You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

95 lines
3.7 KiB

<form script="common_insights.js" version="1.1">
<label>Elastic IP Insights - AWS</label>
<fieldset submitButton="false">
<input type="multiselect" token="accountId" id="ip1" searchWhenChanged="true">
<label>Account ID</label>
<choice value="*">All</choice>
<fieldForLabel>title</fieldForLabel>
<fieldForValue>account_id</fieldForValue>
<search>
<query>
<![CDATA[
| aclinputlookup all_account_ids
| mvcombine delim=", " name
| nomv name
| eval title=account_id." (".name.")"
]]>
</query>
</search>
<prefix> (</prefix>
<suffix>) </suffix>
<valuePrefix>aws_account_id="</valuePrefix>
<valueSuffix>"</valueSuffix>
<delimiter> OR </delimiter>
</input>
<input type="multiselect" token="region" id="ip2" searchWhenChanged="true">
<label>Regions</label>
<choice value="*">All</choice>
<fieldForLabel>label</fieldForLabel>
<fieldForValue>region</fieldForValue>
<search>
<query>
<![CDATA[
| inputlookup regions
]]>
</query>
</search>
<valuePrefix>region="</valuePrefix>
<valueSuffix>"</valueSuffix>
<prefix>(</prefix>
<suffix>)</suffix>
<delimiter> OR </delimiter>
</input>
<input type="multiselect" token="insight_filter" id="input1_all" searchWhenChanged="true">
<label>Insights Filter</label>
<choice value="*">All</choice>
<default>All</default>
<fieldForLabel>insight</fieldForLabel>
<fieldForValue>insight</fieldForValue>
<search>
<query>
<![CDATA[
| inputlookup insights | search service="Elastic IP" | sort - severity
]]>
</query>
</search>
<valuePrefix>insight="</valuePrefix>
<valueSuffix>"</valueSuffix>
<prefix> (</prefix>
<suffix>) </suffix>
<delimiter> OR </delimiter>
</input>
</fieldset>
<search id="baseSearch">
<query>
<![CDATA[
`aws-unused-eip($accountId$, $region$)`
]]>
</query>
<earliest>-d</earliest>
<latest>now</latest>
</search>
<row>
<panel>
<table id="results">
<search base="baseSearch">
<query>
<![CDATA[
search $insight_filter$
| eval service="Elastic IP"
| lookup regions region OUTPUT label
| lookup insights insight service OUTPUT severity as Severity
| sort - Severity
| rename account_id as "Account ID", label as Region, public_ip as "Public IP", instance_id as "Attached Instance", state as State, insight as Insight
| eval name=if(isnull(name), "", " (".name.")") , "Attached Instance"=if('Attached Instance'=="null", "N/A", 'Attached Instance'.name)
| table "Account ID", Region, "Public IP", "Attached Instance", Insight, Severity
]]>
</query>
</search>
<option name="drilldown">none</option>
<option name="count">15</option>
</table>
</panel>
</row>
</form>