You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1629 lines
70 KiB
1629 lines
70 KiB
{
|
|
"definition": {
|
|
"data_sources": {
|
|
"ds_2DiADaNB": {
|
|
"name": "Line_Search",
|
|
"options": {
|
|
"query": "index=_internal sourcetype=splunkd*\n| eval traffic_source=case(sourcetype == \"splunkd\", \"Web\", 1=1, \"Mobile\")\n| fields _time, traffic_source\n| timechart span=1h count by traffic_source",
|
|
"query_parameters": {
|
|
"earliest": "-24h@h",
|
|
"latest": "now"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_2wMyo1qJ": {
|
|
"name": "SV_service_restored",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"serviceRestored\"\n| dedup id\n| timechart count",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_5AuAKP9E_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "Response_Time_Mobile",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"preventOrFixIssue\" severity=\"high\"\n| timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_99HAOm7m": {
|
|
"name": "Bar_Search",
|
|
"options": {
|
|
"query": "| makeresults count=33 \n| eval loc=\"N California\" \n| eval type=\"DNS\"\n| append \n [ makeresults count=44\n | eval loc=\"N California\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=55\n | eval loc=\"N California\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=66\n | eval loc=\"N California\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=33\n | eval loc=\"N California\" \n | eval type=\"Wait\" ]\n | append \n [ makeresults count=44\n | eval loc=\"London\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=55\n | eval loc=\"London\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=66\n | eval loc=\"London\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=77\n | eval loc=\"London\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=33\n | eval loc=\"London\" \n | eval type=\"Wait\" ]\n| append \n [ makeresults count=55\n | eval loc=\"Paris\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=66\n | eval loc=\"Paris\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=77\n | eval loc=\"Paris\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=88\n | eval loc=\"Paris\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=44\n | eval loc=\"Paris\" \n | eval type=\"Wait\" ]\n| append \n [ makeresults count=58\n | eval loc=\"Amsterdam\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=69\n | eval loc=\"Amsterdam\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=79\n | eval loc=\"Amsterdam\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=89\n | eval loc=\"Amsterdam\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=55\n | eval loc=\"Amsterdam\" \n | eval type=\"Wait\" ]\n\n| append \n [ makeresults count=63\n | eval loc=\"Frankfurt\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=74\n | eval loc=\"Frankfurt\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=85\n | eval loc=\"Frankfurt\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=92\n | eval loc=\"Frankfurt\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=61\n | eval loc=\"Frankfurt\" \n | eval type=\"Wait\" ]\n\n| append \n [ makeresults count=66\n | eval loc=\"N Virginia\" \n | eval type=\"DNS\" ] \n| append \n [ makeresults count=77\n | eval loc=\"N Virginia\" \n | eval type=\"TCP\" ]\n| append \n [ makeresults count=99\n | eval loc=\"N Virginia\" \n | eval type=\"TLS\" ]\n| append \n [ makeresults count=105\n | eval loc=\"N Virginia\" \n | eval type=\"First Byte\" ]\n| append \n [ makeresults count=66\n | eval loc=\"N Virginia\" \n | eval type=\"Wait\" ]\n\n| chart count by loc, type\n| eval sort_field=case(loc==\"N California\",1, loc==\"London\",2, loc==\"Paris\",3, loc==\"Amsterdam\",4, loc==\"Frankfurt\",5, loc==\"N Virginia\",6)\n| sort sort_field\n| table loc, DNS, TCP, TLS, \"First Byte\", Wait"
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_ELVENlxx_ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "SV_stay_informed_normal",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"stayInformed\" severity=\"normal\"\n| timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_InXpR08G_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "SV_stay_informed_high",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"stayInformed\" severity=\"high\"\n| timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "Latency_Web",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"planForChange\" severity=\"normal\"\n| timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_JBftuSzG": {
|
|
"name": "Column_Search",
|
|
"options": {
|
|
"query": "| makeresults count=50\n| eval app=\"Web Server\"\n| eval type=\"User\"\n| append \n [ makeresults count=28\n | eval app=\"Web Server\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=22\n | eval app=\"Web Server\"\n | eval type=\"Idle\"\n ]\n| append\n [makeresults count=22\n | eval app=\"Network\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=48\n | eval app=\"Network\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=30\n | eval app=\"Network\"\n | eval type=\"Idle\"\n ]\n| append\n [makeresults count=65\n | eval app=\"Load Balancer\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=17\n | eval app=\"Load Balancer\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=18\n | eval app=\"Load Balancer\"\n | eval type=\"Idle\"\n ]\n| append\n [makeresults count=50\n | eval app=\"Storage\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=27\n | eval app=\"Storage\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=23\n | eval app=\"Storage\"\n | eval type=\"Idle\"\n ]\n| append\n [makeresults count=18\n | eval app=\"Database\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=60\n | eval app=\"Database\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=22\n | eval app=\"Database\"\n | eval type=\"Idle\"\n ]\n\n| append\n [makeresults count=50\n | eval app=\"Security\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=12\n | eval app=\"Security\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=38\n | eval app=\"Security\"\n | eval type=\"Idle\"\n ]\n\n| append\n [makeresults count=45\n | eval app=\"Auth Server\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=32\n | eval app=\"Auth Server\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=23\n | eval app=\"Auth Server\"\n | eval type=\"Idle\"\n ]\n\n| append\n [makeresults count=50\n | eval app=\"CDN\"\n | eval type=\"User\"\n ]\n| append \n [ makeresults count=28\n | eval app=\"CDN\"\n | eval type=\"System\"\n ]\n| append \n [ makeresults count=22\n | eval app=\"CDN\"\n | eval type=\"Idle\"\n ]\n\n| chart count by app, type\n| eval sort_field=case(app==\"Login\",1,app==\"Search\",2,app==\"Cart\",3,app==\"Pricing\",4,app==\"Checkout\",5,app==\"Order Management\",6,app==\"Gifting\",7,app==\"Chat\",8)\n| sort sort_field\n| table app, User, System, Idle"
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_JVWQT708_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "Copy of Latency_Mobile",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"planForChange\" severity=\"high\" | timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_KoudToLK_ds_ELVENlxx_ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "Copy of SV_stay_informed_normal",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"stayInformed\" severity=\"normal\" | timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_PRY5NCDl": {
|
|
"name": "Pie_Search",
|
|
"options": {
|
|
"query": "| makeresults count=92\n| eval status=\"Payment Successful\"\n| append \n [ makeresults count=5\n | eval status=\"Payment Declined\" ]\n| append \n [ makeresults count=3 \n | eval status=\"Payment Error\" ]\n| stats count by status \n| sort - count ",
|
|
"query_parameters": {
|
|
"earliest": "-24h@h",
|
|
"latest": "now"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_WSUkjY7M": {
|
|
"name": "Search_4xx",
|
|
"options": {
|
|
"query": "index=_internal sourcetype=splunkd_ui_access\n| timechart span=1m count by sourcetype ",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_WgTcAqsK": {
|
|
"name": "Marker_Search",
|
|
"options": {
|
|
"query": "| makeresults count=89\n| eval status=\"Successful\"\n| append \n [ makeresults count=9\n | eval status=\"Password Reset\" ]\n| append \n [ makeresults count=2 \n | eval status=\"Invalid Password\" ]\n| stats count by status \n| sort - count\n| head 1\n| table count",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_choro_1": {
|
|
"name": "Choro_1",
|
|
"options": {
|
|
"query": "| makeresults \n| eval Progress=\"level1\"| eval count=1000\n| append [| makeresults | eval Progress=\"level2\"| eval count=10]\n| append [| makeresults | eval Progress=\"level3\"| eval count=10]\n| append [| makeresults | eval Progress=\"level4\"| eval count=10]\n| append [| makeresults | eval Progress=\"level5\"| eval count=10]\n| append [| makeresults | eval Progress=\"level6\"| eval count=10]\n| append [| makeresults | eval Progress=\"level7\"| eval count=10]\n| append [| makeresults | eval Progress=\"level8\"| eval count=10]\n| append [| makeresults | eval Progress=\"level9\"| eval count=10]\n|table Progress,count",
|
|
"query_parameters": {
|
|
"earliest": "-15m",
|
|
"latest": "now"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_choro_3": {
|
|
"name": "Choro_3",
|
|
"options": {
|
|
"query": "| makeresults \n| eval Progress=\"level1\"| eval count=10\n| append [| makeresults | eval Progress=\"level2\"| eval count=10]\n| append [| makeresults | eval Progress=\"level3\"| eval count=1000]\n| append [| makeresults | eval Progress=\"level4\"| eval count=10]\n| append [| makeresults | eval Progress=\"level5\"| eval count=10]\n| append [| makeresults | eval Progress=\"level6\"| eval count=10]\n| append [| makeresults | eval Progress=\"level7\"| eval count=10]\n| append [| makeresults | eval Progress=\"level8\"| eval count=10]\n| append [| makeresults | eval Progress=\"level9\"| eval count=10]\n|table Progress,count",
|
|
"query_parameters": {
|
|
"earliest": "-15m",
|
|
"latest": "now"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_choro_5": {
|
|
"name": "Choro_5",
|
|
"options": {
|
|
"query": "| makeresults \n| eval Progress=\"level1\"| eval count=10\n| append [| makeresults | eval Progress=\"level2\"| eval count=10]\n| append [| makeresults | eval Progress=\"level3\"| eval count=10]\n| append [| makeresults | eval Progress=\"level4\"| eval count=10]\n| append [| makeresults | eval Progress=\"level5\"| eval count=1000]\n| append [| makeresults | eval Progress=\"level6\"| eval count=10]\n| append [| makeresults | eval Progress=\"level7\"| eval count=10]\n| append [| makeresults | eval Progress=\"level8\"| eval count=10]\n| append [| makeresults | eval Progress=\"level9\"| eval count=10]\n|table Progress,count",
|
|
"query_parameters": {
|
|
"earliest": "-15m",
|
|
"latest": "now"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_choro_6": {
|
|
"name": "Choro_6",
|
|
"options": {
|
|
"query": "| makeresults \n| eval Progress=\"level1\"| eval count=10\n| append [| makeresults | eval Progress=\"level2\"| eval count=10]\n| append [| makeresults | eval Progress=\"level3\"| eval count=10]\n| append [| makeresults | eval Progress=\"level4\"| eval count=10]\n| append [| makeresults | eval Progress=\"level5\"| eval count=10]\n| append [| makeresults | eval Progress=\"level6\"| eval count=1000]\n| append [| makeresults | eval Progress=\"level7\"| eval count=10]\n| append [| makeresults | eval Progress=\"level8\"| eval count=10]\n| append [| makeresults | eval Progress=\"level9\"| eval count=10]\n|table Progress,count",
|
|
"query_parameters": {
|
|
"earliest": "-15m",
|
|
"latest": "now"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_dro25eRJ_ds_tvPouRYn": {
|
|
"name": "Copy of SV_service_interruption",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"serviceInterruption\" | dedup id | timechart count",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_feature_input": {
|
|
"name": "Search for Feature Input",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" service=\"$service_tok$\" classification=incident feature!=null | table feature | dedup feature | sort feature",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_ftH4Qh7z_ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "Response_Time_Web",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"preventOrFixIssue\" severity=\"normal\"\n| timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_k372VS48": {
|
|
"name": "SV_investigating",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"investigating\"\n| dedup id\n| timechart count",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_msg_input": {
|
|
"name": "Search for Msg ID Input",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" service=\"$service_tok$\" feature=\"$feature_tok$\" | table id | append [| search `m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" services{}=\"$service_tok$\" | table id ] | dedup id | sort id",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_nDBGs17C": {
|
|
"name": "Pie_Percent",
|
|
"options": {
|
|
"query": "| makeresults count=92\n| eval status=\"Payment Successful\"\n| append \n [ makeresults count=5\n | eval status=\"Payment Declined\" ]\n| append \n [ makeresults count=3 \n | eval status=\"Payment Error\" ]\n| stats count by status \n| sort - count\n| head 1\n| table count",
|
|
"query_parameters": {
|
|
"earliest": "-24h@h",
|
|
"latest": "now"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_o152aLBA_ds_statuspunchcard": {
|
|
"name": "msg_punchcard",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" services{}=\"$service_tok$\" id=$msg_id_tok$\n| rename id as ID, services{} as Service, severity as Severity, category as Category\n| stats dc(ID) as Count by Category Service Severity\n| table Category Service Count Severity\n| mvexpand Service",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_qJw2uz3R_ds_ftH4Qh7z_ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "Copy of Response_Time_Web",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"preventOrFixIssue\" severity=\"normal\" | timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_s8pGbY3R_ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "Copy of Latency_Web",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"planForChange\" severity=\"normal\" | timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_service_input": {
|
|
"name": "Search for Service Input",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident service!=null | table service | append [| search `m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" services{}!=null | table services{} | mvexpand services{} | rename services{} as service] | dedup service | sort service",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_statuspunchcard": {
|
|
"name": "statuspunchcard",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident service=\"$service_tok$\" feature=\"$feature_tok$\" id=$msg_id_tok$\n| eval category=status\n| stats dc(id) as Count latest(status) as Status by category id\n| table Status id Count category\n| eval sort_field= case(Status==\"investigating\",1, Status==\"serviceDegradation\",2, Status==\"serviceInterruption\",3, Status==\"restoringService\",4, Status==\"extendedRecovery\",5, Status==\"investigationSuspended\",6,Status==\"serviceRestored\",7, Status==\"falsePositive\",8, Status==\"postIncidentReviewPublished\",9) \n| sort sort_field\n| fields - sort_field",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_tSKAQxKZ": {
|
|
"name": "SV_service_degradation",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"serviceDegradation\"\n| dedup id\n| timechart count",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_tvPouRYn": {
|
|
"name": "SV_service_interruption",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident status=\"serviceInterruption\"\n| dedup id\n| timechart count",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_tyBN57HP_ds_WSUkjY7M": {
|
|
"name": "Incident Messages Table",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:healthIssue\" classification=incident service=\"$service_tok$\" feature=\"$feature_tok$\" id=$msg_id_tok$\n| rename id as ID, service as Service,feature as Feature, status as Status, title as Title, lastModifiedDateTime as LastUpdatedTime\n| table ID, Service, Feature, Status, Title,LastUpdatedTime\n| eval LastUpdatedTime = strptime(LastUpdatedTime,\"%Y-%m-%dT%H:%M:%S.%N\")\n| sort -LastUpdatedTime\n| eval \"Last Updated\"=strftime(LastUpdatedTime,\"%Y-%m-%d %H:%M:%S\")\n| fields - LastUpdatedTime",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_vpzSyE0x_ds_tyBN57HP_ds_WSUkjY7M": {
|
|
"name": "Copy of Incident Messages Table",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" services{}=\"$service_tok$\" id=$msg_id_tok$\n| rename id as ID, services{} as \"Affected Service\",category as Category, severity as Severity, title as Title, lastModifiedDateTime as LastUpdatedTime\n| table ID, \"Affected Service\", Category, Severity, Title,LastUpdatedTime\n| eval LastUpdatedTime = strptime(LastUpdatedTime,\"%Y-%m-%dT%H:%M:%S.%N\")\n| sort -LastUpdatedTime\n| eval \"Last Updated\"=strftime(LastUpdatedTime,\"%Y-%m-%d %H:%M:%S\")\n| fields - LastUpdatedTime",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn": {
|
|
"name": "Latency_Mobile",
|
|
"options": {
|
|
"query": "`m365_cp_default_index` sourcetype=\"o365:service:updateMessage\" category=\"planForChange\" severity=\"high\"\n| timechart dc(id)",
|
|
"query_parameters": {
|
|
"earliest": "$tr.earliest$",
|
|
"latest": "$tr.latest$"
|
|
}
|
|
},
|
|
"type": "ds.search"
|
|
},
|
|
"ds_x7TMe4Gn": {
|
|
"meta": {
|
|
"kpi_id": "SHKPI-da-itsi-cp-m365-m365",
|
|
"service_id": "da-itsi-cp-m365-m365"
|
|
},
|
|
"name": "O365 - ServiceHealthScore",
|
|
"options": {
|
|
"query": "`get_full_itsi_summary_kpi(SHKPI-da-itsi-cp-m365-m365)` `service_level_kpi_only` | timechart cont=false latest(alert_value) AS alert_value, latest(alert_color) AS alert_color"
|
|
},
|
|
"type": "ds.search"
|
|
}
|
|
},
|
|
"defaults": {},
|
|
"description": "",
|
|
"inputs": {
|
|
"input_O10HSt2J": {
|
|
"data_sources": {
|
|
"primary": "ds_msg_input"
|
|
},
|
|
"options": {
|
|
"defaultValue": "*",
|
|
"items": [
|
|
{
|
|
"label": "All",
|
|
"value": "*"
|
|
}
|
|
],
|
|
"token": "msg_id_tok"
|
|
},
|
|
"title": "Message ID",
|
|
"type": "input.multiselect"
|
|
},
|
|
"input_lOweLYs2": {
|
|
"data_sources": {
|
|
"primary": "ds_service_input"
|
|
},
|
|
"options": {
|
|
"defaultValue": "*",
|
|
"items": [
|
|
{
|
|
"label": "All",
|
|
"value": "*"
|
|
}
|
|
],
|
|
"token": "service_tok"
|
|
},
|
|
"title": "Service",
|
|
"type": "input.dropdown"
|
|
},
|
|
"input_time_picker": {
|
|
"data_sources": {},
|
|
"options": {
|
|
"defaultValue": "-7d@d,now",
|
|
"token": "tr"
|
|
},
|
|
"title": "Time Picker",
|
|
"type": "input.timerange"
|
|
},
|
|
"input_xOperOEu": {
|
|
"data_sources": {
|
|
"primary": "ds_feature_input"
|
|
},
|
|
"options": {
|
|
"defaultValue": "*",
|
|
"items": [
|
|
{
|
|
"label": "All",
|
|
"value": "*"
|
|
}
|
|
],
|
|
"token": "feature_tok"
|
|
},
|
|
"title": "Feature",
|
|
"type": "input.dropdown"
|
|
}
|
|
},
|
|
"layout": {
|
|
"global_inputs": [
|
|
"input_lOweLYs2",
|
|
"input_xOperOEu",
|
|
"input_O10HSt2J",
|
|
"input_time_picker"
|
|
],
|
|
"options": {
|
|
"background_image": {
|
|
"size_type": "contain",
|
|
"src": "splunk-enterprise-kvstore://da-itsi-cp-m365-o365-background",
|
|
"x": 0.0,
|
|
"y": 0.0
|
|
},
|
|
"display": "auto-scale",
|
|
"height": 1180.0,
|
|
"show_title_and_description": true,
|
|
"width": 1920.0
|
|
},
|
|
"structure": [
|
|
{
|
|
"item": "viz_yJS5G8rZ",
|
|
"position": {
|
|
"h": 57,
|
|
"w": 70,
|
|
"x": 0,
|
|
"y": 0
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_ydtjTtwP",
|
|
"position": {
|
|
"h": 1010,
|
|
"w": 930,
|
|
"x": 970,
|
|
"y": 60
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_aAecc179",
|
|
"position": {
|
|
"h": 150,
|
|
"w": 910,
|
|
"x": 980,
|
|
"y": 100
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_uur3gtSz",
|
|
"position": {
|
|
"h": 1010,
|
|
"w": 930,
|
|
"x": 20,
|
|
"y": 60
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_5ElpaLAL",
|
|
"position": {
|
|
"h": 150,
|
|
"w": 910,
|
|
"x": 30,
|
|
"y": 100
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_pTvJxo6E",
|
|
"position": {
|
|
"h": 130,
|
|
"w": 204,
|
|
"x": 720,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_GYnF6RF9",
|
|
"position": {
|
|
"h": 130,
|
|
"w": 204,
|
|
"x": 490,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_95LHKyfb",
|
|
"position": {
|
|
"h": 130,
|
|
"w": 204,
|
|
"x": 270,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_HaZdi9sU",
|
|
"position": {
|
|
"h": 60,
|
|
"w": 380,
|
|
"x": 80,
|
|
"y": 10
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_KdMxDtXA",
|
|
"position": {
|
|
"h": 50,
|
|
"w": 340,
|
|
"x": 40,
|
|
"y": 70
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_GjqBuOkG",
|
|
"position": {
|
|
"h": 100,
|
|
"w": 202,
|
|
"x": 490,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_lVJDTStf",
|
|
"position": {
|
|
"h": 100,
|
|
"w": 202,
|
|
"x": 270,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_DUn1cXDP",
|
|
"position": {
|
|
"h": 100,
|
|
"w": 202,
|
|
"x": 720,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_fHGgjN0V",
|
|
"position": {
|
|
"h": 370,
|
|
"w": 930,
|
|
"x": 20,
|
|
"y": 690
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_icjGDjsp",
|
|
"position": {
|
|
"h": 50,
|
|
"w": 340,
|
|
"x": 1000,
|
|
"y": 70
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_kfTINaOJ",
|
|
"position": {
|
|
"h": 130,
|
|
"w": 250,
|
|
"x": 1000,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_pvR2fxkh",
|
|
"position": {
|
|
"h": 130,
|
|
"w": 250,
|
|
"x": 1310,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_mlaivysH",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 130,
|
|
"x": 1010,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_VpKZMmIq",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 60,
|
|
"x": 1000,
|
|
"y": 190
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_dFFqTkl4",
|
|
"position": {
|
|
"h": 130,
|
|
"w": 204,
|
|
"x": 40,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_QtosIFd1",
|
|
"position": {
|
|
"h": 100,
|
|
"w": 202,
|
|
"x": 40,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_yIFxJuIx",
|
|
"position": {
|
|
"h": 75,
|
|
"w": 200,
|
|
"x": 40,
|
|
"y": 170
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_vJ5pjtwJ",
|
|
"position": {
|
|
"h": 75,
|
|
"w": 200,
|
|
"x": 270,
|
|
"y": 170
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_6KuCBfPR",
|
|
"position": {
|
|
"h": 75,
|
|
"w": 200,
|
|
"x": 490,
|
|
"y": 170
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_zrZVXpEO",
|
|
"position": {
|
|
"h": 60,
|
|
"w": 140,
|
|
"x": 1120,
|
|
"y": 140
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_ehMYFIQW",
|
|
"position": {
|
|
"h": 50,
|
|
"w": 70,
|
|
"x": 1050,
|
|
"y": 140
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_pY5TGucV",
|
|
"position": {
|
|
"h": 50,
|
|
"w": 70,
|
|
"x": 1050,
|
|
"y": 190
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_KwP3JPjp",
|
|
"position": {
|
|
"h": 60,
|
|
"w": 140,
|
|
"x": 1120,
|
|
"y": 190
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_HnipizXa",
|
|
"position": {
|
|
"h": 50,
|
|
"w": 70,
|
|
"x": 1370,
|
|
"y": 140
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_Dux7SQTo",
|
|
"position": {
|
|
"h": 60,
|
|
"w": 140,
|
|
"x": 1430,
|
|
"y": 140
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_XlkFJ5WW",
|
|
"position": {
|
|
"h": 60,
|
|
"w": 140,
|
|
"x": 1430,
|
|
"y": 190
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_3Q8gRGmK",
|
|
"position": {
|
|
"h": 50,
|
|
"w": 70,
|
|
"x": 1370,
|
|
"y": 190
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_CmoOAb3L",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 170,
|
|
"x": 1320,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_Ajz8S9Ft",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 60,
|
|
"x": 1310,
|
|
"y": 140
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_xzAwv4N5",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 60,
|
|
"x": 1310,
|
|
"y": 190
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_mZRGSHz4",
|
|
"position": {
|
|
"h": 420,
|
|
"w": 930,
|
|
"x": 20,
|
|
"y": 260
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_2Tx7FFwd",
|
|
"position": {
|
|
"h": 380,
|
|
"w": 930,
|
|
"x": 970,
|
|
"y": 690
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_SbFoZPhU",
|
|
"position": {
|
|
"h": 420,
|
|
"w": 920,
|
|
"x": 980,
|
|
"y": 260
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_gUHUWgGf",
|
|
"position": {
|
|
"h": 75,
|
|
"w": 200,
|
|
"x": 720,
|
|
"y": 170
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_ojm8BDTL",
|
|
"position": {
|
|
"h": 130,
|
|
"w": 250,
|
|
"x": 1620,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_htwOxVCo",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 60,
|
|
"x": 1620,
|
|
"y": 140
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_UxJhZQcz",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 60,
|
|
"x": 1620,
|
|
"y": 190
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_8X6SHZos",
|
|
"position": {
|
|
"h": 50,
|
|
"w": 70,
|
|
"x": 1680,
|
|
"y": 140
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_HJaahfgC",
|
|
"position": {
|
|
"h": 50,
|
|
"w": 70,
|
|
"x": 1680,
|
|
"y": 190
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_2vJOun7f",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 60,
|
|
"x": 1000,
|
|
"y": 140
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_TqIJwVmD",
|
|
"position": {
|
|
"h": 60,
|
|
"w": 140,
|
|
"x": 1740,
|
|
"y": 140
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_Y7Xwzp9H",
|
|
"position": {
|
|
"h": 60,
|
|
"w": 140,
|
|
"x": 1740,
|
|
"y": 190
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_be1Vks0h",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 170,
|
|
"x": 1630,
|
|
"y": 110
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_ksHIMR0B",
|
|
"position": {
|
|
"h": 100,
|
|
"w": 120,
|
|
"x": -30,
|
|
"y": -20
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_DHnOPgTm",
|
|
"position": {
|
|
"h": 70,
|
|
"w": 70,
|
|
"x": 0,
|
|
"y": -10
|
|
},
|
|
"type": "block"
|
|
},
|
|
{
|
|
"item": "viz_7tpN1LRt",
|
|
"position": {
|
|
"h": 40,
|
|
"w": 280,
|
|
"x": 1640,
|
|
"y": 0
|
|
},
|
|
"type": "block"
|
|
}
|
|
],
|
|
"type": "absolute"
|
|
},
|
|
"title": "M365 Incident and Message Dashboard",
|
|
"visualizations": {
|
|
"viz_2Tx7FFwd": {
|
|
"data_sources": {
|
|
"primary": "ds_vpzSyE0x_ds_tyBN57HP_ds_WSUkjY7M"
|
|
},
|
|
"options": {
|
|
"background_color": "transparent",
|
|
"count": 8.0
|
|
},
|
|
"title": "Most Recent Messages",
|
|
"type": "splunk.table"
|
|
},
|
|
"viz_2vJOun7f": {
|
|
"options": {
|
|
"customFontSize": 12.0,
|
|
"font_color": "#f8be34",
|
|
"font_size": "custom",
|
|
"markdown": "**Normal**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_3Q8gRGmK": {
|
|
"data_sources": {
|
|
"primary": "ds_5AuAKP9E_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"background_color": "transparent",
|
|
"spark_line_display": "off",
|
|
"trend_display": "off",
|
|
"unit": "ms"
|
|
},
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_5ElpaLAL": {
|
|
"options": {
|
|
"fill_color": "#294e70"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_6KuCBfPR": {
|
|
"data_sources": {
|
|
"primary": "ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
},
|
|
"viz_7tpN1LRt": {
|
|
"event_handlers": [
|
|
{
|
|
"options": {
|
|
"newTab": true,
|
|
"url": "/app/itsi/glass_table?savedGlassTableId=da-itsi-cp-m365-m365-executive-overview&action=view"
|
|
},
|
|
"type": "drilldown.customUrl"
|
|
}
|
|
],
|
|
"options": {
|
|
"preserve_aspect_ratio": true,
|
|
"src": "splunk-enterprise-kvstore://da-itsi-cp-m365-microsoft-365"
|
|
},
|
|
"type": "splunk.image"
|
|
},
|
|
"viz_8X6SHZos": {
|
|
"data_sources": {
|
|
"primary": "ds_ELVENlxx_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"background_color": "#4fa484",
|
|
"spark_line_display": "off"
|
|
},
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_95LHKyfb": {
|
|
"options": {
|
|
"fill_color": "#f1813f",
|
|
"stroke_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_Ajz8S9Ft": {
|
|
"options": {
|
|
"customFontSize": 12.0,
|
|
"font_color": "#f8be34",
|
|
"font_size": "custom",
|
|
"markdown": "**Normal**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_CmoOAb3L": {
|
|
"options": {
|
|
"customFontSize": 14.0,
|
|
"font_color": "#171d21",
|
|
"font_size": "custom",
|
|
"markdown": "**Prevent or Fix Issues**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_DHnOPgTm": {
|
|
"event_handlers": [
|
|
{
|
|
"options": {
|
|
"newTab": true,
|
|
"url": "/app/itsi/homeview?view=standard&viewType=service_topology&earliest=-24h%40h&latest=now&serviceId=da-itsi-cp-m365-m365"
|
|
},
|
|
"type": "drilldown.customUrl"
|
|
}
|
|
],
|
|
"options": {
|
|
"fill_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_DUn1cXDP": {
|
|
"data_sources": {
|
|
"primary": "ds_2wMyo1qJ"
|
|
},
|
|
"options": {
|
|
"background_color": "#53a051",
|
|
"spark_line_display": "off"
|
|
},
|
|
"title": "Service restored",
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_Dux7SQTo": {
|
|
"data_sources": {
|
|
"primary": "ds_ftH4Qh7z_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
},
|
|
"viz_GYnF6RF9": {
|
|
"options": {
|
|
"fill_color": "#dc4e41",
|
|
"stroke_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_GjqBuOkG": {
|
|
"data_sources": {
|
|
"primary": "ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"background_color": "#dc4e41",
|
|
"spark_line_display": "off"
|
|
},
|
|
"title": "Service interruption",
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_HJaahfgC": {
|
|
"data_sources": {
|
|
"primary": "ds_InXpR08G_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"background_color": "#4fa484",
|
|
"spark_line_display": "off"
|
|
},
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_HaZdi9sU": {
|
|
"options": {
|
|
"customFontSize": 24.0,
|
|
"font_color": "#ffffff",
|
|
"font_size": "custom",
|
|
"markdown": "**Service Incidents and Messages**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_HnipizXa": {
|
|
"data_sources": {
|
|
"primary": "ds_ftH4Qh7z_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"background_color": "#62b3b2",
|
|
"spark_line_display": "off"
|
|
},
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_KdMxDtXA": {
|
|
"options": {
|
|
"customFontSize": 14.0,
|
|
"font_color": "#171d21",
|
|
"font_size": "custom",
|
|
"markdown": "**Service Incidents**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_KwP3JPjp": {
|
|
"data_sources": {
|
|
"primary": "ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
},
|
|
"viz_QtosIFd1": {
|
|
"data_sources": {
|
|
"primary": "ds_k372VS48"
|
|
},
|
|
"options": {
|
|
"background_color": "#F8BE34",
|
|
"spark_line_display": "off"
|
|
},
|
|
"title": "Investigating",
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_SbFoZPhU": {
|
|
"data_sources": {
|
|
"primary": "ds_o152aLBA_ds_statuspunchcard"
|
|
},
|
|
"options": {
|
|
"background_color": "#ffffff",
|
|
"bubbleLabelDisplay": "off",
|
|
"color_mode": "categorical",
|
|
"series_colors": [
|
|
"#F8BE34",
|
|
"#DC4E41",
|
|
"#FF4800",
|
|
"#ADD63C",
|
|
"#4FA484",
|
|
"#62B3B2",
|
|
"#53A051",
|
|
"#708794",
|
|
"#5A4575"
|
|
],
|
|
"show_max_value_pulsation": false
|
|
},
|
|
"title": "Messages by Service",
|
|
"type": "splunk.punchcard"
|
|
},
|
|
"viz_TqIJwVmD": {
|
|
"data_sources": {
|
|
"primary": "ds_ELVENlxx_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
},
|
|
"viz_UxJhZQcz": {
|
|
"options": {
|
|
"customFontSize": 12.0,
|
|
"font_color": "#dc4e41",
|
|
"font_size": "custom",
|
|
"markdown": "**High**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_VpKZMmIq": {
|
|
"options": {
|
|
"customFontSize": 12.0,
|
|
"font_color": "#dc4e41",
|
|
"font_size": "custom",
|
|
"markdown": "**High**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_XlkFJ5WW": {
|
|
"data_sources": {
|
|
"primary": "ds_5AuAKP9E_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
},
|
|
"viz_Y7Xwzp9H": {
|
|
"data_sources": {
|
|
"primary": "ds_InXpR08G_ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
},
|
|
"viz_aAecc179": {
|
|
"options": {
|
|
"fill_color": "#294e70"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_be1Vks0h": {
|
|
"options": {
|
|
"customFontSize": 14.0,
|
|
"font_color": "#171d21",
|
|
"font_size": "custom",
|
|
"markdown": "**Stay Informed**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_dFFqTkl4": {
|
|
"options": {
|
|
"fill_color": "#F8BE34",
|
|
"stroke_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_ehMYFIQW": {
|
|
"data_sources": {
|
|
"primary": "ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"background_color": "#0877a6",
|
|
"spark_line_display": "off"
|
|
},
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_fHGgjN0V": {
|
|
"data_sources": {
|
|
"primary": "ds_tyBN57HP_ds_WSUkjY7M"
|
|
},
|
|
"options": {
|
|
"background_color": "transparent",
|
|
"count": 8.0
|
|
},
|
|
"title": "Most Recent Incident",
|
|
"type": "splunk.table"
|
|
},
|
|
"viz_gUHUWgGf": {
|
|
"data_sources": {
|
|
"primary": "ds_2wMyo1qJ"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
},
|
|
"viz_htwOxVCo": {
|
|
"options": {
|
|
"customFontSize": 12.0,
|
|
"font_color": "#f8be34",
|
|
"font_size": "custom",
|
|
"markdown": "**Normal**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_icjGDjsp": {
|
|
"options": {
|
|
"customFontSize": 14.0,
|
|
"font_color": "#171d21",
|
|
"font_size": "custom",
|
|
"markdown": "**Messages**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_kfTINaOJ": {
|
|
"options": {
|
|
"fill_color": "#0877a6",
|
|
"stroke_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_ksHIMR0B": {
|
|
"options": {
|
|
"preserve_aspect_ratio": true,
|
|
"src": "splunk-enterprise-kvstore://da-itsi-cp-m365-office-256x256"
|
|
},
|
|
"type": "splunk.image"
|
|
},
|
|
"viz_lVJDTStf": {
|
|
"data_sources": {
|
|
"primary": "ds_tSKAQxKZ"
|
|
},
|
|
"options": {
|
|
"background_color": "#f1813f",
|
|
"spark_line_display": "off"
|
|
},
|
|
"title": "Service degradation",
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_mZRGSHz4": {
|
|
"data_sources": {
|
|
"primary": "ds_statuspunchcard"
|
|
},
|
|
"options": {
|
|
"background_color": "#ffffff",
|
|
"bubbleLabelDisplay": "off",
|
|
"color_mode": "categorical",
|
|
"series_colors": [
|
|
"#F8BE34",
|
|
"#DC4E41",
|
|
"#FF4800",
|
|
"#ADD63C",
|
|
"#4FA484",
|
|
"#62B3B2",
|
|
"#53A051",
|
|
"#708794",
|
|
"#5A4575"
|
|
],
|
|
"show_max_value_pulsation": false
|
|
},
|
|
"title": "Status Progress by ID",
|
|
"type": "splunk.punchcard"
|
|
},
|
|
"viz_mlaivysH": {
|
|
"options": {
|
|
"customFontSize": 14.0,
|
|
"font_color": "#171d21",
|
|
"font_size": "custom",
|
|
"markdown": "**Plan for Change**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_ojm8BDTL": {
|
|
"options": {
|
|
"fill_color": "#4fa484",
|
|
"stroke_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_pTvJxo6E": {
|
|
"options": {
|
|
"fill_color": "#53a051",
|
|
"stroke_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_pY5TGucV": {
|
|
"data_sources": {
|
|
"primary": "ds_wzq3Llei_ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"background_color": "#0877a6",
|
|
"spark_line_display": "off"
|
|
},
|
|
"type": "splunk.singlevalue"
|
|
},
|
|
"viz_pvR2fxkh": {
|
|
"options": {
|
|
"fill_color": "#62b3b2",
|
|
"stroke_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_uur3gtSz": {
|
|
"options": {
|
|
"fill_color": "#ffffff",
|
|
"stroke_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_vJ5pjtwJ": {
|
|
"data_sources": {
|
|
"primary": "ds_tSKAQxKZ"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
},
|
|
"viz_xzAwv4N5": {
|
|
"options": {
|
|
"customFontSize": 12.0,
|
|
"font_color": "#dc4e41",
|
|
"font_size": "custom",
|
|
"markdown": "**High**"
|
|
},
|
|
"type": "splunk.markdown"
|
|
},
|
|
"viz_yIFxJuIx": {
|
|
"data_sources": {
|
|
"primary": "ds_k372VS48"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
},
|
|
"viz_yJS5G8rZ": {
|
|
"data_sources": {
|
|
"primary": "ds_x7TMe4Gn"
|
|
},
|
|
"options": {
|
|
"fill_color": "> primary | seriesByName(\"alert_color\") | lastPoint()"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_ydtjTtwP": {
|
|
"options": {
|
|
"fill_color": "#ffffff",
|
|
"stroke_color": "transparent"
|
|
},
|
|
"type": "splunk.rectangle"
|
|
},
|
|
"viz_zrZVXpEO": {
|
|
"data_sources": {
|
|
"primary": "ds_J2P5KSLW_ds_tvPouRYn"
|
|
},
|
|
"options": {
|
|
"area_fill_opacity": 0.0,
|
|
"axis_labelsx_major_label_visibility": "hide",
|
|
"axis_labelsy_major_label_visibility": "hide",
|
|
"axis_titlex_visibility": "collapsed",
|
|
"axis_titley_visibility": "collapsed",
|
|
"background_color": "transparent",
|
|
"font_color": "#cccccc",
|
|
"foreground_color": "#cccccc",
|
|
"grid_linesx_show_major_lines": false,
|
|
"grid_linesy_show_major_lines": false,
|
|
"legendDisplay": "off",
|
|
"series_colors": [
|
|
"#FFFFFF"
|
|
],
|
|
"x": "> primary | seriesByName(\"_time\")",
|
|
"y": "> primary | seriesByName(\"alert_value\")"
|
|
},
|
|
"type": "splunk.area"
|
|
}
|
|
}
|
|
},
|
|
"description": "",
|
|
"gt_version": "beta",
|
|
"key": "da-itsi-cp-m365-m365-incident-and-message-dashboard",
|
|
"latest": "now",
|
|
"latest_label": "Now",
|
|
"selected_swap_service_id": null,
|
|
"swap_service_ids": [],
|
|
"template_selected_service_id": null,
|
|
"template_swappable_service_ids": [],
|
|
"title": "M365 Incident and Message Dashboard",
|
|
"version": "0.0.38"
|
|
} |