{ "definition": { "data_sources": { "ds_2DiADaNB": { "name": "Line_Search", "options": { "query": "index=_internal sourcetype=splunkd*\n| eval traffic_source=case(sourcetype == \"splunkd\", \"Web\", 1=1, \"Mobile\")\n| fields _time, traffic_source\n| timechart span=1h count by traffic_source", "query_parameters": { "earliest": "-24h@h", "latest": "now" } }, "type": "ds.search" }, "ds_2wMyo1qJ": { "name": "SV_service_restored", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"serviceRestored\"\n| dedup id\n| timechart count", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_5AuAKP9E_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn": { "name": "Response_Time_Mobile", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"preventOrFixIssue\" severity=\"high\"\n| timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_99HAOm7m": { "name": "Bar_Search", "options": { "query": "| makeresults count=33 \n| eval loc=\"N California\" \n| eval type=\"DNS\"\n| append \n [ makeresults count=44\n | eval loc=\"N California\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=55\n | eval loc=\"N California\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=66\n | eval loc=\"N California\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=33\n | eval loc=\"N California\" \n | eval type=\"Wait\" ]\n | append \n [ makeresults count=44\n | eval loc=\"London\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=55\n | eval loc=\"London\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=66\n | eval loc=\"London\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=77\n | eval loc=\"London\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=33\n | eval loc=\"London\" \n | eval type=\"Wait\" ]\n| append \n [ makeresults count=55\n | eval loc=\"Paris\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=66\n | eval loc=\"Paris\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=77\n | eval loc=\"Paris\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=88\n | eval loc=\"Paris\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=44\n | eval loc=\"Paris\" \n | eval type=\"Wait\" ]\n| append \n [ makeresults count=58\n | eval loc=\"Amsterdam\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=69\n | eval loc=\"Amsterdam\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=79\n | eval loc=\"Amsterdam\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=89\n | eval loc=\"Amsterdam\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=55\n | eval loc=\"Amsterdam\" \n | eval type=\"Wait\" ]\n\n| append \n [ makeresults count=63\n | eval loc=\"Frankfurt\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=74\n | eval loc=\"Frankfurt\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=85\n | eval loc=\"Frankfurt\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=92\n | eval loc=\"Frankfurt\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=61\n | eval loc=\"Frankfurt\" \n | eval type=\"Wait\" ]\n\n| append \n [ makeresults count=66\n | eval loc=\"N Virginia\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=77\n | eval loc=\"N Virginia\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=99\n | eval loc=\"N Virginia\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=105\n | eval loc=\"N Virginia\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=66\n | eval loc=\"N Virginia\" \n | eval type=\"Wait\" ]\n\n| chart count by loc, type\n| eval sort_field=case(loc==\"N California\",1, loc==\"London\",2, loc==\"Paris\",3, loc==\"Amsterdam\",4, loc==\"Frankfurt\",5, loc==\"N Virginia\",6)\n| sort sort_field\n| table loc, DNS, TCP, TLS, \"First Byte\", Wait" }, "type": "ds.search" }, "ds_ELVENlxx_ds_J2P5KSLW_ds_tvPouRYn": { "name": "SV_stay_informed_normal", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"stayInformed\" severity=\"normal\"\n| timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_InXpR08G_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn": { "name": "SV_stay_informed_high", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"stayInformed\" severity=\"high\"\n| timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_J2P5KSLW_ds_tvPouRYn": { "name": "Latency_Web", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"planForChange\" severity=\"normal\"\n| timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_JBftuSzG": { "name": "Column_Search", "options": { "query": "| makeresults count=50\n| eval app=\"Web Server\"\n| eval type=\"User\"\n| append \n [ makeresults count=28\n | eval app=\"Web Server\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=22\n | eval app=\"Web Server\"\n | eval type=\"Idle\"\n ]\n| append\n [makeresults count=22\n | eval app=\"Network\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=48\n | eval app=\"Network\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=30\n | eval app=\"Network\"\n | eval type=\"Idle\"\n ]\n| append\n [makeresults count=65\n | eval app=\"Load Balancer\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=17\n | eval app=\"Load Balancer\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=18\n | eval app=\"Load Balancer\"\n | eval type=\"Idle\"\n ]\n| append\n [makeresults count=50\n | eval app=\"Storage\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=27\n | eval app=\"Storage\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=23\n | eval app=\"Storage\"\n | eval type=\"Idle\"\n ]\n| append\n [makeresults count=18\n | eval app=\"Database\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=60\n | eval app=\"Database\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=22\n | eval app=\"Database\"\n | eval type=\"Idle\"\n ]\n\n| append\n [makeresults count=50\n | eval app=\"Security\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=12\n | eval app=\"Security\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=38\n | eval app=\"Security\"\n | eval type=\"Idle\"\n ]\n\n| append\n [makeresults count=45\n | eval app=\"Auth Server\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=32\n | eval app=\"Auth Server\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=23\n | eval app=\"Auth Server\"\n | eval type=\"Idle\"\n ]\n\n| append\n [makeresults count=50\n | eval app=\"CDN\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=28\n | eval app=\"CDN\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=22\n | eval app=\"CDN\"\n | eval type=\"Idle\"\n ]\n\n| chart count by app, type\n| eval sort_field=case(app==\"Login\",1,app==\"Search\",2,app==\"Cart\",3,app==\"Pricing\",4,app==\"Checkout\",5,app==\"Order Management\",6,app==\"Gifting\",7,app==\"Chat\",8)\n| sort sort_field\n| table app, User, System, Idle" }, "type": "ds.search" }, "ds_JVWQT708_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn": { "name": "Copy of Latency_Mobile", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"planForChange\" severity=\"high\" | timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_KoudToLK_ds_ELVENlxx_ds_J2P5KSLW_ds_tvPouRYn": { "name": "Copy of SV_stay_informed_normal", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"stayInformed\" severity=\"normal\" | timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_PRY5NCDl": { "name": "Pie_Search", "options": { "query": "| makeresults count=92\n| eval status=\"Payment Successful\"\n| append \n [ makeresults count=5\n | eval status=\"Payment Declined\" ]\n| append \n [ makeresults count=3 \n | eval status=\"Payment Error\" ]\n| stats count by status \n| sort - count ", "query_parameters": { "earliest": "-24h@h", "latest": "now" } }, "type": "ds.search" }, "ds_WSUkjY7M": { "name": "Search_4xx", "options": { "query": "index=_internal sourcetype=splunkd_ui_access\n| timechart span=1m count by sourcetype ", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_WgTcAqsK": { "name": "Marker_Search", "options": { "query": "| makeresults count=89\n| eval status=\"Successful\"\n| append \n [ makeresults count=9\n | eval status=\"Password Reset\" ]\n| append \n [ makeresults count=2 \n | eval status=\"Invalid Password\" ]\n| stats count by status \n| sort - count\n| head 1\n| table count", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_choro_1": { "name": "Choro_1", "options": { "query": "| makeresults \n| eval Progress=\"level1\"| eval count=1000\n| append [| makeresults | eval Progress=\"level2\"| eval count=10]\n| append [| makeresults | eval Progress=\"level3\"| eval count=10]\n| append [| makeresults | eval Progress=\"level4\"| eval count=10]\n| append [| makeresults | eval Progress=\"level5\"| eval count=10]\n| append [| makeresults | eval Progress=\"level6\"| eval count=10]\n| append [| makeresults | eval Progress=\"level7\"| eval count=10]\n| append [| makeresults | eval Progress=\"level8\"| eval count=10]\n| append [| makeresults | eval Progress=\"level9\"| eval count=10]\n|table Progress,count", "query_parameters": { "earliest": "-15m", "latest": "now" } }, "type": "ds.search" }, "ds_choro_3": { "name": "Choro_3", "options": { "query": "| makeresults \n| eval Progress=\"level1\"| eval count=10\n| append [| makeresults | eval Progress=\"level2\"| eval count=10]\n| append [| makeresults | eval Progress=\"level3\"| eval count=1000]\n| append [| makeresults | eval Progress=\"level4\"| eval count=10]\n| append [| makeresults | eval Progress=\"level5\"| eval count=10]\n| append [| makeresults | eval Progress=\"level6\"| eval count=10]\n| append [| makeresults | eval Progress=\"level7\"| eval count=10]\n| append [| makeresults | eval Progress=\"level8\"| eval count=10]\n| append [| makeresults | eval Progress=\"level9\"| eval count=10]\n|table Progress,count", "query_parameters": { "earliest": "-15m", "latest": "now" } }, "type": "ds.search" }, "ds_choro_5": { "name": "Choro_5", "options": { "query": "| makeresults \n| eval Progress=\"level1\"| eval count=10\n| append [| makeresults | eval Progress=\"level2\"| eval count=10]\n| append [| makeresults | eval Progress=\"level3\"| eval count=10]\n| append [| makeresults | eval Progress=\"level4\"| eval count=10]\n| append [| makeresults | eval Progress=\"level5\"| eval count=1000]\n| append [| makeresults | eval Progress=\"level6\"| eval count=10]\n| append [| makeresults | eval Progress=\"level7\"| eval count=10]\n| append [| makeresults | eval Progress=\"level8\"| eval count=10]\n| append [| makeresults | eval Progress=\"level9\"| eval count=10]\n|table Progress,count", "query_parameters": { "earliest": "-15m", "latest": "now" } }, "type": "ds.search" }, "ds_choro_6": { "name": "Choro_6", "options": { "query": "| makeresults \n| eval Progress=\"level1\"| eval count=10\n| append [| makeresults | eval Progress=\"level2\"| eval count=10]\n| append [| makeresults | eval Progress=\"level3\"| eval count=10]\n| append [| makeresults | eval Progress=\"level4\"| eval count=10]\n| append [| makeresults | eval Progress=\"level5\"| eval count=10]\n| append [| makeresults | eval Progress=\"level6\"| eval count=1000]\n| append [| makeresults | eval Progress=\"level7\"| eval count=10]\n| append [| makeresults | eval Progress=\"level8\"| eval count=10]\n| append [| makeresults | eval Progress=\"level9\"| eval count=10]\n|table Progress,count", "query_parameters": { "earliest": "-15m", "latest": "now" } }, "type": "ds.search" }, "ds_dro25eRJ_ds_tvPouRYn": { "name": "Copy of SV_service_interruption", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"serviceInterruption\" | dedup id | timechart count", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_feature_input": { "name": "Search for Feature Input", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" service=\"$service_tok$\" classification=incident feature!=null | table feature | dedup feature | sort feature", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_ftH4Qh7z_ds_J2P5KSLW_ds_tvPouRYn": { "name": "Response_Time_Web", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"preventOrFixIssue\" severity=\"normal\"\n| timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_k372VS48": { "name": "SV_investigating", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"investigating\"\n| dedup id\n| timechart count", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_msg_input": { "name": "Search for Msg ID Input", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" service=\"$service_tok$\" feature=\"$feature_tok$\" | table id | append [| search `m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" services{}=\"$service_tok$\" | table id ] | dedup id | sort id", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_nDBGs17C": { "name": "Pie_Percent", "options": { "query": "| makeresults count=92\n| eval status=\"Payment Successful\"\n| append \n [ makeresults count=5\n | eval status=\"Payment Declined\" ]\n| append \n [ makeresults count=3 \n | eval status=\"Payment Error\" ]\n| stats count by status \n| sort - count\n| head 1\n| table count", "query_parameters": { "earliest": "-24h@h", "latest": "now" } }, "type": "ds.search" }, "ds_o152aLBA_ds_statuspunchcard": { "name": "msg_punchcard", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" services{}=\"$service_tok$\" id=$msg_id_tok$\n| rename id as ID, services{} as Service, severity as Severity, category as Category\n| stats dc(ID) as Count by Category Service Severity\n| table Category Service Count Severity\n| mvexpand Service", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_qJw2uz3R_ds_ftH4Qh7z_ds_J2P5KSLW_ds_tvPouRYn": { "name": "Copy of Response_Time_Web", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"preventOrFixIssue\" severity=\"normal\" | timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_s8pGbY3R_ds_J2P5KSLW_ds_tvPouRYn": { "name": "Copy of Latency_Web", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"planForChange\" severity=\"normal\" | timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_service_input": { "name": "Search for Service Input", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident service!=null | table service | append [| search `m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" services{}!=null | table services{} | mvexpand services{} | rename services{} as service] | dedup service | sort service", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_statuspunchcard": { "name": "statuspunchcard", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident service=\"$service_tok$\" feature=\"$feature_tok$\" id=$msg_id_tok$\n| eval category=status\n| stats dc(id) as Count latest(status) as Status by category id\n| table Status id Count category\n| eval sort_field= case(Status==\"investigating\",1, Status==\"serviceDegradation\",2, Status==\"serviceInterruption\",3, Status==\"restoringService\",4, Status==\"extendedRecovery\",5, Status==\"investigationSuspended\",6,Status==\"serviceRestored\",7, Status==\"falsePositive\",8, Status==\"postIncidentReviewPublished\",9) \n| sort sort_field\n| fields - sort_field", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_tSKAQxKZ": { "name": "SV_service_degradation", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"serviceDegradation\"\n| dedup id\n| timechart count", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_tvPouRYn": { "name": "SV_service_interruption", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"serviceInterruption\"\n| dedup id\n| timechart count", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_tyBN57HP_ds_WSUkjY7M": { "name": "Incident Messages Table", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident service=\"$service_tok$\" feature=\"$feature_tok$\" id=$msg_id_tok$\n| rename id as ID, service as Service,feature as Feature, status as Status, title as Title, lastModifiedDateTime as LastUpdatedTime\n| table ID, Service, Feature, Status, Title,LastUpdatedTime\n| eval LastUpdatedTime = strptime(LastUpdatedTime,\"%Y-%m-%dT%H:%M:%S.%N\")\n| sort -LastUpdatedTime\n| eval \"Last Updated\"=strftime(LastUpdatedTime,\"%Y-%m-%d %H:%M:%S\")\n| fields - LastUpdatedTime", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_vpzSyE0x_ds_tyBN57HP_ds_WSUkjY7M": { "name": "Copy of Incident Messages Table", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" services{}=\"$service_tok$\" id=$msg_id_tok$\n| rename id as ID, services{} as \"Affected Service\",category as Category, severity as Severity, title as Title, lastModifiedDateTime as LastUpdatedTime\n| table ID, \"Affected Service\", Category, Severity, Title,LastUpdatedTime\n| eval LastUpdatedTime = strptime(LastUpdatedTime,\"%Y-%m-%dT%H:%M:%S.%N\")\n| sort -LastUpdatedTime\n| eval \"Last Updated\"=strftime(LastUpdatedTime,\"%Y-%m-%d %H:%M:%S\")\n| fields - LastUpdatedTime", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn": { "name": "Latency_Mobile", "options": { "query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"planForChange\" severity=\"high\"\n| timechart dc(id)", "query_parameters": { "earliest": "$tr.earliest$", "latest": "$tr.latest$" } }, "type": "ds.search" }, "ds_x7TMe4Gn": { "meta": { "kpi_id": "SHKPI-da-itsi-cp-m365-m365", "service_id": "da-itsi-cp-m365-m365" }, "name": "O365 - ServiceHealthScore", "options": { "query": "`get_full_itsi_summary_kpi(SHKPI-da-itsi-cp-m365-m365)` `service_level_kpi_only` | timechart cont=false latest(alert_value) AS alert_value, latest(alert_color) AS alert_color" }, "type": "ds.search" } }, "defaults": {}, "description": "", "inputs": { "input_O10HSt2J": { "data_sources": { "primary": "ds_msg_input" }, "options": { "defaultValue": "*", "items": [ { "label": "All", "value": "*" } ], "token": "msg_id_tok" }, "title": "Message ID", "type": "input.multiselect" }, "input_lOweLYs2": { "data_sources": { "primary": "ds_service_input" }, "options": { "defaultValue": "*", "items": [ { "label": "All", "value": "*" } ], "token": "service_tok" }, "title": "Service", "type": "input.dropdown" }, "input_time_picker": { "data_sources": {}, "options": { "defaultValue": "-7d@d,now", "token": "tr" }, "title": "Time Picker", "type": "input.timerange" }, "input_xOperOEu": { "data_sources": { "primary": "ds_feature_input" }, "options": { "defaultValue": "*", "items": [ { "label": "All", "value": "*" } ], "token": "feature_tok" }, "title": "Feature", "type": "input.dropdown" } }, "layout": { "global_inputs": [ "input_lOweLYs2", "input_xOperOEu", "input_O10HSt2J", "input_time_picker" ], "options": { "background_image": { "size_type": "contain", "src": "splunk-enterprise-kvstore://da-itsi-cp-m365-o365-background", "x": 0.0, "y": 0.0 }, "display": "auto-scale", "height": 1180.0, "show_title_and_description": true, "width": 1920.0 }, "structure": [ { "item": "viz_yJS5G8rZ", "position": { "h": 57, "w": 70, "x": 0, "y": 0 }, "type": "block" }, { "item": "viz_ydtjTtwP", "position": { "h": 1010, "w": 930, "x": 970, "y": 60 }, "type": "block" }, { "item": "viz_aAecc179", "position": { "h": 150, "w": 910, "x": 980, "y": 100 }, "type": "block" }, { "item": "viz_uur3gtSz", "position": { "h": 1010, "w": 930, "x": 20, "y": 60 }, "type": "block" }, { "item": "viz_5ElpaLAL", "position": { "h": 150, "w": 910, "x": 30, "y": 100 }, "type": "block" }, { "item": "viz_pTvJxo6E", "position": { "h": 130, "w": 204, "x": 720, "y": 110 }, "type": "block" }, { "item": "viz_GYnF6RF9", "position": { "h": 130, "w": 204, "x": 490, "y": 110 }, "type": "block" }, { "item": "viz_95LHKyfb", "position": { "h": 130, "w": 204, "x": 270, "y": 110 }, "type": "block" }, { "item": "viz_HaZdi9sU", "position": { "h": 60, "w": 380, "x": 80, "y": 10 }, "type": "block" }, { "item": "viz_KdMxDtXA", "position": { "h": 50, "w": 340, "x": 40, "y": 70 }, "type": "block" }, { "item": "viz_GjqBuOkG", "position": { "h": 100, "w": 202, "x": 490, "y": 110 }, "type": "block" }, { "item": "viz_lVJDTStf", "position": { "h": 100, "w": 202, "x": 270, "y": 110 }, "type": "block" }, { "item": "viz_DUn1cXDP", "position": { "h": 100, "w": 202, "x": 720, "y": 110 }, "type": "block" }, { "item": "viz_fHGgjN0V", "position": { "h": 370, "w": 930, "x": 20, "y": 690 }, "type": "block" }, { "item": "viz_icjGDjsp", "position": { "h": 50, "w": 340, "x": 1000, "y": 70 }, "type": "block" }, { "item": "viz_kfTINaOJ", "position": { "h": 130, "w": 250, "x": 1000, "y": 110 }, "type": "block" }, { "item": "viz_pvR2fxkh", "position": { "h": 130, "w": 250, "x": 1310, "y": 110 }, "type": "block" }, { "item": "viz_mlaivysH", "position": { "h": 40, "w": 130, "x": 1010, "y": 110 }, "type": "block" }, { "item": "viz_VpKZMmIq", "position": { "h": 40, "w": 60, "x": 1000, "y": 190 }, "type": "block" }, { "item": "viz_dFFqTkl4", "position": { "h": 130, "w": 204, "x": 40, "y": 110 }, "type": "block" }, { "item": "viz_QtosIFd1", "position": { "h": 100, "w": 202, "x": 40, "y": 110 }, "type": "block" }, { "item": "viz_yIFxJuIx", "position": { "h": 75, "w": 200, "x": 40, "y": 170 }, "type": "block" }, { "item": "viz_vJ5pjtwJ", "position": { "h": 75, "w": 200, "x": 270, "y": 170 }, "type": "block" }, { "item": "viz_6KuCBfPR", "position": { "h": 75, "w": 200, "x": 490, "y": 170 }, "type": "block" }, { "item": "viz_zrZVXpEO", "position": { "h": 60, "w": 140, "x": 1120, "y": 140 }, "type": "block" }, { "item": "viz_ehMYFIQW", "position": { "h": 50, "w": 70, "x": 1050, "y": 140 }, "type": "block" }, { "item": "viz_pY5TGucV", "position": { "h": 50, "w": 70, "x": 1050, "y": 190 }, "type": "block" }, { "item": "viz_KwP3JPjp", "position": { "h": 60, "w": 140, "x": 1120, "y": 190 }, "type": "block" }, { "item": "viz_HnipizXa", "position": { "h": 50, "w": 70, "x": 1370, "y": 140 }, "type": "block" }, { "item": "viz_Dux7SQTo", "position": { "h": 60, "w": 140, "x": 1430, "y": 140 }, "type": "block" }, { "item": "viz_XlkFJ5WW", "position": { "h": 60, "w": 140, "x": 1430, "y": 190 }, "type": "block" }, { "item": "viz_3Q8gRGmK", "position": { "h": 50, "w": 70, "x": 1370, "y": 190 }, "type": "block" }, { "item": "viz_CmoOAb3L", "position": { "h": 40, "w": 170, "x": 1320, "y": 110 }, "type": "block" }, { "item": "viz_Ajz8S9Ft", "position": { "h": 40, "w": 60, "x": 1310, "y": 140 }, "type": "block" }, { "item": "viz_xzAwv4N5", "position": { "h": 40, "w": 60, "x": 1310, "y": 190 }, "type": "block" }, { "item": "viz_mZRGSHz4", "position": { "h": 420, "w": 930, "x": 20, "y": 260 }, "type": "block" }, { "item": "viz_2Tx7FFwd", "position": { "h": 380, "w": 930, "x": 970, "y": 690 }, "type": "block" }, { "item": "viz_SbFoZPhU", "position": { "h": 420, "w": 920, "x": 980, "y": 260 }, "type": "block" }, { "item": "viz_gUHUWgGf", "position": { "h": 75, "w": 200, "x": 720, "y": 170 }, "type": "block" }, { "item": "viz_ojm8BDTL", "position": { "h": 130, "w": 250, "x": 1620, "y": 110 }, "type": "block" }, { "item": "viz_htwOxVCo", "position": { "h": 40, "w": 60, "x": 1620, "y": 140 }, "type": "block" }, { "item": "viz_UxJhZQcz", "position": { "h": 40, "w": 60, "x": 1620, "y": 190 }, "type": "block" }, { "item": "viz_8X6SHZos", "position": { "h": 50, "w": 70, "x": 1680, "y": 140 }, "type": "block" }, { "item": "viz_HJaahfgC", "position": { "h": 50, "w": 70, "x": 1680, "y": 190 }, "type": "block" }, { "item": "viz_2vJOun7f", "position": { "h": 40, "w": 60, "x": 1000, "y": 140 }, "type": "block" }, { "item": "viz_TqIJwVmD", "position": { "h": 60, "w": 140, "x": 1740, "y": 140 }, "type": "block" }, { "item": "viz_Y7Xwzp9H", "position": { "h": 60, "w": 140, "x": 1740, "y": 190 }, "type": "block" }, { "item": "viz_be1Vks0h", "position": { "h": 40, "w": 170, "x": 1630, "y": 110 }, "type": "block" }, { "item": "viz_ksHIMR0B", "position": { "h": 100, "w": 120, "x": -30, "y": -20 }, "type": "block" }, { "item": "viz_DHnOPgTm", "position": { "h": 70, "w": 70, "x": 0, "y": -10 }, "type": "block" }, { "item": "viz_7tpN1LRt", "position": { "h": 40, "w": 280, "x": 1640, "y": 0 }, "type": "block" } ], "type": "absolute" }, "title": "M365 Incident and Message Dashboard", "visualizations": { "viz_2Tx7FFwd": { "data_sources": { "primary": "ds_vpzSyE0x_ds_tyBN57HP_ds_WSUkjY7M" }, "options": { "background_color": "transparent", "count": 8.0 }, "title": "Most Recent Messages", "type": "splunk.table" }, "viz_2vJOun7f": { "options": { "customFontSize": 12.0, "font_color": "#f8be34", "font_size": "custom", "markdown": "**Normal**" }, "type": "splunk.markdown" }, "viz_3Q8gRGmK": { "data_sources": { "primary": "ds_5AuAKP9E_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "background_color": "transparent", "spark_line_display": "off", "trend_display": "off", "unit": "ms" }, "type": "splunk.singlevalue" }, "viz_5ElpaLAL": { "options": { "fill_color": "#294e70" }, "type": "splunk.rectangle" }, "viz_6KuCBfPR": { "data_sources": { "primary": "ds_tvPouRYn" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" }, "viz_7tpN1LRt": { "event_handlers": [ { "options": { "newTab": true, "url": "/app/itsi/glass_table?savedGlassTableId=da-itsi-cp-m365-m365-executive-overview&action=view" }, "type": "drilldown.customUrl" } ], "options": { "preserve_aspect_ratio": true, "src": "splunk-enterprise-kvstore://da-itsi-cp-m365-microsoft-365" }, "type": "splunk.image" }, "viz_8X6SHZos": { "data_sources": { "primary": "ds_ELVENlxx_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "background_color": "#4fa484", "spark_line_display": "off" }, "type": "splunk.singlevalue" }, "viz_95LHKyfb": { "options": { "fill_color": "#f1813f", "stroke_color": "transparent" }, "type": "splunk.rectangle" }, "viz_Ajz8S9Ft": { "options": { "customFontSize": 12.0, "font_color": "#f8be34", "font_size": "custom", "markdown": "**Normal**" }, "type": "splunk.markdown" }, "viz_CmoOAb3L": { "options": { "customFontSize": 14.0, "font_color": "#171d21", "font_size": "custom", "markdown": "**Prevent or Fix Issues**" }, "type": "splunk.markdown" }, "viz_DHnOPgTm": { "event_handlers": [ { "options": { "newTab": true, "url": "/app/itsi/homeview?view=standard&viewType=service_topology&earliest=-24h%40h&latest=now&serviceId=da-itsi-cp-m365-m365" }, "type": "drilldown.customUrl" } ], "options": { "fill_color": "transparent" }, "type": "splunk.rectangle" }, "viz_DUn1cXDP": { "data_sources": { "primary": "ds_2wMyo1qJ" }, "options": { "background_color": "#53a051", "spark_line_display": "off" }, "title": "Service restored", "type": "splunk.singlevalue" }, "viz_Dux7SQTo": { "data_sources": { "primary": "ds_ftH4Qh7z_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" }, "viz_GYnF6RF9": { "options": { "fill_color": "#dc4e41", "stroke_color": "transparent" }, "type": "splunk.rectangle" }, "viz_GjqBuOkG": { "data_sources": { "primary": "ds_tvPouRYn" }, "options": { "background_color": "#dc4e41", "spark_line_display": "off" }, "title": "Service interruption", "type": "splunk.singlevalue" }, "viz_HJaahfgC": { "data_sources": { "primary": "ds_InXpR08G_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "background_color": "#4fa484", "spark_line_display": "off" }, "type": "splunk.singlevalue" }, "viz_HaZdi9sU": { "options": { "customFontSize": 24.0, "font_color": "#ffffff", "font_size": "custom", "markdown": "**Service Incidents and Messages**" }, "type": "splunk.markdown" }, "viz_HnipizXa": { "data_sources": { "primary": "ds_ftH4Qh7z_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "background_color": "#62b3b2", "spark_line_display": "off" }, "type": "splunk.singlevalue" }, "viz_KdMxDtXA": { "options": { "customFontSize": 14.0, "font_color": "#171d21", "font_size": "custom", "markdown": "**Service Incidents**" }, "type": "splunk.markdown" }, "viz_KwP3JPjp": { "data_sources": { "primary": "ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" }, "viz_QtosIFd1": { "data_sources": { "primary": "ds_k372VS48" }, "options": { "background_color": "#F8BE34", "spark_line_display": "off" }, "title": "Investigating", "type": "splunk.singlevalue" }, "viz_SbFoZPhU": { "data_sources": { "primary": "ds_o152aLBA_ds_statuspunchcard" }, "options": { "background_color": "#ffffff", "bubbleLabelDisplay": "off", "color_mode": "categorical", "series_colors": [ "#F8BE34", "#DC4E41", "#FF4800", "#ADD63C", "#4FA484", "#62B3B2", "#53A051", "#708794", "#5A4575" ], "show_max_value_pulsation": false }, "title": "Messages by Service", "type": "splunk.punchcard" }, "viz_TqIJwVmD": { "data_sources": { "primary": "ds_ELVENlxx_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" }, "viz_UxJhZQcz": { "options": { "customFontSize": 12.0, "font_color": "#dc4e41", "font_size": "custom", "markdown": "**High**" }, "type": "splunk.markdown" }, "viz_VpKZMmIq": { "options": { "customFontSize": 12.0, "font_color": "#dc4e41", "font_size": "custom", "markdown": "**High**" }, "type": "splunk.markdown" }, "viz_XlkFJ5WW": { "data_sources": { "primary": "ds_5AuAKP9E_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" }, "viz_Y7Xwzp9H": { "data_sources": { "primary": "ds_InXpR08G_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" }, "viz_aAecc179": { "options": { "fill_color": "#294e70" }, "type": "splunk.rectangle" }, "viz_be1Vks0h": { "options": { "customFontSize": 14.0, "font_color": "#171d21", "font_size": "custom", "markdown": "**Stay Informed**" }, "type": "splunk.markdown" }, "viz_dFFqTkl4": { "options": { "fill_color": "#F8BE34", "stroke_color": "transparent" }, "type": "splunk.rectangle" }, "viz_ehMYFIQW": { "data_sources": { "primary": "ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "background_color": "#0877a6", "spark_line_display": "off" }, "type": "splunk.singlevalue" }, "viz_fHGgjN0V": { "data_sources": { "primary": "ds_tyBN57HP_ds_WSUkjY7M" }, "options": { "background_color": "transparent", "count": 8.0 }, "title": "Most Recent Incident", "type": "splunk.table" }, "viz_gUHUWgGf": { "data_sources": { "primary": "ds_2wMyo1qJ" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" }, "viz_htwOxVCo": { "options": { "customFontSize": 12.0, "font_color": "#f8be34", "font_size": "custom", "markdown": "**Normal**" }, "type": "splunk.markdown" }, "viz_icjGDjsp": { "options": { "customFontSize": 14.0, "font_color": "#171d21", "font_size": "custom", "markdown": "**Messages**" }, "type": "splunk.markdown" }, "viz_kfTINaOJ": { "options": { "fill_color": "#0877a6", "stroke_color": "transparent" }, "type": "splunk.rectangle" }, "viz_ksHIMR0B": { "options": { "preserve_aspect_ratio": true, "src": "splunk-enterprise-kvstore://da-itsi-cp-m365-office-256x256" }, "type": "splunk.image" }, "viz_lVJDTStf": { "data_sources": { "primary": "ds_tSKAQxKZ" }, "options": { "background_color": "#f1813f", "spark_line_display": "off" }, "title": "Service degradation", "type": "splunk.singlevalue" }, "viz_mZRGSHz4": { "data_sources": { "primary": "ds_statuspunchcard" }, "options": { "background_color": "#ffffff", "bubbleLabelDisplay": "off", "color_mode": "categorical", "series_colors": [ "#F8BE34", "#DC4E41", "#FF4800", "#ADD63C", "#4FA484", "#62B3B2", "#53A051", "#708794", "#5A4575" ], "show_max_value_pulsation": false }, "title": "Status Progress by ID", "type": "splunk.punchcard" }, "viz_mlaivysH": { "options": { "customFontSize": 14.0, "font_color": "#171d21", "font_size": "custom", "markdown": "**Plan for Change**" }, "type": "splunk.markdown" }, "viz_ojm8BDTL": { "options": { "fill_color": "#4fa484", "stroke_color": "transparent" }, "type": "splunk.rectangle" }, "viz_pTvJxo6E": { "options": { "fill_color": "#53a051", "stroke_color": "transparent" }, "type": "splunk.rectangle" }, "viz_pY5TGucV": { "data_sources": { "primary": "ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "background_color": "#0877a6", "spark_line_display": "off" }, "type": "splunk.singlevalue" }, "viz_pvR2fxkh": { "options": { "fill_color": "#62b3b2", "stroke_color": "transparent" }, "type": "splunk.rectangle" }, "viz_uur3gtSz": { "options": { "fill_color": "#ffffff", "stroke_color": "transparent" }, "type": "splunk.rectangle" }, "viz_vJ5pjtwJ": { "data_sources": { "primary": "ds_tSKAQxKZ" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" }, "viz_xzAwv4N5": { "options": { "customFontSize": 12.0, "font_color": "#dc4e41", "font_size": "custom", "markdown": "**High**" }, "type": "splunk.markdown" }, "viz_yIFxJuIx": { "data_sources": { "primary": "ds_k372VS48" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" }, "viz_yJS5G8rZ": { "data_sources": { "primary": "ds_x7TMe4Gn" }, "options": { "fill_color": "> primary | seriesByName(\"alert_color\") | lastPoint()" }, "type": "splunk.rectangle" }, "viz_ydtjTtwP": { "options": { "fill_color": "#ffffff", "stroke_color": "transparent" }, "type": "splunk.rectangle" }, "viz_zrZVXpEO": { "data_sources": { "primary": "ds_J2P5KSLW_ds_tvPouRYn" }, "options": { "area_fill_opacity": 0.0, "axis_labelsx_major_label_visibility": "hide", "axis_labelsy_major_label_visibility": "hide", "axis_titlex_visibility": "collapsed", "axis_titley_visibility": "collapsed", "background_color": "transparent", "font_color": "#cccccc", "foreground_color": "#cccccc", "grid_linesx_show_major_lines": false, "grid_linesy_show_major_lines": false, "legendDisplay": "off", "series_colors": [ "#FFFFFF" ], "x": "> primary | seriesByName(\"_time\")", "y": "> primary | seriesByName(\"alert_value\")" }, "type": "splunk.area" } } }, "description": "", "gt_version": "beta", "key": "da-itsi-cp-m365-m365-incident-and-message-dashboard", "latest": "now", "latest_label": "Now", "selected_swap_service_id": null, "swap_service_ids": [], "template_selected_service_id": null, "template_swappable_service_ids": [], "title": "M365 Incident and Message Dashboard", "version": "0.0.38" }