mirror of
https://github.com/elastic/logstash.git
synced 2025-04-19 04:15:23 -04:00
27 lines
706 B
JSON
27 lines
706 B
JSON
{
|
|
"title": "Endpoint - OS Events [ArcSight]",
|
|
"description": "",
|
|
"hits": 0,
|
|
"columns": [
|
|
"deviceVendor",
|
|
"deviceProduct",
|
|
"name",
|
|
"deviceEventClassId",
|
|
"deviceEventCategory",
|
|
"sourceUserName",
|
|
"destinationUserName",
|
|
"destinationHostName",
|
|
"categoryBehavior",
|
|
"categoryOutcome",
|
|
"sourceNtDomain",
|
|
"destinationNTDomain"
|
|
],
|
|
"sort": [
|
|
"deviceReceiptTime",
|
|
"desc"
|
|
],
|
|
"version": 1,
|
|
"kibanaSavedObjectMeta": {
|
|
"searchSourceJSON": "{\"index\":\"arcsight-*\",\"highlightAll\":true,\"version\":true,\"filter\":[],\"query\":{\"query_string\":{\"query\":\"categoryDeviceGroup:\\\"/Operating System\\\"\",\"analyze_wildcard\":true}}}"
|
|
}
|
|
}
|