gravwell-dashboard_netflow-overview.json

{
  "cols": 6,
  "rowheight": "4:3",
  "tiles": [
    {
      "span": {
        "col": 4,
        "row": 4,
        "x": 0,
        "y": 0
      },
      "title": "Overview",
      "searchesIndex": "0",
      "renderer": "overview",
      "id": 1536959896209
    },
    {
      "span": {
        "col": 4,
        "row": 4,
        "x": 0,
        "y": 4
      },
      "title": "Inbound Traffic",
      "searchesIndex": "0",
      "renderer": "areaChart",
      "id": 1536959896211,
      "rendererOptions": {
        "chartOptions": {
          "Stack": "stacked"
        }
      }
    },
    {
      "span": {
        "col": 4,
        "row": 5,
        "x": 4,
        "y": 0
      },
      "title": "Inbound Totals",
      "searchesIndex": 0,
      "renderer": "pieChart",
      "id": 1536959896212,
      "query": "tag=netflow netflow Dst ~ 10.0.0.0/24 Bytes | sum Bytes by Dst | chart sum by Dst limit 20"
    },
    {
      "span": {
        "col": 4,
        "row": 5,
        "x": 8,
        "y": 0
      },
      "title": "Outbound Totals",
      "searchesIndex": "1",
      "renderer": "pieChart",
      "id": 1536959896213
    },
    {
      "span": {
        "col": 4,
        "row": 4,
        "x": 0,
        "y": 8
      },
      "title": "Outbound Traffic",
      "searchesIndex": "1",
      "renderer": "areaChart",
      "id": 1536959896214
    },
    {
      "span": {
        "col": 3,
        "row": 4,
        "x": 4,
        "y": 5
      },
      "title": "Packet Count",
      "searchesIndex": "2",
      "renderer": "lineChart",
      "id": 1536959896215
    },
    {
      "title": "Communication Heatmap",
      "renderer": "skyscraperGlobe",
      "searchesIndex": 4,
      "span": {
        "col": 5,
        "row": 6,
        "x": 7,
        "y": 5
      },
      "id": 1562570494438,
      "rendererOptions": {
        "chartOptions": {
          "Background": "yes",
          "Rotate": "yes"
        }
      }
    }
  ],
  "searches": [
    {
      "query": "tag=netflow netflow Dst ~ 10.0.0.0/24 Bytes | sum Bytes by Dst | chart sum by Dst limit 20",
      "alias": "InboundTraffic",
      "timeframe": {}
    },
    {
      "query": "tag=netflow netflow Dst !~ 10.0.0.0/24 Src Bytes | sum Bytes by Src | chart sum by Src limit 20",
      "alias": "OutboundTraffic",
      "timeframe": {}
    },
    {
      "query": "tag=netflow netflow Pkts | stats sum(Pkts) | chart sum",
      "alias": "PacketCount",
      "timeframe": {}
    },
    {
      "query": "tag=netflow netflow IP !~ 10.0.0.0/8 Port < 1024 Bytes as traffic |  sum traffic by IP,Port | stackgraph Port IP sum",
      "alias": "netflow stackgraph"
    },
    {
      "query": "tag=netflow netflow IP !~ 10.0.0.0/8 | geoip IP.Location | heatmap",
      "alias": "Communication Heatmap"
    }
  ],
  "timeframe": {
    "timeframe": "PT1H",
    "durationString": "PT1H",
    "start": null,
    "end": null
  },
  "linkZooming": true,
  "liveUpdateInterval": 60
}