mirror of
https://github.com/elastic/logstash.git
synced 2025-04-19 04:15:23 -04:00
30 lines
814 B
JSON
30 lines
814 B
JSON
{
|
|
"title": "Network Events [ArcSight]",
|
|
"description": "",
|
|
"hits": 0,
|
|
"columns": [
|
|
"priority",
|
|
"name",
|
|
"sourceAddress",
|
|
"sourcePort",
|
|
"destinationAddress",
|
|
"destinationPort",
|
|
"applicationProtocol",
|
|
"message",
|
|
"categoryBehavior",
|
|
"categoryOutcome",
|
|
"deviceAddress",
|
|
"deviceProduct",
|
|
"deviceVendor",
|
|
"categoryDeviceGroup",
|
|
"categoryDeviceType"
|
|
],
|
|
"sort": [
|
|
"deviceReceiptTime",
|
|
"desc"
|
|
],
|
|
"version": 1,
|
|
"kibanaSavedObjectMeta": {
|
|
"searchSourceJSON": "{\"index\":\"arcsight-*\",\"highlightAll\":true,\"version\":true,\"query\":{\"query_string\":{\"query\":\"categoryDeviceGroup:\\\"/Firewall\\\" OR categoryDeviceGroup:\\\"/IDS/Network\\\" OR categoryDeviceGroup:\\\"/VPN\\\"\",\"analyze_wildcard\":true}},\"filter\":[]}"
|
|
}
|
|
}
|