mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-01-07 08:43:19 +01:00
742 lines
16 KiB
Django/Jinja
742 lines
16 KiB
Django/Jinja
{
|
|
"aliasColors": {
|
|
"Interrupt": "#70DBED",
|
|
"Nice": "#629E51",
|
|
"SoftIRQ": "#EA6460",
|
|
"System": "#BF1B00",
|
|
"User": "#1F78C1",
|
|
"Wait": "#F2C96D",
|
|
"cpu.mean": "#629E51"
|
|
},
|
|
"dashLength": 10,
|
|
"datasource": "InfluxDB",
|
|
"editable": true,
|
|
"fieldConfig": {
|
|
"defaults": {
|
|
"links": []
|
|
},
|
|
"overrides": []
|
|
},
|
|
"fill": 4,
|
|
"grid": {},
|
|
"gridPos": {
|
|
"h": 5,
|
|
"w": 8,
|
|
"x": 0,
|
|
"y": 10
|
|
},
|
|
"id": 4,
|
|
"legend": {
|
|
"alignAsTable": true,
|
|
"avg": true,
|
|
"current": true,
|
|
"max": true,
|
|
"min": true,
|
|
"show": true,
|
|
"total": false,
|
|
"values": true
|
|
},
|
|
"lines": true,
|
|
"linewidth": 2,
|
|
"links": [],
|
|
"nullPointMode": "connected",
|
|
"options": {
|
|
"alertThreshold": true
|
|
},
|
|
"pluginVersion": "7.5.4",
|
|
"pointradius": 5,
|
|
"renderer": "flot",
|
|
"seriesOverrides": [
|
|
{
|
|
"alias": "/Trend/",
|
|
"dashLength": 4,
|
|
"dashes": true,
|
|
"fill": 0,
|
|
"linewidth": 4
|
|
}
|
|
],
|
|
"spaceLength": 10,
|
|
"targets": [
|
|
{
|
|
"alias": "System Current",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "default",
|
|
"query": "SELECT mean(\"usage_system\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": false,
|
|
"refId": "A",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"usage_system"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "User Current",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "default",
|
|
"query": "SELECT mean(\"usage_user\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": false,
|
|
"refId": "B",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"usage_user"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "Nice Current",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "default",
|
|
"query": "SELECT mean(\"usage_nice\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": false,
|
|
"refId": "C",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"usage_nice"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "Interrupt Current",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "default",
|
|
"query": "SELECT mean(\"usage_irq\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": true,
|
|
"refId": "D",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"usage_irq"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "Wait Current",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "default",
|
|
"query": "SELECT mean(\"usage_iowait\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": true,
|
|
"refId": "E",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"usage_iowait"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "SoftIRQ Current",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "default",
|
|
"query": "SELECT mean(\"usage_softirq\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": true,
|
|
"refId": "F",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"usage_softirq"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "System Trend",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"hide": false,
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "so_long_term",
|
|
"query": "SELECT mean(\"usage_system\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": false,
|
|
"refId": "G",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"mean_usage_system"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "User Trend",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"hide": false,
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "so_long_term",
|
|
"query": "SELECT mean(\"usage_user\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": false,
|
|
"refId": "H",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"mean_usage_user"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "Nice Trend",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"hide": false,
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "so_long_term",
|
|
"query": "SELECT mean(\"usage_nice\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": false,
|
|
"refId": "I",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"mean_usage_nice"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "Interrupt Trend",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"hide": false,
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "so_long_term",
|
|
"query": "SELECT mean(\"usage_irq\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": false,
|
|
"refId": "J",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"mean_usage_irq"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "Wait Trend",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"hide": false,
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "so_long_term",
|
|
"query": "SELECT mean(\"usage_iowait\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": false,
|
|
"refId": "K",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"mean_usage_iowait"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"alias": "SoftIRQ Trend",
|
|
"dsType": "influxdb",
|
|
"groupBy": [
|
|
{
|
|
"params": [
|
|
"$__interval"
|
|
],
|
|
"type": "time"
|
|
},
|
|
{
|
|
"params": [
|
|
"null"
|
|
],
|
|
"type": "fill"
|
|
}
|
|
],
|
|
"hide": false,
|
|
"measurement": "cpu",
|
|
"orderByTime": "ASC",
|
|
"policy": "so_long_term",
|
|
"query": "SELECT mean(\"usage_softirq\") FROM \"cpu\" WHERE (\"host\" = '$servername' AND \"cpu\" = 'cpu-total') AND $timeFilter GROUP BY time($__interval) fill(null)",
|
|
"rawQuery": false,
|
|
"refId": "L",
|
|
"resultFormat": "time_series",
|
|
"select": [
|
|
[
|
|
{
|
|
"params": [
|
|
"mean_usage_softirq"
|
|
],
|
|
"type": "field"
|
|
},
|
|
{
|
|
"params": [],
|
|
"type": "mean"
|
|
}
|
|
]
|
|
],
|
|
"tags": [
|
|
{
|
|
"key": "host",
|
|
"operator": "=",
|
|
"value": "$servername"
|
|
},
|
|
{
|
|
"condition": "AND",
|
|
"key": "cpu",
|
|
"operator": "=",
|
|
"value": "cpu-total"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"thresholds": [],
|
|
"timeRegions": [],
|
|
"title": "$servername - CPU Usage",
|
|
"tooltip": {
|
|
"msResolution": true,
|
|
"shared": true,
|
|
"sort": 0,
|
|
"value_type": "cumulative"
|
|
},
|
|
"type": "graph",
|
|
"xaxis": {
|
|
"buckets": null,
|
|
"mode": "time",
|
|
"name": null,
|
|
"show": true,
|
|
"values": []
|
|
},
|
|
"yaxes": [
|
|
{
|
|
"format": "percent",
|
|
"label": "Percent(%)",
|
|
"logBase": 1,
|
|
"max": null,
|
|
"min": null,
|
|
"show": true
|
|
},
|
|
{
|
|
"format": "short",
|
|
"label": null,
|
|
"logBase": 1,
|
|
"max": null,
|
|
"min": null,
|
|
"show": true
|
|
}
|
|
],
|
|
"yaxis": {
|
|
"align": false,
|
|
"alignLevel": null
|
|
},
|
|
"bars": false,
|
|
"dashes": false,
|
|
"error": false,
|
|
"fillGradient": 0,
|
|
"hiddenSeries": false,
|
|
"percentage": false,
|
|
"points": false,
|
|
"stack": false,
|
|
"steppedLine": false,
|
|
"timeFrom": null,
|
|
"timeShift": null
|
|
}
|