disk_io_requests_graph: gridPos: x: 0 y: 87 h: 8 w: 8 disk_io_bytes_graph: gridPos: x: 8 y: 87 h: 8 w: 8 disk_io_time_graph: gridPos: x: 16 y: 87 h: 8 w: 8 row_docker_details: gridPos: x: 0 y: 95 h: 1 w: 24 cpu_docker_combined_current_graph: gridPos: x: 0 y: 96 h: 8 w: 24 cpu_docker_combined_trend_graph: gridPos: x: 0 y: 104 h: 8 w: 24 memory_used_docker_combined_current_graph: gridPos: x: 0 y: 112 h: 8 w: 24 memory_used_docker_combined_trend_graph: gridPos: x: 0 y: 120 h: 8 w: 24 network_usage_docker_combined_current_graph: gridPos: x: 0 y: 128 h: 8 w: 24 network_usage_docker_combined_trend_graph: gridPos: x: 0 y: 136 h: 8 w: 24 uptime_docker_combined_current_graph: gridPos: x: 0 y: 144 h: 8 w: 12 uptime_docker_combined_trend_graph: gridPos: x: 12 y: 144 h: 8 w: 12 row_elasticsearch: gridPos: x: 0 y: 161 h: 1 w: 24 elasticsearch_document_count_graph: gridPos: x: 0 y: 162 h: 8 w: 12 elasticsearch_thread_count_graph: gridPos: x: 12 y: 162 h: 8 w: 12 elasticsearch_store_size_graph: gridPos: x: 0 y: 170 h: 8 w: 12 elasticsearch_field_data_cache_size_graph: gridPos: x: 12 y: 170 h: 8 w: 12 row_redis: gridPos: x: 0 y: 178 h: 1 w: 24 redis_queue_graph: gridPos: x: 0 y: 179 h: 8 w: 24 row_zeek: gridPos: x: 0 y: 187 h: 1 w: 24 zeek_packet_loss_graph: gridPos: x: 0 y: 188 h: 8 w: 12 zeek_capture_loss_graph: gridPos: x: 12 y: 188 h: 8 w: 12 row_suricata: gridPos: x: 0 y: 196 h: 1 w: 24 suricata_packet_loss_graph: gridPos: x: 0 y: 197 h: 8 w: 24 row_stenographer: gridPos: x: 0 y: 205 h: 1 w: 24 stenographer_packet_loss_graph: gridPos: x: 0 y: 206 h: 8 w: 16 stenographer_pcap_retention_graph: gridPos: x: 16 y: 206 h: 8 w: 8 row_influxdb: gridPos: x: 0 y: 214 h: 1 w: 24 influxdb_db_size_graph: gridPos: x: 0 y: 214 h: 8 w: 24 receiver: templating: list: servername: {} role: allValue: false multi: false hide: 2 containers: {} manint: {} monint: {} cpucount: {} disk: {} panels: row_overview: gridPos: x: 0 y: 0 h: 1 w: 24 system_uptime: gridPos: x: 0 y: 1 h: 4 w: 4 load_average_5_minute_stat: gridPos: x: 4 y: 1 h: 4 w: 4 cpu_usage_guage: gridPos: x: 8 y: 1 h: 4 w: 2 ram_usage_guage: gridPos: x: 10 y: 1 h: 4 w: 2 swap_usage_guage: gridPos: x: 12 y: 1 h: 4 w: 2 rootfs_used_guage: gridPos: x: 14 y: 1 h: 4 w: 2 nsm_used_guage: gridPos: x: 16 y: 1 h: 4 w: 2 io_wait_stat: gridPos: x: 20 y: 1 h: 4 w: 4 logstash_estimated_eps_in_stat: gridPos: x: 0 y: 5 h: 4 w: 4 logstash_estimated_eps_out_stat: gridPos: x: 4 y: 5 h: 4 w: 4 redis_queue_stat: gridPos: x: 8 y: 5 h: 4 w: 4 row_cpu: gridPos: x: 0 y: 9 h: 1 w: 24 cpu_usage_tasks_all_graph: gridPos: x: 0 y: 10 h: 8 w: 24 load_averages_graph: gridPos: x: 0 y: 18 h: 8 w: 12 process_status_graph: gridPos: x: 12 y: 18 h: 8 w: 12 row_memory: gridPos: x: 0 y: 26 h: 1 w: 24 memory_usage_graph: gridPos: x: 0 y: 27 h: 8 w: 24 row_swap: gridPos: x: 0 y: 35 h: 1 w: 24 swap_io_bytes_graph: gridPos: x: 0 y: 36 h: 8 w: 12 swap_usage_bytes_graph: gridPos: x: 12 y: 36 h: 8 w: 12 row_network: gridPos: x: 0 y: 44 h: 1 w: 24 management_interface_traffic_both_graph: gridPos: x: 0 y: 45 h: 8 w: 24 management_interface_packets_graph: gridPos: x: 0 y: 53 h: 8 w: 12 management_interface_drops_graph: gridPos: x: 12 y: 53 h: 8 w: 12 row_disk_usage: gridPos: x: 0 y: 77 h: 1 w: 24 disk_usage_root_graph: gridPos: x: 0 y: 78 h: 8 w: 12 disk_usage_nsm_graph: gridPos: x: 12 y: 78 h: 8 w: 12 row_disk_iops: gridPos: x: 0 y: 86 h: 1 w: 24 disk_io_requests_graph: gridPos: x: 0 y: 87 h: 8 w: 8 disk_io_bytes_graph: gridPos: x: 8 y: 87 h: 8 w: 8 disk_io_time_graph: gridPos: x: 16 y: 87 h: 8 w: 8 row_docker_details: gridPos: x: 0 y: 95 h: 1 w: 24 cpu_docker_combined_current_graph: gridPos: x: 0 y: 96 h: 8 w: 24 cpu_docker_combined_trend_graph: gridPos: x: 0 y: 104 h: 8 w: 24 memory_used_docker_combined_current_graph: gridPos: x: 0 y: 112 h: 8 w: 24 memory_used_docker_combined_trend_graph: gridPos: x: 0 y: 120 h: 8 w: 24 network_usage_docker_combined_current_graph: gridPos: x: 0 y: 128 h: 8 w: 24 network_usage_docker_combined_trend_graph: gridPos: x: 0 y: 136 h: 8 w: 24 uptime_docker_combined_current_graph: gridPos: x: 0 y: 144 h: 8 w: 12 uptime_docker_combined_trend_graph: gridPos: x: 12 y: 144 h: 8 w: 12 row_logstash: gridPos: x: 0 y: 152 h: 1 w: 24 logstash_estimated_eps_in_graph: gridPos: x: 0 y: 153 h: 8 w: 24 logstash_estimated_eps_in_total_graph: gridPos: x: 0 y: 161 h: 8 w: 24 logstash_estimated_eps_out_graph: gridPos: x: 0 y: 169 h: 8 w: 24 logstash_estimated_eps_out_total_graph: gridPos: x: 0 y: 172 h: 8 w: 24 row_redis: gridPos: x: 0 y: 180 h: 1 w: 24 redis_queue_graph: gridPos: x: 0 y: 181 h: 8 w: 24 pipeline_overview_nontc: title: 'Pipeline Overview' templating: list: searchnode: includeAll: true multi: true hide: 2 text: All value: "$__all" panels: redis_queue_graph: gridPos: x: 0 y: 0 h: 8 w: 8 logstash_eps_in_out_manager_graph: gridPos: x: 8 y: 0 h: 8 w: 8 logstash_indexing_eps_in_searchnode_total_graph: gridPos: x: 16 y: 0 h: 8 w: 8 logstash_indexing_eps_in_out_searchnode_graph: gridPos: x: 0 y: 8 h: 8 w: 24 elasticsearch_ingest_performance_nontc_graph: gridPos: x: 0 y: 16 h: 8 w: 24 pipeline_overview_tc: title: 'Pipeline Overview' templating: list: searchnode: includeAll: true multi: true hide: 2 text: All value: "$__all" cluster_name: includeAll: true multi: true hide: 2 text: All value: "$__all" panels: redis_queue_graph: gridPos: x: 0 y: 0 h: 8 w: 8 logstash_eps_in_out_manager_graph: gridPos: x: 8 y: 0 h: 8 w: 8 logstash_indexing_eps_in_searchnode_total_graph: gridPos: x: 16 y: 0 h: 8 w: 8 logstash_indexing_eps_in_out_searchnode_graph: gridPos: x: 0 y: 8 h: 8 w: 24 elasticsearch_ingest_performance_tc_graph: gridPos: x: 0 y: 16 h: 8 w: 24