From 1f697fe98c4ae7b51c1ebbd6b03ddb2c2ccf9b9f Mon Sep 17 00:00:00 2001 From: admingit Date: Sat, 24 Jan 2026 21:40:12 +0100 Subject: [PATCH] delete/change_gitignore --- .gitignore | 2 +- dashboards/trackme_MaintenanceKdb.xml | 4 - dashboards/trackme_MaintenanceMode.xml | 4 - dashboards/trackme_ManageBankHolidays.xml | 4 - dashboards/trackme_RestApiReference.xml | 4 - dashboards/trackme_TenantHome.xml | 4 - dashboards/trackme_VirtualTenants.xml | 4 - dashboards/trackme__admin.xml | 12 - dashboards/trackme_alert.xml | 4 - dashboards/trackme_alerts.xml | 4 - dashboards/trackme_analysis_workspace.xml | 4 - dashboards/trackme_analytics_workspace.xml | 4 - dashboards/trackme_backuprestore.xml | 4 - dashboards/trackme_charting.xml | 3 - dashboards/trackme_configuration.xml | 4 - dashboards/trackme_dashboard.xml | 2 - dashboards/trackme_dashboards.xml | 4 - dashboards/trackme_data_model_editor.xml | 4 - dashboards/trackme_data_model_explorer.xml | 4 - dashboards/trackme_data_model_manager.xml | 4 - dashboards/trackme_data_models.xml | 4 - dashboards/trackme_dataset.xml | 4 - dashboards/trackme_datasets.xml | 4 - dashboards/trackme_dm-home.xml | 4 - dashboards/trackme_field_extractor.xml | 4 - dashboards/trackme_flashtimeline.xml | 5 - ...me_git_pusher_-_push_dashboards_to_git.xml | 254 ---- dashboards/trackme_job_management.xml | 4 - dashboards/trackme_job_manager.xml | 4 - dashboards/trackme_license.xml | 4 - dashboards/trackme_mod_setup.xml | 4 - dashboards/trackme_pivot.xml | 4 - dashboards/trackme_report.xml | 4 - .../trackme_report_builder_define_data.xml | 3 - dashboards/trackme_report_builder_display.xml | 3 - .../trackme_report_builder_format_report.xml | 3 - dashboards/trackme_report_builder_print.xml | 3 - dashboards/trackme_reports.xml | 4 - .../trackme_scheduled_export_dashboard.xml | 603 --------- dashboards/trackme_search.xml | 4 - dashboards/trackme_show_source.xml | 4 - .../trackme_splunk_archiver_dashboard.xml | 389 ------ dashboards/trackme_table.xml | 4 - ..._trackMe_audit_adaptive_delay_treshold.xml | 446 ------- ...it_adaptive_delay_treshold_adjustments.xml | 531 -------- .../trackme_trackMe_audit_data_sampling.xml | 659 ---------- dashboards/trackme_trackMe_audit_ops.xml | 380 ------ .../trackme_trackMe_audit_svc_usage.xml | 275 ---- .../trackme_trackMe_audit_trackers_perf.xml | 277 ---- ...trackme_trackMe_commands_log_inspector.xml | 249 ---- .../trackme_trackMe_internal_scheduling.xml | 284 ----- dashboards/trackme_trackMe_kvstore.xml | 234 ---- ...ackme_trackMe_remote_accounts_overview.xml | 514 -------- dashboards/trackme_trackMe_sla.xml | 408 ------ dashboards/trackme_trackMe_sla_flip.xml | 322 ----- ...e_trackMe_template_services_monitoring.xml | 1110 ----------------- dashboards/trackme_triggered_alerts.xml | 4 - 57 files changed, 1 insertion(+), 7098 deletions(-) delete mode 100644 dashboards/trackme_MaintenanceKdb.xml delete mode 100644 dashboards/trackme_MaintenanceMode.xml delete mode 100644 dashboards/trackme_ManageBankHolidays.xml delete mode 100644 dashboards/trackme_RestApiReference.xml delete mode 100644 dashboards/trackme_TenantHome.xml delete mode 100644 dashboards/trackme_VirtualTenants.xml delete mode 100644 dashboards/trackme__admin.xml delete mode 100644 dashboards/trackme_alert.xml delete mode 100644 dashboards/trackme_alerts.xml delete mode 100644 dashboards/trackme_analysis_workspace.xml delete mode 100644 dashboards/trackme_analytics_workspace.xml delete mode 100644 dashboards/trackme_backuprestore.xml delete mode 100644 dashboards/trackme_charting.xml delete mode 100644 dashboards/trackme_configuration.xml delete mode 100644 dashboards/trackme_dashboard.xml delete mode 100644 dashboards/trackme_dashboards.xml delete mode 100644 dashboards/trackme_data_model_editor.xml delete mode 100644 dashboards/trackme_data_model_explorer.xml delete mode 100644 dashboards/trackme_data_model_manager.xml delete mode 100644 dashboards/trackme_data_models.xml delete mode 100644 dashboards/trackme_dataset.xml delete mode 100644 dashboards/trackme_datasets.xml delete mode 100644 dashboards/trackme_dm-home.xml delete mode 100644 dashboards/trackme_field_extractor.xml delete mode 100644 dashboards/trackme_flashtimeline.xml delete mode 100644 dashboards/trackme_git_pusher_-_push_dashboards_to_git.xml delete mode 100644 dashboards/trackme_job_management.xml delete mode 100644 dashboards/trackme_job_manager.xml delete mode 100644 dashboards/trackme_license.xml delete mode 100644 dashboards/trackme_mod_setup.xml delete mode 100644 dashboards/trackme_pivot.xml delete mode 100644 dashboards/trackme_report.xml delete mode 100644 dashboards/trackme_report_builder_define_data.xml delete mode 100644 dashboards/trackme_report_builder_display.xml delete mode 100644 dashboards/trackme_report_builder_format_report.xml delete mode 100644 dashboards/trackme_report_builder_print.xml delete mode 100644 dashboards/trackme_reports.xml delete mode 100644 dashboards/trackme_scheduled_export_dashboard.xml delete mode 100644 dashboards/trackme_search.xml delete mode 100644 dashboards/trackme_show_source.xml delete mode 100644 dashboards/trackme_splunk_archiver_dashboard.xml delete mode 100644 dashboards/trackme_table.xml delete mode 100644 dashboards/trackme_trackMe_audit_adaptive_delay_treshold.xml delete mode 100644 dashboards/trackme_trackMe_audit_adaptive_delay_treshold_adjustments.xml delete mode 100644 dashboards/trackme_trackMe_audit_data_sampling.xml delete mode 100644 dashboards/trackme_trackMe_audit_ops.xml delete mode 100644 dashboards/trackme_trackMe_audit_svc_usage.xml delete mode 100644 dashboards/trackme_trackMe_audit_trackers_perf.xml delete mode 100644 dashboards/trackme_trackMe_commands_log_inspector.xml delete mode 100644 dashboards/trackme_trackMe_internal_scheduling.xml delete mode 100644 dashboards/trackme_trackMe_kvstore.xml delete mode 100644 dashboards/trackme_trackMe_remote_accounts_overview.xml delete mode 100644 dashboards/trackme_trackMe_sla.xml delete mode 100644 dashboards/trackme_trackMe_sla_flip.xml delete mode 100644 dashboards/trackme_trackMe_template_services_monitoring.xml delete mode 100644 dashboards/trackme_triggered_alerts.xml diff --git a/.gitignore b/.gitignore index c9aa8e63..23ea782a 100644 --- a/.gitignore +++ b/.gitignore @@ -9,7 +9,7 @@ *.ini *.xsl passwd -/apps/ +!apps/ /anonymizer/ /auth/ /disabled-apps/ diff --git a/dashboards/trackme_MaintenanceKdb.xml b/dashboards/trackme_MaintenanceKdb.xml deleted file mode 100644 index afda217d..00000000 --- a/dashboards/trackme_MaintenanceKdb.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_MaintenanceMode.xml b/dashboards/trackme_MaintenanceMode.xml deleted file mode 100644 index 9a8c73a2..00000000 --- a/dashboards/trackme_MaintenanceMode.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_ManageBankHolidays.xml b/dashboards/trackme_ManageBankHolidays.xml deleted file mode 100644 index d97cf209..00000000 --- a/dashboards/trackme_ManageBankHolidays.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_RestApiReference.xml b/dashboards/trackme_RestApiReference.xml deleted file mode 100644 index ce3a0098..00000000 --- a/dashboards/trackme_RestApiReference.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_TenantHome.xml b/dashboards/trackme_TenantHome.xml deleted file mode 100644 index d6114576..00000000 --- a/dashboards/trackme_TenantHome.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_VirtualTenants.xml b/dashboards/trackme_VirtualTenants.xml deleted file mode 100644 index 0fe48854..00000000 --- a/dashboards/trackme_VirtualTenants.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme__admin.xml b/dashboards/trackme__admin.xml deleted file mode 100644 index 2ef19746..00000000 --- a/dashboards/trackme__admin.xml +++ /dev/null @@ -1,12 +0,0 @@ - - - - * - False - 1 - - - lite - - - \ No newline at end of file diff --git a/dashboards/trackme_alert.xml b/dashboards/trackme_alert.xml deleted file mode 100644 index ccf79bd6..00000000 --- a/dashboards/trackme_alert.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_alerts.xml b/dashboards/trackme_alerts.xml deleted file mode 100644 index 3ee43fc5..00000000 --- a/dashboards/trackme_alerts.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_analysis_workspace.xml b/dashboards/trackme_analysis_workspace.xml deleted file mode 100644 index fb843887..00000000 --- a/dashboards/trackme_analysis_workspace.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_analytics_workspace.xml b/dashboards/trackme_analytics_workspace.xml deleted file mode 100644 index 7deff5bf..00000000 --- a/dashboards/trackme_analytics_workspace.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_backuprestore.xml b/dashboards/trackme_backuprestore.xml deleted file mode 100644 index 20214e3f..00000000 --- a/dashboards/trackme_backuprestore.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_charting.xml b/dashboards/trackme_charting.xml deleted file mode 100644 index 97b1bd27..00000000 --- a/dashboards/trackme_charting.xml +++ /dev/null @@ -1,3 +0,0 @@ - - - \ No newline at end of file diff --git a/dashboards/trackme_configuration.xml b/dashboards/trackme_configuration.xml deleted file mode 100644 index 78b2791a..00000000 --- a/dashboards/trackme_configuration.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_dashboard.xml b/dashboards/trackme_dashboard.xml deleted file mode 100644 index 0330d660..00000000 --- a/dashboards/trackme_dashboard.xml +++ /dev/null @@ -1,2 +0,0 @@ - - \ No newline at end of file diff --git a/dashboards/trackme_dashboards.xml b/dashboards/trackme_dashboards.xml deleted file mode 100644 index b223d36a..00000000 --- a/dashboards/trackme_dashboards.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_data_model_editor.xml b/dashboards/trackme_data_model_editor.xml deleted file mode 100644 index d5ce2790..00000000 --- a/dashboards/trackme_data_model_editor.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - diff --git a/dashboards/trackme_data_model_explorer.xml b/dashboards/trackme_data_model_explorer.xml deleted file mode 100644 index 59fffc3b..00000000 --- a/dashboards/trackme_data_model_explorer.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_data_model_manager.xml b/dashboards/trackme_data_model_manager.xml deleted file mode 100644 index 9de8cd2e..00000000 --- a/dashboards/trackme_data_model_manager.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_data_models.xml b/dashboards/trackme_data_models.xml deleted file mode 100644 index 59fffc3b..00000000 --- a/dashboards/trackme_data_models.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_dataset.xml b/dashboards/trackme_dataset.xml deleted file mode 100644 index 1516c9a8..00000000 --- a/dashboards/trackme_dataset.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_datasets.xml b/dashboards/trackme_datasets.xml deleted file mode 100644 index 1038b2e5..00000000 --- a/dashboards/trackme_datasets.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_dm-home.xml b/dashboards/trackme_dm-home.xml deleted file mode 100644 index 1f2e59f2..00000000 --- a/dashboards/trackme_dm-home.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_field_extractor.xml b/dashboards/trackme_field_extractor.xml deleted file mode 100644 index 4c626404..00000000 --- a/dashboards/trackme_field_extractor.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_flashtimeline.xml b/dashboards/trackme_flashtimeline.xml deleted file mode 100644 index 44226bf7..00000000 --- a/dashboards/trackme_flashtimeline.xml +++ /dev/null @@ -1,5 +0,0 @@ - - - - - \ No newline at end of file diff --git a/dashboards/trackme_git_pusher_-_push_dashboards_to_git.xml b/dashboards/trackme_git_pusher_-_push_dashboards_to_git.xml deleted file mode 100644 index 79d34cc9..00000000 --- a/dashboards/trackme_git_pusher_-_push_dashboards_to_git.xml +++ /dev/null @@ -1,254 +0,0 @@ - - - Push Splunk dashboards to Git repository - - - - | rest /services/data/ui/views | search title!="" | fields label, id, eai:acl.app | rename label as "Dashboard Name", id as "dashboard_id", "eai:acl.app" as "app" | sort "Dashboard Name" - -4h@h - now - - - - - Configuration & Dashboard Selection - - - -
-
- ℹ️ Configure your Git settings and select the dashboards you want to push to your repository. -
- -
- - -
- -
- - -
- -
- - -
- -
- -
-
- - Loading dashboards... -
-
- Select one or more dashboards to push -
- -
- - -
- -
- - -
- -
- - Pushing dashboards to Git... -
- -
- ✓ Dashboards successfully pushed to Git! -
- -
- ✗ Error occurred while pushing dashboards -
-
- - - - - - - Push History - - - index=_internal source=*git_pusher* action=push_attempt | table _time, user, dashboards, commit_message, status, error_msg | reverse | rename _time as "Timestamp", user as "User", dashboards as "Dashboards", commit_message as "Message", status as "Status", error_msg as "Error" | head 20 - -30d@d - now - - - - {"success": "#28a745", "error": "#dc3545", "pending": "#ffc107"} - -
- - - - \ No newline at end of file diff --git a/dashboards/trackme_job_management.xml b/dashboards/trackme_job_management.xml deleted file mode 100644 index ca38afff..00000000 --- a/dashboards/trackme_job_management.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_job_manager.xml b/dashboards/trackme_job_manager.xml deleted file mode 100644 index 09022d7f..00000000 --- a/dashboards/trackme_job_manager.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_license.xml b/dashboards/trackme_license.xml deleted file mode 100644 index 5152e7e4..00000000 --- a/dashboards/trackme_license.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_mod_setup.xml b/dashboards/trackme_mod_setup.xml deleted file mode 100644 index 5409e63e..00000000 --- a/dashboards/trackme_mod_setup.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_pivot.xml b/dashboards/trackme_pivot.xml deleted file mode 100644 index e2d50ff8..00000000 --- a/dashboards/trackme_pivot.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_report.xml b/dashboards/trackme_report.xml deleted file mode 100644 index e4b66475..00000000 --- a/dashboards/trackme_report.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_report_builder_define_data.xml b/dashboards/trackme_report_builder_define_data.xml deleted file mode 100644 index c19c8d47..00000000 --- a/dashboards/trackme_report_builder_define_data.xml +++ /dev/null @@ -1,3 +0,0 @@ - - - \ No newline at end of file diff --git a/dashboards/trackme_report_builder_display.xml b/dashboards/trackme_report_builder_display.xml deleted file mode 100644 index 715c4331..00000000 --- a/dashboards/trackme_report_builder_display.xml +++ /dev/null @@ -1,3 +0,0 @@ - - - \ No newline at end of file diff --git a/dashboards/trackme_report_builder_format_report.xml b/dashboards/trackme_report_builder_format_report.xml deleted file mode 100644 index 31ed75a4..00000000 --- a/dashboards/trackme_report_builder_format_report.xml +++ /dev/null @@ -1,3 +0,0 @@ - - - \ No newline at end of file diff --git a/dashboards/trackme_report_builder_print.xml b/dashboards/trackme_report_builder_print.xml deleted file mode 100644 index 01135e86..00000000 --- a/dashboards/trackme_report_builder_print.xml +++ /dev/null @@ -1,3 +0,0 @@ - - - \ No newline at end of file diff --git a/dashboards/trackme_reports.xml b/dashboards/trackme_reports.xml deleted file mode 100644 index 3650c871..00000000 --- a/dashboards/trackme_reports.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_scheduled_export_dashboard.xml b/dashboards/trackme_scheduled_export_dashboard.xml deleted file mode 100644 index 99127b4a..00000000 --- a/dashboards/trackme_scheduled_export_dashboard.xml +++ /dev/null @@ -1,603 +0,0 @@ - - - - table | seriesByIndex(0) | pick(tableAltRowBackgroundColorsByBackgroundColor)", - "headerBackgroundColor": "> backgroundColor | setColorChannel(tableHeaderBackgroundColorConfig)", - "rowColors": "> rowBackgroundColors | maxContrast(tableRowColorMaxContrast)", - "headerColor": "> headerBackgroundColor | maxContrast(tableRowColorMaxContrast)" - }, - "showInternalFields": false - }, - "dataSources": { - "primary": "ds_YwMNtT5r" - }, - "eventHandlers": [ - { - "type": "drilldown.customUrl", - "options": { - "url": "/app/$row.App.value$/$row.Title.value$", - "newTab": true - } - } - ] - }, - "viz_AJ3zmcH5": { - "type": "splunk.markdown", - "options": { - "markdown": "Upon conversion, you can see a summary of how many configurations were successfully converted. \n\nThen, you can select **View conversion report** for more details about what did not convert.", - "fontSize": "large", - "fontFamily": "Splunk Data Sans" - } - }, - "viz_2EzncWf1": { - "type": "splunk.markdown", - "options": { - "markdown": "The conversion report gives you specific details about the configurations that did not convert. In this example, the \"min value\" for horseshoe meter and the Calendar heat map visualization did not convert. ", - "fontSize": "large", - "fontFamily": "Splunk Data Sans" - } - }, - "viz_8F1OzLSQ": { - "type": "splunk.markdown", - "options": { - "markdown": "To reopen the conversion report later, select the conversion report icon in the toolbar. ", - "fontSize": "large", - "fontFamily": "Splunk Data Sans" - } - }, - "viz_MJsFPrKe": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "/static/app/search/ootb_dashboard_images/scheduled_export_dashboard/img_step1_clone.png" - } - }, - "viz_RSvTUOja": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "/static/app/search/ootb_dashboard_images/scheduled_export_dashboard/img_step2_conversion.png" - } - }, - "viz_WbJd8SDE": { - "type": "splunk.markdown", - "options": { - "markdown": "# **How to clone a Classic dashboard in Dashboard Studio**", - "fontFamily": "Splunk Data Sans", - "fontSize": "custom", - "customFontSize": 16 - } - }, - "viz_iaOSkDcp": { - "type": "splunk.markdown", - "options": { - "markdown": "# **Additional resources**", - "fontFamily": "Splunk Data Sans", - "fontSize": "custom", - "customFontSize": 18 - } - }, - "viz_oJRe4b3S": { - "type": "splunk.markdown", - "options": { - "markdown": "* [Convert a Simple XML dashboard to a Dashboard Studio dashboard](https://docs.splunk.com/Documentation/Splunk/9.1.2/DashStudio/Convert)\n* [Splunk Dashboard Studio Example Hub](https://docs.splunk.com/Documentation/Splunk/9.1.2/DashStudio/ExHub)", - "fontSize": "extraLarge", - "fontFamily": "Splunk Data Sans" - } - }, - "viz_PDaQOM1v": { - "type": "splunk.markdown", - "options": { - "markdown": "As we've added new capabilities to Dashboard Studio, we've also been working hard to ensure we can convert as much as possible from Classic dashboards to Dashboard Studio.", - "fontSize": "extraLarge", - "fontFamily": "Splunk Data Sans" - } - }, - "viz_hxZuIDZx": { - "type": "splunk.rectangle", - "options": { - "strokeColor": "transparent", - "fillColor": "#ED0080", - "rx": 28 - } - }, - "viz_frOE0GWy": { - "type": "splunk.rectangle", - "options": { - "strokeColor": "transparent", - "fillColor": "#ED0080", - "rx": 28 - } - }, - "viz_v1NQ2Lzx": { - "type": "splunk.rectangle", - "options": { - "strokeColor": "transparent", - "fillColor": "#ED0080", - "rx": 28 - } - }, - "viz_DrWZo5rt": { - "type": "splunk.rectangle", - "options": { - "strokeColor": "transparent", - "fillColor": "#ED0080", - "rx": 28 - } - }, - "viz_c3aTfPcq": { - "type": "splunk.markdown", - "options": { - "markdown": "**2**", - "fontSize": "custom", - "customFontSize": 32, - "fontColor": "#ffffff", - "fontFamily": "Splunk Data Sans" - } - }, - "viz_7NYiaDEI": { - "type": "splunk.markdown", - "options": { - "markdown": "**3**", - "fontSize": "custom", - "customFontSize": 32, - "fontColor": "#ffffff", - "fontFamily": "Splunk Data Sans" - } - }, - "viz_NBNx6H5U": { - "type": "splunk.markdown", - "options": { - "markdown": "**4**", - "fontSize": "custom", - "customFontSize": 32, - "fontColor": "#ffffff", - "fontFamily": "Splunk Data Sans" - } - }, - "viz_nr5gCBaH": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "/static/app/search/ootb_dashboard_images/scheduled_export_dashboard/img_step3_conversion_report.png" - } - }, - "viz_8K0zIsKu": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "/static/app/search/ootb_dashboard_images/scheduled_export_dashboard/img_step4_conversion_report_details.png" - } - }, - "viz_x0CYX8dr": { - "type": "splunk.markdown", - "options": { - "markdown": "# **Scheduled export is now available for Dashboard Studio**", - "fontFamily": "Splunk Data Sans", - "fontSize": "custom", - "customFontSize": 24 - } - }, - "viz_v7GaWc3B": { - "type": "splunk.singlevalueicon", - "options": { - "showValue": false, - "icon": "data:image/svg+xml;base64,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" - } - }, - "viz_BxLGZQrA": { - "type": "splunk.singlevalueicon", - "options": { - "showValue": false, - "icon": "data:image/svg+xml;base64,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" - } - }, - "viz_bWKIR3as": { - "type": "splunk.singlevalueicon", - "options": { - "showValue": false, - "icon": "data:image/svg+xml;base64,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" - } - }, - "viz_dT8e5Wkn": { - "type": "splunk.markdown", - "options": { - "markdown": "**1**", - "fontSize": "custom", - "customFontSize": 32, - "fontColor": "#ffffff", - "fontFamily": "Splunk Data Sans" - } - } - }, - "dataSources": { - "ds_YwMNtT5r": { - "type": "ds.search", - "options": { - "queryParameters": { - "earliest": "-24h@h", - "latest": "now" - }, - "query": "| rest /servicesNS/-/-/data/ui/views search=\"rootNode=\"dashboard\" AND version!=2\"\n| rename eai:acl.app as App title as Title author as Author\n| search Author=$dash_owner$ App=$app$\n| table App, Title, Author\n| strcat App \"/\" Title appAndTitle \n| join appAndTitle \n [| rest /servicesNS/-/-/scheduled/views search=\"is_scheduled=1\"\n | rename action.email.pdfview as Title eai:acl.app as App \n | strcat App \"/\" Title appAndTitle \n | fields Title, is_scheduled, App, appAndTitle, is_scheduled] \n| dedup appAndTitle\n| fields App Title Author" - }, - "name": "Search_1" - } - }, - "inputs": { - "input_o9ktWgk8": { - "options": { - "items": [ - { - "label": "Me", - "value": "$env:user$" - }, - { - "label": "All", - "value": "*" - } - ], - "defaultValue": "*", - "token": "dash_owner" - }, - "title": "Dashboard owner", - "type": "input.dropdown" - }, - "input_RFqxOOTP": { - "options": { - "items": [ - { - "label": "Current app", - "value": "$env:app$" - }, - { - "label": "All apps", - "value": "*" - } - ], - "defaultValue": "*", - "token": "app" - }, - "title": "App", - "type": "input.dropdown" - } - }, - "title": "Scheduled export is now available for Dashboard Studio", - "layout": { - "tabs": { - "items": [ - { - "layoutId": "layout_1", - "label": "New tab" - } - ] - }, - "layoutDefinitions": { - "layout_1": { - "type": "absolute", - "options": { - "width": 1400, - "height": 1400 - }, - "structure": [ - { - "item": "viz_PEnzuC6O", - "type": "block", - "position": { - "x": 50, - "y": 240, - "w": 1320, - "h": 40 - } - }, - { - "item": "viz_AJ3zmcH5", - "type": "block", - "position": { - "x": 420, - "y": 1000, - "w": 300, - "h": 130 - } - }, - { - "item": "viz_2EzncWf1", - "type": "block", - "position": { - "x": 750, - "y": 1000, - "w": 300, - "h": 100 - } - }, - { - "item": "viz_8F1OzLSQ", - "type": "block", - "position": { - "x": 1080, - "y": 1000, - "w": 300, - "h": 100 - } - }, - { - "item": "viz_xahk2LxS", - "type": "block", - "position": { - "x": 90, - "y": 1000, - "w": 300, - "h": 160 - } - }, - { - "item": "viz_MJsFPrKe", - "type": "block", - "position": { - "x": 90, - "y": 820, - "w": 300, - "h": 160 - } - }, - { - "item": "viz_RSvTUOja", - "type": "block", - "position": { - "x": 420, - "y": 820, - "w": 300, - "h": 160 - } - }, - { - "item": "viz_WbJd8SDE", - "type": "block", - "position": { - "x": 320, - "y": 660, - "w": 970, - "h": 80 - } - }, - { - "item": "viz_iaOSkDcp", - "type": "block", - "position": { - "x": 240, - "y": 1180, - "w": 800, - "h": 50 - } - }, - { - "item": "viz_oJRe4b3S", - "type": "block", - "position": { - "x": 230, - "y": 1230, - "w": 1060, - "h": 100 - } - }, - { - "item": "viz_PDaQOM1v", - "type": "block", - "position": { - "x": 80, - "y": 160, - "w": 1170, - "h": 70 - } - }, - { - "item": "viz_hxZuIDZx", - "type": "block", - "position": { - "x": 70, - "y": 800, - "w": 56, - "h": 56 - } - }, - { - "item": "viz_frOE0GWy", - "type": "block", - "position": { - "x": 400, - "y": 800, - "w": 56, - "h": 56 - } - }, - { - "item": "viz_nr5gCBaH", - "type": "block", - "position": { - "x": 750, - "y": 820, - "w": 300, - "h": 160 - } - }, - { - "item": "viz_v1NQ2Lzx", - "type": "block", - "position": { - "x": 730, - "y": 800, - "w": 56, - "h": 56 - } - }, - { - "item": "viz_8K0zIsKu", - "type": "block", - "position": { - "x": 1080, - "y": 820, - "w": 300, - "h": 160 - } - }, - { - "item": "viz_DrWZo5rt", - "type": "block", - "position": { - "x": 1060, - "y": 800, - "w": 56, - "h": 56 - } - }, - { - "item": "viz_c3aTfPcq", - "type": "block", - "position": { - "x": 413, - "y": 806, - "w": 31, - "h": 40 - } - }, - { - "item": "viz_7NYiaDEI", - "type": "block", - "position": { - "x": 743, - "y": 806, - "w": 31, - "h": 40 - } - }, - { - "item": "viz_NBNx6H5U", - "type": "block", - "position": { - "x": 1072, - "y": 806, - "w": 31, - "h": 40 - } - }, - { - "item": "viz_bM8KCb0y", - "type": "block", - "position": { - "x": 60, - "y": 350, - "w": 1310, - "h": 280 - } - }, - { - "item": "viz_x0CYX8dr", - "type": "block", - "position": { - "x": 250, - "y": 40, - "w": 950, - "h": 110 - } - }, - { - "item": "viz_v7GaWc3B", - "type": "block", - "position": { - "x": 80, - "y": 620, - "w": 180, - "h": 170 - } - }, - { - "item": "viz_BxLGZQrA", - "type": "block", - "position": { - "x": 70, - "y": 1180, - "w": 140, - "h": 140 - } - }, - { - "item": "viz_bWKIR3as", - "type": "block", - "position": { - "x": 80, - "y": 0, - "w": 160, - "h": 150 - } - }, - { - "item": "viz_dT8e5Wkn", - "type": "block", - "position": { - "x": 83, - "y": 806, - "w": 31, - "h": 40 - } - }, - { - "item": "input_o9ktWgk8", - "type": "input", - "position": { - "x": 60, - "y": 270, - "w": 390, - "h": 82 - } - }, - { - "item": "input_RFqxOOTP", - "type": "input", - "position": { - "x": 450, - "y": 270, - "w": 390, - "h": 82 - } - } - ] - } - }, - "globalInputs": [], - "options": { - "showTitleAndDescription": false - } - } -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_search.xml b/dashboards/trackme_search.xml deleted file mode 100644 index ac2a7281..00000000 --- a/dashboards/trackme_search.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_show_source.xml b/dashboards/trackme_show_source.xml deleted file mode 100644 index 56a2a0a2..00000000 --- a/dashboards/trackme_show_source.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_splunk_archiver_dashboard.xml b/dashboards/trackme_splunk_archiver_dashboard.xml deleted file mode 100644 index 5fa99997..00000000 --- a/dashboards/trackme_splunk_archiver_dashboard.xml +++ /dev/null @@ -1,389 +0,0 @@ -
- - Splunk archiver overview - - - - Archive Summary By Index - - index=_internal source=*splunk_archiver.log* finished | eval last_bucket_time=strftime(latest_bucket_time_secs, "%F %T %z")| eval transfered_mb=remote_bucket_bytes/1000000 | rename splunk_index AS "Splunk Index", virtual_index AS "Archive Index" | stats max(last_bucket_time) as "Latest Archive Bucket Time" sum(transfered_mb) as "Total Transfered MB" sum(buckets_copied) as "Total Buckets Copied" by "Splunk Index", "Archive Index" - 0 - - - - - - - -
- - - - - - Archiving Errors in the Last Day - - index=_internal source=*splunk_archiver.log* earliest=-1d | rex max_match=1000 "\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d+ -\d{4} (?<severity>\w+) " | where severity="ERROR" - - - - - - - - - - - [] - - - - - - - - - -7d@h - now - - - - - splunk_index=" - " - * - ALL - - index=_internal source=*splunk_archiver.log* committed | stats count by splunk_index - 0 - - - splunk_index - splunk_index - - - Buckets Copied - - index=_internal source=*splunk_archiver.log* committed $splunk_idx1$ | timechart count by splunk_index - $field1.earliest$ - $field1.latest$ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ["host","source","sourcetype"] - - - - - - - - - -7d@h - now - - - - - splunk_index=" - " - * - ALL - - index=_internal source=*splunk_archiver.log* committed | stats count by splunk_index - 0 - - - splunk_index - splunk_index - - - Total MB Transferred - - index=_internal source=*splunk_archiver.log* committed "$splunk_idx2$" | eval mb = remote_bucket_bytes/1000000 | timechart sum(mb) by splunk_index - $field2.earliest$ - $field2.latest$ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -7d@h - now - - - - Buckets Update - - index=_internal source=*splunk_archiver.log* committed | rename bucket_name AS "Archived Bucket", splunk_index AS "Splunk Index" | eval mb=round(remote_bucket_bytes/1000000,2) | stats sum(mb) as "Archived Bucket MB" by "Splunk Index", "Archived Bucket" - $field4.earliest$ - $field4.latest$ - - - - - - -
- - - - - - - - -7d@h - now - - - - Errors - - index=_internal source=*splunk_archiver.log* | rex max_match=1000 "\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d+ -\d{4} (?<severity>\w+) " | where severity="ERROR" | timechart count AS errors - $field3.earliest$ - $field3.latest$ - - - - - - - - - - - - - - - - - - - - - - - - - - - - Archiving via coldToFrozen - - - - -7d@h - now - - - - - splunk_index=" - " - * - ALL - - index=_internal source=*splunk_archiver.log* report: buckets_to_freeze_remaining_count buckets_to_freeze_deleted | stats count by splunk_index - 0 - - - splunk_index - splunk_index - - - Archives via coldToFrozen by index - - index=_internal source=*splunk_archiver.log* buckets_to_freeze_remaining_count buckets_to_freeze_deleted report: $splunk_idx3$ | timechart sum(buckets_to_freeze_remaining_count) as "Buckets to freeze", sum(buckets_to_freeze_deleted) as "Buckets frozen" by splunk_index - $field3.earliest$ - $field3.latest$ - - - - - - - - - - - - - - - - - - - - - - - - - - - - MB transfered via coldToFrozen by index - - index=_internal source=*splunk_archiver.log* buckets_to_freeze_size_bytes buckets_to_freeze_deleted_size_bytes report: $splunk_idx3$ | timechart sum(buckets_to_freeze_size_bytes) as "to_freeze", sum(buckets_to_freeze_deleted_size_bytes) as "frozen", by splunk_index | eval "to_freeze_mb"=to_freeze/1000000 | eval frozen_mb=frozen/1000000 | rename to_freeze_mb AS "Remaning diskspace to free (MB)", frozen_mb AS "Frozen transfered (MB)", splunk_index AS "Splunk index" | fields - to_freeze, frozen - $field3.earliest$ - $field3.latest$ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Archiving by host - - - - -7d@h - now - - - - Time spent by host - - index=_internal source=*splunk_archiver.log* Report: | eval secs = total_elapsed_ms/1000 | timechart sum(secs) as "Seconds spent archiving" by host - $time_field5.earliest$ - $time_field5.latest$ - - - - - - - - - - - - - - - - - - - - - - - - - - - Data transferred by host - - index=_internal source=*splunk_archiver.log* Report: | eval mb = remote_bucket_bytes/1000000 | timechart sum(mb) as "Data transferred" by host - $time_field5.earliest$ - $time_field5.latest$ - - - - - - - - - - - - - - - - - - - - - - - - - - - -
\ No newline at end of file diff --git a/dashboards/trackme_table.xml b/dashboards/trackme_table.xml deleted file mode 100644 index 878919bf..00000000 --- a/dashboards/trackme_table.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_audit_adaptive_delay_treshold.xml b/dashboards/trackme_trackMe_audit_adaptive_delay_treshold.xml deleted file mode 100644 index 0ca9c90c..00000000 --- a/dashboards/trackme_trackMe_audit_adaptive_delay_treshold.xml +++ /dev/null @@ -1,446 +0,0 @@ - - - This dashboards audits the activity and behaviour of the adaptive delay thresholding for TrackMe feeds components - .*)\"\n| table _time, log_level, command, _raw\n| sort - _time", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "loggging_events" - }, - "ds_UpugjNjy": { - "type": "ds.search", - "options": { - "query": "index=_internal sourcetype=trackme:custom_commands:trackmesplkadaptivedelay tenant_id=$tk_tenant$ component=$tk_component$\n| rex field=sourcetype \"trackme:custom_commands:(?.*)\"\n| timechart count minspan=5m count limit=0 by log_level", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "events_by_log_level" - }, - "ds_yHwHGBpa": { - "type": "ds.search", - "options": { - "query": "| inputlookup trackme_virtual_tenants | eval keyid=_key\n| where tenant_status=\"enabled\" AND (tenant_dsm_enabled=1 OR tenant_dhm_enabled=1) AND tenant_replica=0\n| stats count by tenant_id\n| sort 0 tenant_id", - "queryParameters": { - "earliest": "-5m", - "latest": "now" - } - }, - "name": "populate_tenants" - }, - "ds_diTMqSWx": { - "type": "ds.search", - "options": { - "query": "`trackme_audit_idx` tenant_id=$tk_tenant$ object_category=$tk_component$ \"automated adaptive delay update\"\n| table _time, tenant_id, object_category, object, action, comment\n| sort - 0 _time | trackmeprettyjson fields=comment", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "audit_adaptive_table" - }, - "ds_o8rZrPBE_ds_UpugjNjy": { - "type": "ds.search", - "options": { - "query": "`trackme_audit_idx` tenant_id=$tk_tenant$ object_category=$tk_component$ \"automated adaptive delay update\"\n| table _time, tenant_id, object_category, object, action, change_type, comment\n| sort - 0 _time | trackmeprettyjson fields=comment\n| spath input=comment\n| rename results.adaptive_delay as adaptive_delay\n| timechart minspan=1m useother=f limit=40 first(adaptive_delay) as adaptive_delay by object", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "overtime_adaptive_actions" - } - }, - "visualizations": { - "viz_table_1": { - "type": "splunk.table", - "options": { - "columnFormat": { - "log_level": { - "data": "> table | seriesByName(\"log_level\") | formatByType(log_levelColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"log_level\") | matchValue(log_levelRowColorsEditorConfig)" - } - }, - "count": 100 - }, - "context": { - "log_levelColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "log_levelRowColorsEditorConfig": [ - { - "match": "WARNING", - "value": "#DD9900" - }, - { - "match": "INFO", - "value": "#00CDAF" - }, - { - "match": "ERROR", - "value": "#FF677B" - }, - { - "match": "DEBUG", - "value": "#009CEB" - } - ] - }, - "dataSources": { - "primary": "ds_search_1" - }, - "title": "Logging:", - "description": "This shows logged events from the adaptive delay threshold backend" - }, - "viz_dtUfQMrD": { - "type": "splunk.column", - "options": { - "stackMode": "stacked", - "seriesColorsByField": "{\"ERROR\": \"#FF677B\", \"WARNING\": \"#DD9900\", \"INFO\": \"#00CDAF\", \"DEBUG\": \"#009CEB\"}" - }, - "dataSources": { - "primary": "ds_UpugjNjy" - }, - "title": "Logging: events by logging level over time", - "description": "This shows events over time shown by their logging level" - }, - "viz_NmxZjn2m": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - } - }, - "viz_QmsYbcgT": { - "type": "splunk.table", - "options": { - "columnFormat": { - "action": { - "data": "> table | seriesByName(\"action\") | formatByType(actionColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"action\") | matchValue(actionRowColorsEditorConfig)" - }, - "comment": { - "data": "> table | seriesByName(\"comment\") | formatByType(commentColumnFormatEditorConfig)" - } - }, - "count": 100 - }, - "context": { - "actionColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "actionRowColorsEditorConfig": [ - { - "match": "WARNING", - "value": "#DD9900" - }, - { - "match": "success", - "value": "#00CDAF" - }, - { - "match": "failure", - "value": "#FF677B" - }, - { - "match": "DEBUG", - "value": "#009CEB" - } - ], - "commentColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - } - }, - "dataSources": { - "primary": "ds_diTMqSWx" - }, - "title": "Adaptive delay threshold audit update traces" - }, - "viz_WWQmnNzo": { - "type": "splunk.column", - "dataSources": { - "primary": "ds_o8rZrPBE_ds_UpugjNjy" - }, - "title": "Adaptive response actions by object", - "description": "This shows actions performed by the adaptive delay backend and the threshold value defined", - "options": { - "dataValuesDisplay": "all", - "xAxisTitleVisibility": "hide", - "yAxisTitleText": "Threshold seconds" - } - }, - "viz_2O9rRdJE": { - "type": "splunk.markdown", - "options": { - "markdown": "# Adaptive Delay Thresholding in TrackMe\n## Behavior:\n- The adaptive threshold tracker monitors the status of feed entities currently in alert due to delay threshold breach (anomaly_reason=delay_threshold_breached). \n- This tracker invokes the command *trackmesplkadaptivedelay* for entities matching specific conditions, which then investigates historical metrics collected by TrackMe.\n\n## Dynamic Threshold Logic Attribution:\n\nAs a basis, TrackMe automatically runs the following mstats search (over 90 days of metrics):\n\n```\n| mstats latest(trackme.splk.feeds.lag_event_sec) as lag_event_sec where `trackme_metrics_idx(mytenant)` tenant_id=\"mytenant\" object_category=\"splk-dsm\" object=\"myobject\" OR object=\"myobject2\" by tenant_id, object_category, object span=5m\n| stats perc95(lag_event_sec) as perc95_lag_event_sec, max(lag_event_sec) as max_lag_event_sec by object\n| foreach *lag_event_sec [ eval <> = round('<>', 0) ]\n| eval perc95_days_unit = perc95_lag_event_sec/86400, perc95_duration = tostring(perc95_lag_event_sec, \"duration\")\n| lookup trackme_dsm_tenant_01-feeds object OUTPUT data_last_lag_seen as current_lag_event_sec\n| where current_lag_event_sec>7200\n| eval diff_perc95 = max_lag_event_sec-perc95_lag_event_sec, diff_duration=tostring(diff_perc95, \"duration\"), diff_proportion=round(diff_perc95/perc95_lag_event_sec*100, 2)\n| where diff_proportion<25\n| eval adaptive_delay = round(max_lag_event_sec/3600, 0) * 3600, adaptive_delay_duration = tostring(adaptive_delay, \"duration\")\n```\n\nTrackMe later on reviews previously updated entities using more sophisticated variations of this logic.\n\n### Further logic and previously processed review:\n\n- TrackMe reviews previously updated entities automatically.\n- Entities updated since less than 4 hours are temporarily ignored.\n- Entities updated since more than 4 hours and within the 24 hours and where the treshold was increased are reviewed for further update.\n- Beyond these conditions, entities updated since the past 7 days are reviewed and updated depending on the conditions.\n\n### Key Tracker Level Arguments: \n\n#### min_delay_sec\n\n- This defines the minimum delay value in seconds for entities to be considered (2 hours by default).\n\n#### max_auto_delay_sec\n\n- This defines the maximal delay value that the adaptive backend can set, if the automated delay calculation go beyond it, this value will be used instead, expressed in seconds.\n\n#### max_changes_past_7days\n\n- This defines the maximal number of changes that can be performed in a 7 days time frame, once reached we will not update this entity again until the counter is reset.\n\n#### min_historical_metrics_days\n\n- The minimal number of accumulated days of metrics before we start updating the delay threshold, expressed in days.\n\n#### review_period_no_days\n\n- The relative time period for review. When entities were updated, TrackMe will review over time the behaviour and eventually adapt the threshold to take into accoount new patterns, expressed in number of days, valid options: 7, 15, 30.\n\n### Updating Delay Thresholds Automatically:\n\n- After performing these investigations, the command updates the delay threshold value for selected entities, and generates an audit record with corresponding results (context: automated adaptive delay update).\n- Audit messages can be found with the following search:\n\n*Example:*\n\n```\n`trackme_audit_idx` tenant_id=* \"automated adaptive delay update\"\n| table _time, tenant_id, object_category, object, action, comment\n| sort - 0 _time | trackmeprettyjson fields=comment\n```\n\nActivity log traces can be found in:\n\n```\nindex=_internal sourcetype=trackme:custom_commands:trackmesplkadaptivedelay\n```\n\n### Preventing an Entity from Being Automatically Managed\n\n- Via the UI, you can set the value of ``allow_adaptive_delay`` to False, which prevents TrackMe from automatically updating the delay threshold for a given entity." - } - }, - "viz_NUqP7Fjk": { - "type": "abslayout.line", - "options": { - "strokeDasharray": 4 - } - }, - "viz_XMHDnORn": { - "type": "abslayout.line", - "options": { - "strokeDasharray": 4 - } - }, - "viz_IuV33TS1": { - "type": "splunk.markdown", - "options": { - "markdown": "# Adaptive threshold audit traces" - } - }, - "viz_IiBC8GdB": { - "type": "splunk.markdown", - "options": { - "markdown": "# Adaptive threshold logging traces" - } - }, - "viz_eCsTg4eC": { - "type": "abslayout.line", - "options": { - "strokeDasharray": 4 - } - } - }, - "inputs": { - "input_global_trp": { - "type": "input.timerange", - "options": { - "token": "global_time", - "defaultValue": "-24h@h,now" - }, - "title": "Global Time Range:" - }, - "input_kquudf7q": { - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "defaultValue": "*", - "token": "tk_tenant" - }, - "title": "Tenant:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_yHwHGBpa" - }, - "context": { - "formattedConfig": { - "number": { - "prefix": "" - } - }, - "formattedStatics": ">statics | formatByType(formattedConfig)", - "statics": [ - [ - "All" - ], - [ - "*" - ] - ], - "label": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "value": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"value\") | formatByType(formattedConfig)" - } - }, - "input_xdlNmvhR": { - "options": { - "items": [ - { - "label": "All", - "value": "*" - }, - { - "label": "splk-dsm", - "value": "splk-dsm" - }, - { - "label": "splk-dhm", - "value": "splk-dhm" - } - ], - "defaultValue": "*", - "token": "tk_component" - }, - "title": "Component:", - "type": "input.dropdown" - } - }, - "layout": { - "type": "absolute", - "options": { - "display": "auto-scale", - "width": 1330, - "height": 3400 - }, - "structure": [ - { - "item": "viz_table_1", - "type": "block", - "position": { - "x": 10, - "y": 2760, - "w": 1310, - "h": 600 - } - }, - { - "item": "viz_dtUfQMrD", - "type": "block", - "position": { - "x": 10, - "y": 2320, - "w": 1310, - "h": 430 - } - }, - { - "item": "viz_NmxZjn2m", - "type": "block", - "position": { - "x": 1190, - "y": -90, - "w": 120, - "h": 300 - } - }, - { - "item": "viz_QmsYbcgT", - "type": "block", - "position": { - "x": 10, - "y": 1490, - "w": 1310, - "h": 720 - } - }, - { - "item": "viz_WWQmnNzo", - "type": "block", - "position": { - "x": 10, - "y": 1040, - "w": 1310, - "h": 430 - } - }, - { - "item": "viz_2O9rRdJE", - "type": "block", - "position": { - "x": 10, - "y": 30, - "w": 1310, - "h": 920 - } - }, - { - "item": "viz_NUqP7Fjk", - "type": "line", - "position": { - "from": { - "x": 7, - "y": 16 - }, - "to": { - "x": 1323, - "y": 15 - } - } - }, - { - "item": "viz_XMHDnORn", - "type": "line", - "position": { - "from": { - "x": 9, - "y": 968 - }, - "to": { - "x": 1322, - "y": 968 - } - } - }, - { - "item": "viz_IuV33TS1", - "type": "block", - "position": { - "x": 10, - "y": 980, - "w": 510, - "h": 40 - } - }, - { - "item": "viz_IiBC8GdB", - "type": "block", - "position": { - "x": 10, - "y": 2260, - "w": 510, - "h": 40 - } - }, - { - "item": "viz_eCsTg4eC", - "type": "line", - "position": { - "from": { - "x": 10, - "y": 2246 - }, - "to": { - "x": 1325, - "y": 2245 - } - } - } - ], - "globalInputs": [ - "input_global_trp", - "input_kquudf7q", - "input_xdlNmvhR" - ] - }, - "title": "TrackMe - Adaptive delay threshold audit (global audit)", - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "latest": "$global_time.latest$", - "earliest": "$global_time.earliest$" - } - } - } - } - }, - "description": "This dashboards audits the activity and behaviour of the adaptive delay thresholding for TrackMe feeds components" -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_audit_adaptive_delay_treshold_adjustments.xml b/dashboards/trackme_trackMe_audit_adaptive_delay_treshold_adjustments.xml deleted file mode 100644 index aa7370c2..00000000 --- a/dashboards/trackme_trackMe_audit_adaptive_delay_treshold_adjustments.xml +++ /dev/null @@ -1,531 +0,0 @@ - - - This dashboards audits the activity and behaviour of the adaptive delay thresholding for TrackMe feeds components, focusing on the adjustments made by TrackMe - =0.1, \"Threshold Raised\")\n| eval object=mvdedup(object)\n| eval time=strftime(_time, \"%c\")\n| table time object data_index data_sourcetype max_lag_event_sec adaptive_delay diff direction \n| rename max_lag_event_sec as \"Previous Threshold\" adaptive_delay as \"New Threshold\" diff as \"Adjustment\" direction as \"Status\" data_index as \"Index\" data_sourcetype as \"Sourcetype\"", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "adjustments_table" - }, - "ds_UpugjNjy": { - "type": "ds.search", - "options": { - "query": "index=_internal sourcetype=trackme:custom_commands:trackmesplkadaptivedelay tenant_id=$tk_tenant$ component=$tk_component$\n| rex field=sourcetype \"trackme:custom_commands:(?.*)\"\n| timechart count minspan=5m count limit=0 by log_level", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "events_by_log_level" - }, - "ds_yHwHGBpa": { - "type": "ds.search", - "options": { - "query": "| inputlookup trackme_virtual_tenants | eval keyid=_key\n| where tenant_status=\"enabled\" AND (tenant_dsm_enabled=1 OR tenant_dhm_enabled=1) AND tenant_replica=0\n| stats count by tenant_id\n| sort 0 tenant_id", - "queryParameters": { - "earliest": "-5m", - "latest": "now" - } - }, - "name": "populate_tenants" - }, - "ds_diTMqSWx": { - "type": "ds.search", - "options": { - "query": "`trackme_audit_idx` tenant_id=$tk_tenant$ object_category=$tk_component$ \"automated adaptive delay update\"\n| table _time, tenant_id, object_category, object, action, comment\n| sort - 0 _time | trackmeprettyjson fields=comment", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "audit_adaptive_table" - }, - "ds_o8rZrPBE_ds_UpugjNjy": { - "type": "ds.search", - "options": { - "query": "`trackme_audit_idx` tenant_id=$tk_tenant$ object_category=$tk_component$ object=\"*$tk_object$*\" \"automated adaptive delay update\"\n| table _time, tenant_id, object_category, object, action, change_type, comment\n| sort - 0 _time | trackmeprettyjson fields=comment\n| spath input=comment\n| rename results.adaptive_delay as adaptive_delay, results.current_max_lag_event_sec as max_lag_event_sec\n| $tk_threshold_direction$\n| eval adaptive_delay=(adaptive_delay/3600)\n| timechart span=1h useother=f limit=40 latest(adaptive_delay) as adaptive_delay by object", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "overtime_threshold_definitions" - }, - "ds_5CWZWtVu_ds_o8rZrPBE_ds_UpugjNjy": { - "type": "ds.search", - "options": { - "query": "`trackme_audit_idx` tenant_id=$tk_tenant$ object_category=$tk_component$ object=\"*$tk_object$*\" \"automated adaptive delay update\"\n| table _time, tenant_id, object_category, object, action, change_type, comment\n| sort - 0 _time | trackmeprettyjson fields=comment\n| spath input=comment\n| rename results.adaptive_delay as adaptive_delay results.current_max_lag_event_sec as max_lag_event_sec\n| $tk_threshold_direction$\n| eval adaptive_delay=(adaptive_delay/3600)\n| eval max_lag_event_sec=(max_lag_event_sec/3600)\n| eval diff=(adaptive_delay-max_lag_event_sec)\n| eval direction=case(diff<=0.0, \"Lowered Threshold\", diff>=0.1, \"Raised Threshold\")\n| table _time object max_lag_event_sec adaptive_delay diff direction\n| timechart span=1h useother=f limit=40 last(diff) by object", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "overtime_threshold_adjustments" - }, - "ds_38boaB5k": { - "type": "ds.search", - "options": { - "query": "`trackme_audit_idx` tenant_id=$tk_tenant$ object_category=$tk_component$ \"automated adaptive delay update\"\n| stats count by object \n| fields object\n| sort 10000 object ", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "populate_objects" - } - }, - "visualizations": { - "viz_table_1": { - "type": "splunk.table", - "options": { - "columnFormat": { - "log_level": { - "data": "> table | seriesByName(\"log_level\") | formatByType(log_levelColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"log_level\") | matchValue(log_levelRowColorsEditorConfig)" - }, - "Status": { - "data": "> table | seriesByName(\"Status\") | formatByType(StatusColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName('Status') | pick(StatusRowColorsEditorConfig)", - "rowBackgroundColors": "> table | seriesByName(\"Status\") | matchValue(StatusRowBackgroundColorsEditorConfig)" - }, - "Adjustment": { - "data": "> table | seriesByName(\"Adjustment\") | formatByType(AdjustmentColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName('Adjustment') | pick(AdjustmentRowColorsEditorConfig)", - "rowBackgroundColors": "> table | seriesByName(\"Adjustment\") | rangeValue(AdjustmentRowBackgroundColorsEditorConfig)" - }, - "Index": { - "data": "> table | seriesByName(\"Index\") | formatByType(IndexColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName('Index') | pick(IndexRowColorsEditorConfig)", - "rowBackgroundColors": "> table | seriesByName(\"Index\") | matchValue(IndexRowBackgroundColorsEditorConfig)" - } - }, - "count": 100 - }, - "context": { - "log_levelColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "log_levelRowColorsEditorConfig": [ - { - "match": "WARNING", - "value": "#DD9900" - }, - { - "match": "INFO", - "value": "#00CDAF" - }, - { - "match": "ERROR", - "value": "#FF677B" - }, - { - "match": "DEBUG", - "value": "#009CEB" - } - ], - "StatusColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "StatusRowColorsEditorConfig": [ - "#ffffff" - ], - "StatusRowBackgroundColorsEditorConfig": [ - { - "match": "Threshold Lowered", - "value": "#45d4ba" - }, - { - "match": "Threshold Raised", - "value": "#e85b79" - } - ], - "AdjustmentColumnFormatEditorConfig": { - "number": { - "thousandSeparated": false, - "unitPosition": "after", - "unit": "Hours" - } - }, - "AdjustmentRowColorsEditorConfig": [ - "#ffffff" - ], - "AdjustmentRowBackgroundColorsEditorConfig": [ - { - "value": "#45d4ba", - "to": 0 - }, - { - "value": "#e85b79", - "from": 0 - } - ], - "IndexColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "IndexRowColorsEditorConfig": [ - "#ffffff" - ], - "IndexRowBackgroundColorsEditorConfig": [ - { - "match": "", - "value": "#5C33FF" - } - ] - }, - "dataSources": { - "primary": "ds_search_1" - }, - "title": "Delay threshold adjustment summary table", - "description": "This shows on a per object basis the delay treshold adjustments" - }, - "viz_NmxZjn2m": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - } - }, - "viz_WWQmnNzo": { - "type": "splunk.column", - "dataSources": { - "primary": "ds_o8rZrPBE_ds_UpugjNjy" - }, - "title": "Thesholds values defined over time", - "description": "This chart shows the values in hours defined by the adaptive threshold backend", - "options": { - "dataValuesDisplay": "all", - "xAxisTitleVisibility": "hide", - "yAxisTitleText": "Threshold (hours)" - } - }, - "viz_XMHDnORn": { - "type": "abslayout.line", - "options": { - "strokeDasharray": 4 - } - }, - "viz_IuV33TS1": { - "type": "splunk.markdown", - "options": { - "markdown": "# Adaptive threshold - Values affection" - } - }, - "viz_IiBC8GdB": { - "type": "splunk.markdown", - "options": { - "markdown": "# Adaptive threshold - Per object adjustments table" - } - }, - "viz_eCsTg4eC": { - "type": "abslayout.line", - "options": { - "strokeDasharray": 4 - } - }, - "viz_kO1eWbMD": { - "type": "abslayout.line", - "options": { - "strokeDasharray": 4 - } - }, - "viz_sXg5MxlA": { - "type": "splunk.markdown", - "options": { - "markdown": "# Adaptive threshold - Adjustments" - } - }, - "viz_xvoBZnIV": { - "type": "splunk.column", - "dataSources": { - "primary": "ds_5CWZWtVu_ds_o8rZrPBE_ds_UpugjNjy" - }, - "title": "Thesholds values variations over time (increase or decrease)", - "description": "This chart shows the variation of the threshold adjustments (in hours)", - "options": { - "dataValuesDisplay": "all", - "xAxisTitleVisibility": "hide", - "yAxisTitleText": "Threshold (hours)" - } - } - }, - "inputs": { - "input_global_trp": { - "type": "input.timerange", - "options": { - "token": "global_time", - "defaultValue": "-24h@h,now" - }, - "title": "Global Time Range:" - }, - "input_kquudf7q": { - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "defaultValue": "*", - "token": "tk_tenant" - }, - "title": "Tenant:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_yHwHGBpa" - }, - "context": { - "formattedConfig": { - "number": { - "prefix": "" - } - }, - "formattedStatics": ">statics | formatByType(formattedConfig)", - "statics": [ - [ - "All" - ], - [ - "*" - ] - ], - "label": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "value": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"value\") | formatByType(formattedConfig)" - } - }, - "input_xdlNmvhR": { - "options": { - "items": [ - { - "label": "All", - "value": "*" - }, - { - "label": "splk-dsm", - "value": "splk-dsm" - }, - { - "label": "splk-dhm", - "value": "splk-dhm" - } - ], - "defaultValue": "*", - "token": "tk_component" - }, - "title": "Component:", - "type": "input.dropdown" - }, - "input_RmMD0viP": { - "options": { - "items": [ - { - "label": "All", - "value": "search adaptive_delay=*" - }, - { - "label": "Threshold Raised", - "value": "where adaptive_delay > max_lag_event_sec" - }, - { - "label": "Threshold Lowered", - "value": "where adaptive_delay < max_lag_event_sec" - } - ], - "defaultValue": "search adaptive_delay=*", - "token": "tk_threshold_direction" - }, - "title": "Threshold Movement:", - "type": "input.dropdown" - }, - "input_eoNRWtyI": { - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "defaultValue": "*", - "token": "tk_object" - }, - "title": "Object:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_38boaB5k" - }, - "context": { - "formattedConfig": { - "number": { - "prefix": "" - } - }, - "formattedStatics": ">statics | formatByType(formattedConfig)", - "statics": [ - [ - "All" - ], - [ - "*" - ] - ], - "label": ">primary | seriesByName(\"object\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "value": ">primary | seriesByName(\"object\") | renameSeries(\"value\") | formatByType(formattedConfig)" - } - } - }, - "layout": { - "type": "absolute", - "options": { - "display": "auto-scale", - "width": 2660, - "height": 1650 - }, - "structure": [ - { - "item": "viz_table_1", - "type": "block", - "position": { - "x": 10, - "y": 710, - "w": 2638, - "h": 900 - } - }, - { - "item": "viz_NmxZjn2m", - "type": "block", - "position": { - "x": 2530, - "y": -90, - "w": 120, - "h": 300 - } - }, - { - "item": "viz_WWQmnNzo", - "type": "block", - "position": { - "x": 10, - "y": 170, - "w": 1310, - "h": 430 - } - }, - { - "item": "viz_XMHDnORn", - "type": "line", - "position": { - "from": { - "x": 12, - "y": 107 - }, - "to": { - "x": 1325, - "y": 107 - } - } - }, - { - "item": "viz_IuV33TS1", - "type": "block", - "position": { - "x": 10, - "y": 120, - "w": 510, - "h": 40 - } - }, - { - "item": "viz_IiBC8GdB", - "type": "block", - "position": { - "x": 10, - "y": 660, - "w": 650, - "h": 40 - } - }, - { - "item": "viz_eCsTg4eC", - "type": "line", - "position": { - "from": { - "x": 16, - "y": 637 - }, - "to": { - "x": 2643, - "y": 633 - } - } - }, - { - "item": "viz_kO1eWbMD", - "type": "line", - "position": { - "from": { - "x": 1336, - "y": 107 - }, - "to": { - "x": 2649, - "y": 107 - } - } - }, - { - "item": "viz_sXg5MxlA", - "type": "block", - "position": { - "x": 1350, - "y": 120, - "w": 510, - "h": 40 - } - }, - { - "item": "viz_xvoBZnIV", - "type": "block", - "position": { - "x": 1340, - "y": 170, - "w": 1310, - "h": 430 - } - } - ], - "globalInputs": [ - "input_global_trp", - "input_kquudf7q", - "input_xdlNmvhR", - "input_RmMD0viP", - "input_eoNRWtyI" - ] - }, - "title": "TrackMe - Adaptive delay threshold audit (adjustments audit)", - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "latest": "$global_time.latest$", - "earliest": "$global_time.earliest$" - } - } - } - } - }, - "description": "This dashboards audits the activity and behaviour of the adaptive delay thresholding for TrackMe feeds components, focusing on the adjustments made by TrackMe" -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_audit_data_sampling.xml b/dashboards/trackme_trackMe_audit_data_sampling.xml deleted file mode 100644 index 6e9154d0..00000000 --- a/dashboards/trackme_trackMe_audit_data_sampling.xml +++ /dev/null @@ -1,659 +0,0 @@ - - - This auditing dashboard investigates the Data sampling feature results for the splk-dsm component - statics | formatByType(formattedConfig)", - "label": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "statics": [], - "value": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"value\") | formatByType(formattedConfig)" - }, - "dataSources": { - "primary": "ds_Mg04DNO6" - }, - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "token": "tk_tenant_id" - }, - "title": "tenant_id:", - "type": "input.dropdown" - }, - "input_oTEsZboP": { - "options": { - "items": [ - { - "label": "Any", - "value": "*" - }, - { - "label": "Red", - "value": "red" - }, - { - "label": "Orange", - "value": "orange" - }, - { - "label": "Green", - "value": "green" - } - ], - "defaultValue": "*", - "token": "tk_table_state" - }, - "title": "Filter table state:", - "type": "input.dropdown" - } - }, - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - } - } - } - }, - "visualizations": { - "viz_0VdLX51C": { - "context": { - "log_levelColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "log_levelRowColorsEditorConfig": [ - { - "match": "WARN", - "value": "#ad3f20" - }, - { - "match": "INFO", - "value": "#207865" - }, - { - "match": "ERROR", - "value": "#78062a" - }, - { - "match": "DEBUG", - "value": "#003E80" - } - ] - }, - "dataSources": { - "primary": "ds_UUNZ1UyX" - }, - "description": "The Data Sampling relies on the executor command, which logs its activity in the _internal index", - "options": { - "columnFormat": { - "log_level": { - "data": "> table | seriesByName(\"log_level\") | formatByType(log_levelColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"log_level\") | matchValue(log_levelRowColorsEditorConfig)" - } - } - }, - "title": "Data Sampling executor traces", - "type": "splunk.table" - }, - "viz_1KpygY1l": { - "dataSources": { - "primary": "ds_5DyDRYLq" - }, - "description": "", - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "backgroundColor": "transparent" - }, - "type": "splunk.singlevalue", - "context": { - "majorColorEditorConfig": [ - { - "value": "#e85b79", - "to": 1 - }, - { - "value": "#e85b79", - "from": 1 - } - ] - } - }, - "viz_29HlXL59": { - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - }, - "type": "splunk.image" - }, - "viz_NrwggSYV": { - "dataSources": { - "primary": "ds_bR5fXLDt" - }, - "description": "", - "options": { - "backgroundColor": "transparent" - }, - "type": "splunk.singlevalue" - }, - "viz_QUYYEwXs": { - "options": { - "markdown": "count red" - }, - "type": "splunk.markdown" - }, - "viz_QpszSdhB": { - "options": { - "markdown": "count green" - }, - "type": "splunk.markdown" - }, - "viz_RLPXFcGI": { - "dataSources": { - "primary": "ds_XY84LN0B" - }, - "description": "", - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "backgroundColor": "transparent" - }, - "type": "splunk.singlevalue", - "context": { - "majorColorEditorConfig": [ - { - "value": "#45d4ba", - "to": 1 - }, - { - "value": "#45d4ba", - "from": 1 - } - ] - } - }, - "viz_SSK3aVIG": { - "options": { - "markdown": "count orange" - }, - "type": "splunk.markdown" - }, - "viz_a1weqXVe": { - "options": { - "markdown": "Number of objects in the sampling collection" - }, - "type": "splunk.markdown" - }, - "viz_bkulEsvV": { - "dataSources": { - "primary": "ds_DgZ9kw8T" - }, - "description": "", - "options": { - "backgroundColor": "transparent" - }, - "type": "splunk.singlevalue" - }, - "viz_cBYvB8Yy": { - "dataSources": { - "primary": "ds_lj3w1XsH" - }, - "description": "", - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "backgroundColor": "transparent" - }, - "type": "splunk.singlevalue", - "context": { - "majorColorEditorConfig": [ - { - "value": "#fb865c", - "to": 1 - }, - { - "value": "#fb865c", - "from": 1 - } - ] - } - }, - "viz_dJ5VhJet": { - "options": { - "markdown": "Number of objects with Sampling disabled" - }, - "type": "splunk.markdown" - }, - "viz_dOpjvgGS": { - "dataSources": { - "primary": "ds_K19CzomZ" - }, - "description": "", - "options": { - "backgroundColor": "transparent" - }, - "type": "splunk.singlevalue" - }, - "viz_kkzyyTTf": { - "context": { - "data_sample_anomaly_reasonColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "data_sample_anomaly_reasonRowColorsEditorConfig": [ - { - "match": "normal", - "value": "#45d4ba" - } - ], - "data_sample_featureColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "data_sample_featureRowColorsEditorConfig": [ - { - "match": "disabled", - "value": "#555555" - }, - { - "match": "enabled", - "value": "#207865" - } - ], - "data_sample_status_colourColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "data_sample_status_colourRowColorsEditorConfig": [ - { - "match": "green", - "value": "#45d4ba" - }, - { - "match": "red", - "value": "#e85b79" - }, - { - "match": "orange", - "value": "#fb865c" - } - ] - }, - "dataSources": { - "primary": "ds_GmbiRmaY" - }, - "description": "Consolatited view - This table shows the consolidated status of the Data Sampling feature per entity", - "eventHandlers": [], - "options": { - "columnFormat": { - "data_sample_anomaly_reason": { - "data": "> table | seriesByName(\"data_sample_anomaly_reason\") | formatByType(data_sample_anomaly_reasonColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"data_sample_anomaly_reason\") | matchValue(data_sample_anomaly_reasonRowColorsEditorConfig)" - }, - "data_sample_feature": { - "data": "> table | seriesByName(\"data_sample_feature\") | formatByType(data_sample_featureColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"data_sample_feature\") | matchValue(data_sample_featureRowColorsEditorConfig)" - }, - "data_sample_status_colour": { - "data": "> table | seriesByName(\"data_sample_status_colour\") | formatByType(data_sample_status_colourColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"data_sample_status_colour\") | matchValue(data_sample_status_colourRowColorsEditorConfig)" - }, - "object": { - "width": 450 - }, - "object_category": { - "width": 150 - } - }, - "count": 50 - }, - "title": "Data Sampling overview", - "type": "splunk.table" - }, - "viz_sQRatSih": { - "options": { - "markdown": "Number of objects with Sampling enabled" - }, - "type": "splunk.markdown" - } - }, - "dataSources": { - "ds_0iOI8jft": { - "name": "count_by_status", - "options": { - "query": "| inputlookup trackme_dsm_data_sampling_tenant_$tk_tenant_id$ \n| eval key=_key | fields - raw_sample\n| lookup trackme_dsm_tenant_$tk_tenant_id$ object OUTPUT monitored_state\n| where monitored_state=\"enabled\"\n| where data_sample_feature=\"enabled\"\n| stats count(eval(data_sample_status_colour==\"green\")) as count_green, count(eval(data_sample_status_colour==\"orange\")) as count_orange, count(eval(data_sample_status_colour==\"red\")) as count_red" - }, - "type": "ds.search" - }, - "ds_5DyDRYLq": { - "name": "count_red", - "options": { - "extend": "ds_0iOI8jft", - "query": "fields count_red" - }, - "type": "ds.chain" - }, - "ds_8GZdWK3Q": { - "name": "no_red_state", - "options": { - "query": "| inputlookup trackme_dsm_data_sampling_tenant_$tk_tenant_id$ \n| eval key=_key | fields - raw_sample\n| lookup trackme_dsm_tenant_$tk_tenant_id$ object OUTPUT monitored_state\n| where monitored_state=\"enabled\"\n| where data_sample_status_colour=\"red\"\n| stats dc(object) as dcount" - }, - "type": "ds.search" - }, - "ds_DgZ9kw8T": { - "name": "no_sampling_disabled", - "options": { - "query": "| inputlookup trackme_dsm_data_sampling_tenant_$tk_tenant_id$ \n| eval key=_key | fields - raw_sample\n| lookup trackme_dsm_tenant_$tk_tenant_id$ object OUTPUT monitored_state\n| where monitored_state=\"enabled\"\n| where data_sample_feature=\"disabled\"\n| stats dc(object) as dcount" - }, - "type": "ds.search" - }, - "ds_GmbiRmaY": { - "name": "table_sampling", - "options": { - "query": "| inputlookup trackme_dsm_data_sampling_tenant_$tk_tenant_id$ \n| eval key=_key | fields - raw_sample\n| lookup trackme_dsm_tenant_$tk_tenant_id$ object OUTPUT monitored_state\n| where monitored_state=\"enabled\"\n| table object, data_sample_mtime, data_sample_feature, data_sample_status_colour, data_sample_anomaly_reason, current_detected_format, current_detected_format_dcount\n| sort 0 - data_sample_mtime\n| eval data_sample_mtime=strftime(data_sample_mtime, \"%c\")\n| search object=\"$tk_object$\"\n| search data_sample_status_colour=\"$tk_table_state$\"", - "queryParameters": { - "earliest": "-5m", - "latest": "now" - } - }, - "type": "ds.search" - }, - "ds_K19CzomZ": { - "name": "no_objects", - "options": { - "query": "| inputlookup trackme_dsm_data_sampling_tenant_$tk_tenant_id$ \n| eval key=_key | fields - raw_sample\n| lookup trackme_dsm_tenant_$tk_tenant_id$ object OUTPUT monitored_state\n| where monitored_state=\"enabled\"\n| stats dc(object) as dcount" - }, - "type": "ds.search" - }, - "ds_Mg04DNO6": { - "name": "populate_tenants", - "options": { - "query": "| trackmeload mode=expanded | table _raw | spath | fields - _raw | fillnull tenant_replica | search tenant_dsm_enabled=1 AND tenant_replica!=1 | table tenant_id \n| sort 0 tenant_id", - "queryParameters": { - "earliest": "-24h@h", - "latest": "now" - } - }, - "type": "ds.search" - }, - "ds_Pw0K27lq": { - "name": "populate_objects", - "options": { - "query": "| inputlookup trackme_dsm_data_sampling_tenant_$tk_tenant_id$\n| stats c by object \n| table object \n| sort 0 object", - "queryParameters": { - "earliest": "-5m", - "latest": "now" - } - }, - "type": "ds.search" - }, - "ds_UUNZ1UyX": { - "name": "executor_traces", - "options": { - "query": "index=_internal sourcetype=trackme:custom_commands:trackmesamplingexecutor tenant_id=\"$tk_tenant_id$\"\n| sort - _time\n| eval time=strftime(_time, \"%c\")\n| table time, log_level, _raw", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "type": "ds.search" - }, - "ds_XY84LN0B": { - "name": "count_green", - "options": { - "extend": "ds_0iOI8jft", - "query": "fields count_green" - }, - "type": "ds.chain" - }, - "ds_bR5fXLDt": { - "name": "no_sampling_enabled", - "options": { - "query": "| inputlookup trackme_dsm_data_sampling_tenant_$tk_tenant_id$ \n| eval key=_key | fields - raw_sample\n| lookup trackme_dsm_tenant_$tk_tenant_id$ object OUTPUT monitored_state\n| where monitored_state=\"enabled\"\n| where data_sample_feature=\"enabled\"\n| stats dc(object) as dcount" - }, - "type": "ds.search" - }, - "ds_lj3w1XsH": { - "name": "count_orange", - "options": { - "extend": "ds_0iOI8jft", - "query": "fields count_orange" - }, - "type": "ds.chain" - } - }, - "layout": { - "globalInputs": [ - "input_global_trp", - "input_uHIQHlyb", - "input_TgtFblSG", - "input_oTEsZboP" - ], - "layoutDefinitions": { - "layout_1": { - "options": { - "height": 1650, - "width": 2660 - }, - "structure": [ - { - "item": "viz_29HlXL59", - "position": { - "h": 60, - "w": 120, - "x": 2530, - "y": 40 - }, - "type": "block" - }, - { - "item": "viz_kkzyyTTf", - "position": { - "h": 1130, - "w": 2660, - "x": 0, - "y": 160 - }, - "type": "block" - }, - { - "item": "viz_dOpjvgGS", - "position": { - "h": 90, - "w": 170, - "x": 130, - "y": 20 - }, - "type": "block" - }, - { - "item": "viz_a1weqXVe", - "position": { - "h": 50, - "w": 300, - "x": 70, - "y": 100 - }, - "type": "block" - }, - { - "item": "viz_bkulEsvV", - "position": { - "h": 90, - "w": 170, - "x": 560, - "y": 20 - }, - "type": "block" - }, - { - "item": "viz_dJ5VhJet", - "position": { - "h": 50, - "w": 300, - "x": 510, - "y": 100 - }, - "type": "block" - }, - { - "item": "viz_NrwggSYV", - "position": { - "h": 90, - "w": 170, - "x": 1030, - "y": 20 - }, - "type": "block" - }, - { - "item": "viz_sQRatSih", - "position": { - "h": 50, - "w": 300, - "x": 970, - "y": 100 - }, - "type": "block" - }, - { - "item": "viz_RLPXFcGI", - "position": { - "h": 90, - "w": 170, - "x": 1450, - "y": 20 - }, - "type": "block" - }, - { - "item": "viz_cBYvB8Yy", - "position": { - "h": 90, - "w": 170, - "x": 1830, - "y": 20 - }, - "type": "block" - }, - { - "item": "viz_1KpygY1l", - "position": { - "h": 90, - "w": 170, - "x": 2210, - "y": 20 - }, - "type": "block" - }, - { - "item": "viz_QpszSdhB", - "position": { - "h": 30, - "w": 90, - "x": 1490, - "y": 100 - }, - "type": "block" - }, - { - "item": "viz_SSK3aVIG", - "position": { - "h": 30, - "w": 110, - "x": 1870, - "y": 100 - }, - "type": "block" - }, - { - "item": "viz_QUYYEwXs", - "position": { - "h": 30, - "w": 110, - "x": 2260, - "y": 100 - }, - "type": "block" - } - ], - "type": "absolute" - }, - "layout_s7i54pGX": { - "type": "grid", - "structure": [ - { - "item": "viz_0VdLX51C", - "type": "block", - "position": { - "x": 0, - "y": 0, - "w": 1200, - "h": 1374 - } - } - ] - } - }, - "tabs": { - "items": [ - { - "label": "Overview and status", - "layoutId": "layout_1" - }, - { - "layoutId": "layout_s7i54pGX", - "label": "Logs backend" - } - ] - } - } -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_audit_ops.xml b/dashboards/trackme_trackMe_audit_ops.xml deleted file mode 100644 index 40e29ae4..00000000 --- a/dashboards/trackme_trackMe_audit_ops.xml +++ /dev/null @@ -1,380 +0,0 @@ - - - - table | seriesByName(\"status\") | formatByType(statusColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"status\") | matchValue(statusRowColorsEditorConfig)" - } - } - }, - "context": { - "statusColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "statusRowColorsEditorConfig": [ - { - "match": "DEGRADED", - "value": "#e85b79" - }, - { - "match": "OPERATIONAL", - "value": "#45D4BA" - } - ] - } - }, - "viz_6upLcH5E": { - "type": "splunk.column", - "title": "Over time tenants degradation events", - "description": "Degradation events happen when the register component reports a failure on a TrackMe job", - "dataSources": { - "primary": "ds_8HIte7Mj" - }, - "options": { - "stackMode": "stacked", - "dataValuesDisplay": "all" - } - }, - "viz_K39k1shE": { - "type": "splunk.singlevalue", - "dataSources": { - "primary": "ds_gq9ZqVBS" - }, - "title": "# Degraded Tenants", - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "trendColor": "#45d4ba" - }, - "context": { - "majorColorEditorConfig": [ - { - "value": "#4fa484", - "to": 1 - }, - { - "value": "#e85b79", - "from": 1 - } - ] - } - }, - "viz_28VB9M4d": { - "type": "splunk.singlevalue", - "dataSources": { - "primary": "ds_QI1wSZxd" - }, - "title": "# Active Tenants", - "description": "", - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)" - }, - "context": { - "majorColorEditorConfig": [ - { - "value": "#e85b79", - "to": 1 - }, - { - "value": "#45d4ba", - "from": 1 - } - ] - } - }, - "viz_cvPBsXSu": { - "type": "splunk.table", - "dataSources": { - "primary": "ds_NjWl6NcX" - }, - "options": { - "columnFormat": { - "overall_ops_pct": { - "data": "> table | seriesByName(\"overall_ops_pct\") | formatByType(overall_ops_pctColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"overall_ops_pct\") | rangeValue(overall_ops_pctRowColorsEditorConfig)" - }, - "status": { - "data": "> table | seriesByName(\"status\") | formatByType(statusColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"status\") | matchValue(statusRowColorsEditorConfig)" - } - } - }, - "context": { - "overall_ops_pctColumnFormatEditorConfig": { - "number": { - "thousandSeparated": false, - "unitPosition": "after" - } - }, - "overall_ops_pctRowColorsEditorConfig": [ - { - "value": "#FE3A3A", - "to": 100 - }, - { - "value": "#45d4ba", - "from": 100 - } - ], - "statusColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "statusRowColorsEditorConfig": [ - { - "match": "OPERATIONAL", - "value": "#45d4ba" - }, - { - "match": "DEGRADED", - "value": "#e85b79" - } - ] - }, - "title": "Detailed job component register statuses" - }, - "viz_FUEI8OpS": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - } - } - }, - "inputs": { - "input_global_trp": { - "type": "input.timerange", - "options": { - "token": "global_time", - "defaultValue": "-24h@h,now" - }, - "title": "Global Time Range" - } - }, - "layout": { - "type": "absolute", - "options": { - "height": 1800, - "width": 1920 - }, - "structure": [ - { - "item": "viz_chart_1", - "type": "block", - "position": { - "x": 590, - "y": 90, - "w": 590, - "h": 250 - } - }, - { - "item": "viz_jn3W19To", - "type": "block", - "position": { - "x": 1190, - "y": 90, - "w": 570, - "h": 250 - } - }, - { - "item": "viz_6upLcH5E", - "type": "block", - "position": { - "x": 10, - "y": 350, - "w": 1750, - "h": 330 - } - }, - { - "item": "viz_K39k1shE", - "type": "block", - "position": { - "x": 10, - "y": 220, - "w": 570, - "h": 120 - } - }, - { - "item": "viz_28VB9M4d", - "type": "block", - "position": { - "x": 10, - "y": 90, - "w": 570, - "h": 120 - } - }, - { - "item": "viz_cvPBsXSu", - "type": "block", - "position": { - "x": 10, - "y": 690, - "w": 1750, - "h": 970 - } - }, - { - "item": "viz_FUEI8OpS", - "type": "block", - "position": { - "x": 1630, - "y": 10, - "w": 120, - "h": 60 - } - } - ], - "globalInputs": [ - "input_global_trp" - ] - }, - "title": "TrackMe - Tenants Operational Status Overview", - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "latest": "$global_time.latest$", - "earliest": "$global_time.earliest$" - } - } - } - } - }, - "description": "" -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_audit_svc_usage.xml b/dashboards/trackme_trackMe_audit_svc_usage.xml deleted file mode 100644 index 1e4947fa..00000000 --- a/dashboards/trackme_trackMe_audit_svc_usage.xml +++ /dev/null @@ -1,275 +0,0 @@ - - - - 0, stack_license_svc*.8, null())\n | eval degradation_threshold=stack_license_svc*.9\n | eval degraded=if(stack_license_svc>0 AND utilized_svc>=degradation_threshold,utilized_svc,null())\n | eval elevated=if(stack_license_svc>0 AND utilized_svc>=optimal_threshold AND isnull(degraded),utilized_svc,null())\n | eval utilized_svc=if(isnull(elevated) AND isnull(degraded),utilized_svc,null())\n | eval \"license limit\"=if(stack_license_svc>0,stack_license_svc,null())\n | fields - degradation_threshold stack_license_svc\n | rename optimal_threshold as \"optimal utilization threshold\", utilized_svc as \"utilized SVC\"", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "stack_svc" - }, - "ds_0HJP5tjw": { - "type": "ds.search", - "options": { - "query": "(index=_cmc_summary OR index=summary) source=\"splunk-entitlements\"\n | stats latest(svc_license) as svc_license\n | eval display=if(svc_license>0,tostring(svc_license,\"commas\").\" SVC\", \"N/A\")\n | fields display", - "queryParameters": { - "earliest": "-24h@h", - "latest": "now" - } - }, - "name": "svc_entitlement" - }, - "ds_vFBi4bSQ": { - "type": "ds.search", - "options": { - "query": "(index=_cmc_summary OR index=summary) source=\"splunk-svc-search-attribution\" svc_usage=*\n | fields svc_usage svc_consumer svc_consumption_score search_type search_app search_label search_user search_head_names unified_sid process_type\n | fillnull value=\"\" svc_consumer process_type search_provenances search_type search_app search_label search_user unified_sid search_modes labels search_head_names usage_source\n | search search_app=\"trackme\"\n | stats max(svc_usage) as utilized_svc by _time svc_consumer search_type search_app search_label search_user search_head_names unified_sid process_type\n | timechart span=1h sum(utilized_svc) as sum_svc" - }, - "name": "trackme_usage_per_hour" - }, - "ds_xSjMkQKs": { - "type": "ds.search", - "options": { - "query": "(index=_cmc_summary OR index=summary) source=\"splunk-svc-search-attribution\" svc_usage=*\n | fields svc_usage svc_consumer svc_consumption_score search_type search_app search_label search_user search_head_names unified_sid process_type\n | fillnull value=\"\" svc_consumer process_type search_provenances search_type search_app search_label search_user unified_sid search_modes labels search_head_names usage_source\n | stats max(svc_usage) as utilized_svc by _time svc_consumer search_type search_app search_label search_user search_head_names unified_sid process_type\n | bucket _time span=1h\n | stats sum(utilized_svc) as svc by _time, search_app\n | eval search_app=if(isnull(search_app) OR search_app=\"\", \"NA\", search_app)\n | eventstats sum(svc) as total_svc by _time\n | eval pct=svc/total_svc*100\n | search search_app=\"trackme\"\n | fields _time search_app pct\n | timechart span=1h first(pct) as pct by search_app\n", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "trackme_pct_stack_usage" - }, - "ds_HvTFWH2P": { - "type": "ds.search", - "options": { - "query": "index=_telemetry (host=*.*splunk*.* NOT host=sh*.*splunk*.*) source=*license_usage_summary.log* TERM(\"type=RolloverSummary\") \n| rex field=_raw \"^(?\\d\\d-\\d\\d-\\d{4}\\s\\d\\d:\\d\\d:\\d\\d.\\d{3}\\s\\+\\d{4})\" \n| eval _time=strptime(timestring,\"%m-%d-%Y %H:%M:%S.%N%z\") \n| eval z=strftime(now(),\"%z\") \n| eval m=substr(z,-2) \n| eval h=substr(z,2,2) \n| eval mzone=if(z != 0, ((h*60)+m)*(z/abs(z)), 0) \n| eval min_to_utc=-1440-mzone \n| eval rel_time=min_to_utc.\"m\" \n| eval _time=relative_time(_time, rel_time) \n| bin _time span=1d \n| eval slave=if(isnull(slave), \"unknown\", slave)\n| stats latest(b) AS b by slave, pool, _time \n| timechart span=1d sum(b) AS \"volume\" fixedrange=true \n| eval GB=round(volume/1024/1024/1024, 2) \n| stats values(*) as * by _time \n| fields - volume \n| stats avg(GB) as avg_GB \n| eval avg_GB=round(avg_GB, 2)" - }, - "name": "stack_ingest" - }, - "ds_CMiUQzG8_ds_HvTFWH2P": { - "type": "ds.search", - "options": { - "query": "(index=_cmc_summary OR index=summary) source=\"splunk-svc-search-attribution\" svc_usage=*\n | fields svc_usage svc_consumer svc_consumption_score search_type search_app search_label search_user search_head_names unified_sid process_type\n | fillnull value=\"\" svc_consumer process_type search_provenances search_type search_app search_label search_user unified_sid search_modes labels search_head_names usage_source\n\n | stats max(svc_usage) as utilized_svc by _time svc_consumer search_type search_app search_label search_user search_head_names unified_sid process_type\n | bucket _time span=1h\n | stats sum(utilized_svc) as svc by _time, search_app\n | eval search_app=if(isnull(search_app) OR search_app=\"\", \"NA\", search_app)\n | eventstats sum(svc) as total_svc by _time\n \n | eval pct=svc/total_svc*100\n | search search_app=\"trackme\"\n \n | fields _time search_app pct\n | stats avg(pct) as avg_pct, perc95(pct) as perc95\n" - }, - "name": "trackme_pct_single" - }, - "ds_ra2AYETO": { - "type": "ds.chain", - "options": { - "extend": "ds_CMiUQzG8_ds_HvTFWH2P", - "query": "| fields avg_pct" - }, - "name": "single_pct_avg" - }, - "ds_w5uhHl8D": { - "type": "ds.chain", - "options": { - "extend": "ds_CMiUQzG8_ds_HvTFWH2P", - "query": "| fields perc95" - }, - "name": "single_pct_perc95" - } - }, - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "latest": "$global_time.latest$", - "earliest": "$global_time.earliest$" - } - } - } - } - }, - "inputs": { - "input_global_trp": { - "type": "input.timerange", - "options": { - "token": "global_time", - "defaultValue": "-30d@d,@d" - }, - "title": "Global Time Range" - } - }, - "layout": { - "type": "absolute", - "options": { - "display": "auto-scale", - "height": 1200 - }, - "structure": [ - { - "item": "viz_wEwqDRvv", - "type": "block", - "position": { - "x": 0, - "y": 130, - "w": 1200, - "h": 310 - } - }, - { - "item": "viz_CL7Yd48d", - "type": "block", - "position": { - "x": 240, - "y": 10, - "w": 270, - "h": 120 - } - }, - { - "item": "viz_3dm54Wnf", - "type": "block", - "position": { - "x": 0, - "y": 480, - "w": 1200, - "h": 300 - } - }, - { - "item": "viz_8NRmlyOE", - "type": "block", - "position": { - "x": 0, - "y": 900, - "w": 1200, - "h": 300 - } - }, - { - "item": "viz_us5aI0OR", - "type": "block", - "position": { - "x": 670, - "y": 10, - "w": 270, - "h": 120 - } - }, - { - "item": "viz_rN1Rglnc", - "type": "block", - "position": { - "x": 290, - "y": 790, - "w": 270, - "h": 120 - } - }, - { - "item": "viz_fGOeP9lm", - "type": "block", - "position": { - "x": 600, - "y": 790, - "w": 270, - "h": 120 - } - } - ], - "globalInputs": [ - "input_global_trp" - ] - }, - "description": "", - "title": "TrackMe SVC usage stack" -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_audit_trackers_perf.xml b/dashboards/trackme_trackMe_audit_trackers_perf.xml deleted file mode 100644 index 31c43f8a..00000000 --- a/dashboards/trackme_trackMe_audit_trackers_perf.xml +++ /dev/null @@ -1,277 +0,0 @@ - - - TrackMe relies on various scheduled objects, each object carefuly reports run time metrics for the purposes of controlling their execution and for reporting purposes - > = round('<>', 3) ]\n| sort 0 tenant_id, tracker", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "trackers_perf_table" - }, - "ds_Mg04DNO6": { - "type": "ds.search", - "options": { - "query": "| mcatalog values(metric_name) as metrics where `trackme_idx_search_filter` metric_name=\"trackme.components_register.runtime\" by tenant_id, tracker", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "trackers_populate" - }, - "ds_4LUsXK1K": { - "type": "ds.chain", - "options": { - "extend": "ds_Mg04DNO6", - "query": "| stats count by tenant_id \n| sort 0 tenant_id" - }, - "name": "trackers_populate_tenant_id" - }, - "ds_8CDSsoWe": { - "type": "ds.chain", - "options": { - "extend": "ds_Mg04DNO6", - "query": "| search tenant_id=$tk_tenant_id$\n| stats count by tracker\n| sort 0 tracker" - }, - "name": "trackers_populate_trackers" - }, - "ds_EMTeLajw": { - "type": "ds.search", - "options": { - "query": "| mstats avg(trackme.components_register.runtime) as avg_run_time where `trackme_idx_search_filter` tenant_id=\"$tk_tenant_id$\" tracker=\"$tk_tracker$\" by tenant_id, tracker\n| foreach avg_run_time [ eval <> = round('<>', 3) ]\n| sort - 0 avg_run_time | fields tracker avg_run_time", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "tracker_perf_top" - } - }, - "visualizations": { - "viz_chart_1": { - "type": "splunk.line", - "dataSources": { - "primary": "ds_search_1" - }, - "options": { - "yAxisAbbreviation": "auto", - "y2AxisAbbreviation": "auto", - "showRoundedY2AxisLabels": false, - "showY2MajorGridLines": true, - "xAxisLabelRotation": 0, - "xAxisTitleVisibility": "show", - "yAxisTitleVisibility": "show", - "y2AxisTitleVisibility": "show", - "yAxisScale": "linear", - "showOverlayY2Axis": 0, - "y2AxisScale": "inherit", - "showSplitSeries": 0, - "showIndependentYRanges": 0, - "legendMode": "standard", - "legendDisplay": "right", - "lineWidth": 2, - "backgroundColor": "#000000", - "legendTruncation": "ellipsisMiddle", - "yAxisTitleText": "runtime (sec)", - "xAxisTitleText": "none", - "dataValuesDisplay": "minmax" - }, - "title": "Trackers runtime performance monitor over time", - "description": "All trackers their runtime performance for auditing purposes" - }, - "viz_29HlXL59": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - } - }, - "viz_3EEh1XOA": { - "type": "splunk.table", - "dataSources": { - "primary": "ds_VvNmlkQC" - }, - "title": "Trackers runtime performance table", - "options": { - "count": 30 - } - }, - "viz_4Z09XAG7": { - "type": "splunk.pie", - "options": { - "showDonutHole": true - }, - "dataSources": { - "primary": "ds_EMTeLajw" - }, - "showProgressBar": false, - "showLastUpdated": false, - "title": "Prominent trackers by average runtime" - } - }, - "inputs": { - "input_global_trp": { - "type": "input.timerange", - "options": { - "token": "global_time", - "defaultValue": "-24h@h,now" - }, - "title": "Period:" - }, - "input_uHIQHlyb": { - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "defaultValue": "*", - "token": "tk_tenant_id" - }, - "title": "tenant_id:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_4LUsXK1K" - }, - "context": { - "formattedConfig": { - "number": { - "prefix": "" - } - }, - "formattedStatics": ">statics | formatByType(formattedConfig)", - "statics": [ - [ - "All" - ], - [ - "*" - ] - ], - "label": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "value": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"value\") | formatByType(formattedConfig)" - } - }, - "input_nAuOVL6b": { - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "defaultValue": "*", - "token": "tk_tracker" - }, - "title": "tracker:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_8CDSsoWe" - }, - "context": { - "formattedConfig": { - "number": { - "prefix": "" - } - }, - "formattedStatics": ">statics | formatByType(formattedConfig)", - "statics": [ - [ - "All" - ], - [ - "*" - ] - ], - "label": ">primary | seriesByName(\"tracker\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "value": ">primary | seriesByName(\"tracker\") | renameSeries(\"value\") | formatByType(formattedConfig)" - } - } - }, - "layout": { - "type": "absolute", - "options": { - "height": 1800, - "width": 1920 - }, - "structure": [ - { - "item": "viz_chart_1", - "type": "block", - "position": { - "x": 0, - "y": 470, - "w": 1750, - "h": 385 - } - }, - { - "item": "viz_29HlXL59", - "type": "block", - "position": { - "x": 1630, - "y": 20, - "w": 120, - "h": 60 - } - }, - { - "item": "viz_3EEh1XOA", - "type": "block", - "position": { - "x": 0, - "y": 880, - "w": 1750, - "h": 880 - } - }, - { - "item": "viz_4Z09XAG7", - "type": "block", - "position": { - "x": 0, - "y": 90, - "w": 1750, - "h": 360 - } - } - ], - "globalInputs": [ - "input_global_trp", - "input_uHIQHlyb", - "input_nAuOVL6b" - ] - }, - "title": "TrackMe - trackers Performance DeepDive", - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "latest": "$global_time.latest$", - "earliest": "$global_time.earliest$" - } - } - } - } - }, - "description": "TrackMe relies on various scheduled objects, each object carefuly reports run time metrics for the purposes of controlling their execution and for reporting purposes" -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_commands_log_inspector.xml b/dashboards/trackme_trackMe_commands_log_inspector.xml deleted file mode 100644 index ff6674da..00000000 --- a/dashboards/trackme_trackMe_commands_log_inspector.xml +++ /dev/null @@ -1,249 +0,0 @@ - - - This dashboards provides quick access to TrackMe REST API and custom commands logging events - .*)\"\n| eval command=if(sourcetype=\"trackme:rest_api\", \"rest_api\", command)\n| where isnotnull(command)\n| table _time, log_level, command, _raw\n| sort - _time", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "loggging_events" - }, - "ds_Gq750aYx": { - "type": "ds.search", - "options": { - "query": "| tstats count where index=_internal (sourcetype=trackme:rest_api OR sourcetype=trackme:custom_commands:*) by sourcetype\n| rex field=\"sourcetype\" \"trackme:custom_commands:(?.*)\"\n| eval command=if(sourcetype=\"trackme:rest_api\", \"rest_api\", command)\n| stats count by sourcetype, command\n| eval sourcetype = \"sourcetype=\\\"\" . sourcetype . \"\\\"\"\n| sort limit=0 command", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "populate_commands" - }, - "ds_UpugjNjy": { - "type": "ds.search", - "options": { - "query": "index=_internal $tk_command$ log_level=$tk_log_level$ $tk_search$ NOT \"remote_configs_proxy.py\"\n| rex field=sourcetype \"trackme:custom_commands:(?.*)\"\n| eval command=if(sourcetype=\"trackme:rest_api\", \"rest_api\", command)\n| where isnotnull(command)\n| timechart count minspan=5m count limit=0 by log_level", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "events_by_log_level" - } - }, - "visualizations": { - "viz_table_1": { - "type": "splunk.table", - "options": { - "columnFormat": { - "log_level": { - "data": "> table | seriesByName(\"log_level\") | formatByType(log_levelColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"log_level\") | matchValue(log_levelRowColorsEditorConfig)" - } - }, - "count": 100 - }, - "context": { - "log_levelColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "log_levelRowColorsEditorConfig": [ - { - "match": "WARNING", - "value": "#DD9900" - }, - { - "match": "INFO", - "value": "#00CDAF" - }, - { - "match": "ERROR", - "value": "#FF677B" - }, - { - "match": "DEBUG", - "value": "#009CEB" - } - ] - }, - "dataSources": { - "primary": "ds_search_1" - }, - "title": "Logging events" - }, - "viz_dtUfQMrD": { - "type": "splunk.column", - "options": { - "stackMode": "stacked", - "seriesColorsByField": "{\"ERROR\": \"#FF677B\", \"WARNING\": \"#DD9900\", \"INFO\": \"#00CDAF\", \"DEBUG\": \"#009CEB\"}" - }, - "dataSources": { - "primary": "ds_UpugjNjy" - }, - "title": "Events by logging level over time" - }, - "viz_NmxZjn2m": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - } - } - }, - "inputs": { - "input_global_trp": { - "type": "input.timerange", - "options": { - "token": "global_time", - "defaultValue": "-24h@h,now" - }, - "title": "Global Time Range:" - }, - "input_Ttw13HLX": { - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "defaultValue": "(sourcetype=trackme:rest_api OR sourcetype=trackme:custom_commands:*)", - "token": "tk_command" - }, - "title": "Select TrackMe context:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_Gq750aYx" - }, - "context": { - "formattedConfig": { - "number": { - "prefix": "" - } - }, - "formattedStatics": ">statics | formatByType(formattedConfig)", - "statics": [ - [ - "All" - ], - [ - "(sourcetype=trackme:rest_api OR sourcetype=trackme:custom_commands:*)" - ] - ], - "label": ">primary | seriesByName(\"command\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "value": ">primary | seriesByName(\"sourcetype\") | renameSeries(\"value\") | formatByType(formattedConfig)" - } - }, - "input_bUyD9U0q": { - "options": { - "items": [ - { - "label": "All", - "value": "*" - }, - { - "label": "INFO", - "value": "INFO" - }, - { - "label": "ERROR", - "value": "ERROR" - }, - { - "label": "WARNING", - "value": "WARNING" - }, - { - "label": "DEBUG", - "value": "DEBUG" - } - ], - "defaultValue": "*", - "token": "tk_log_level" - }, - "title": "Logging level:", - "type": "input.dropdown" - }, - "input_ycfwyDO6": { - "options": { - "defaultValue": "*", - "token": "tk_search" - }, - "title": "Key word search:", - "type": "input.text" - } - }, - "layout": { - "type": "absolute", - "options": { - "display": "auto-scale", - "width": 1920, - "height": 1800 - }, - "structure": [ - { - "item": "viz_table_1", - "type": "block", - "position": { - "x": 0, - "y": 420, - "w": 1920, - "h": 1060 - } - }, - { - "item": "viz_dtUfQMrD", - "type": "block", - "position": { - "x": 0, - "y": 110, - "w": 1920, - "h": 290 - } - }, - { - "item": "viz_NmxZjn2m", - "type": "block", - "position": { - "x": 1800, - "y": -90, - "w": 120, - "h": 300 - } - } - ], - "globalInputs": [ - "input_global_trp", - "input_Ttw13HLX", - "input_bUyD9U0q", - "input_ycfwyDO6" - ] - }, - "title": "TrackMe - logs inspector", - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "latest": "$global_time.latest$", - "earliest": "$global_time.earliest$" - } - } - } - } - }, - "description": "This dashboards provides quick access to TrackMe REST API and custom commands logging events" -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_internal_scheduling.xml b/dashboards/trackme_trackMe_internal_scheduling.xml deleted file mode 100644 index 84eed005..00000000 --- a/dashboards/trackme_trackMe_internal_scheduling.xml +++ /dev/null @@ -1,284 +0,0 @@ -
- - - - - $timerange_scheduled.earliest$ - $timerange_scheduled.latest$ - -
- - - Scheduling summary - - - - - - - - - - - - - - - - - - - - - fields avg_run_time - - - - - - - - - - - - - - - - - - - - fields max_run_time - - - - - - - - - - - - - - - - - - - - fields sum_run_time - - - - - - - - - - - - - - - - - - - - - - - - - -24h@h - now - - - - - - - Count of Scheduler Executions - - - $timerange_scheduled.earliest$ - $timerange_scheduled.latest$ - -
- - - Count of Scheduler Executions Over Time - - - $timerange_scheduled.earliest$ - $timerange_scheduled.latest$ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Trackers run time performance over time - - - $timerange_scheduled.earliest$ - $timerange_scheduled.latest$ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Trackers run time performance summary statistics - - - $timerange_scheduled.earliest$ - $timerange_scheduled.latest$ - - - - - - - - - - - - -
- - - - - TrackMe tracker executor logs - - - $timerange_scheduled.earliest$ - $timerange_scheduled.latest$ - - - - - - - - - - - - - - - - - Trackers - These scheduled reports are responsible for discovering and maintaining data states - - - search "report (savedsearch_name)"="*_tracker_*" | fields "report (savedsearch_name)", avg_run_time - - - - - - - search "report (savedsearch_name)"="*_tracker_*" | sort "report (savedsearch_name)" | fields - avg_run_time - - - - - - -
- - - - - Alerts & Miscellaneous - Builtin alerts and various scheduled reports related to the application - - - search "report (savedsearch_name)"!="*_tracker_*" | fields "report (savedsearch_name)", avg_run_time - - - - - - - search "report (savedsearch_name)"!="*_tracker_*" | sort "report (savedsearch_name)" | fields - avg_run_time - - - - - - -
- - -
\ No newline at end of file diff --git a/dashboards/trackme_trackMe_kvstore.xml b/dashboards/trackme_trackMe_kvstore.xml deleted file mode 100644 index 5c666702..00000000 --- a/dashboards/trackme_trackMe_kvstore.xml +++ /dev/null @@ -1,234 +0,0 @@ - - - This dashboard shows the size for all KVstore collections, as well as their number of objects - .*)\\.(?.*)\"\n| rex field=Collection \".*_(?.*)$\"\n| eval tenant_id=if(match(Collection, \"(?:kv_trackme_backup_archives_info|kv_trackme_maintenance_mode|kv_trackme_user_pref|kv_trackme_virtual_tenants_entities_summary|kv_trackme_user_uipref)\"), \"common\", tenant_id)\n| where App=\"trackme\"\n| eval dbsize=round(size/1024/1024, 2)\n| eval indexsize=round(totalIndexSize/1024/1024, 2)\n| stats first(count) AS \"Number of Objects\" first(dbsize) AS \"Collection Size (MB)\" by tenant_id, Collection\n| sort tenant_id, Collection", - "queryParameters": { - "earliest": "-5m", - "latest": "now" - } - }, - "name": "kvstore_collections_table" - }, - "ds_Ux6AXFkI": { - "type": "ds.chain", - "options": { - "extend": "ds_6rcal2tp", - "query": "| search tenant_id=$tk_tenant_id$\n| stats dc(Collection) as dcount" - }, - "name": "dcount_collections" - }, - "ds_mJ8G3LHO": { - "type": "ds.chain", - "options": { - "extend": "ds_6rcal2tp", - "query": "| search tenant_id=$tk_tenant_id$\n| stats sum(\"Collection Size (MB)\") as total_mb" - }, - "name": "sum_collections" - }, - "ds_YlggFnPS": { - "type": "ds.chain", - "options": { - "extend": "ds_6rcal2tp", - "query": "| stats count by tenant_id \n| sort 0 tenant_id" - }, - "name": "list_tenants" - }, - "ds_avugorVn": { - "type": "ds.chain", - "options": { - "extend": "ds_6rcal2tp", - "query": "| search tenant_id=$tk_tenant_id$\n| sort tenant_id, Collection" - }, - "name": "table_collections" - }, - "ds_KxiIwB4q": { - "type": "ds.chain", - "options": { - "extend": "ds_6rcal2tp", - "query": "| search tenant_id=$tk_tenant_id$\n| stats sum(\"Number of Objects\") as no_records" - }, - "name": "no_records" - } - }, - "visualizations": { - "viz_table_1": { - "type": "splunk.singlevalue", - "options": { - "unit": "collections", - "backgroundColor": "transparent" - }, - "dataSources": { - "primary": "ds_Ux6AXFkI" - }, - "showProgressBar": false, - "showLastUpdated": false, - "description": "" - }, - "viz_2LxfoWGB": { - "type": "splunk.table", - "options": { - "count": 15 - }, - "dataSources": { - "primary": "ds_avugorVn" - } - }, - "viz_kvM2Jjrl": { - "type": "splunk.singlevalue", - "options": { - "unit": "MB", - "numberPrecision": 3, - "backgroundColor": "transparent" - }, - "dataSources": { - "primary": "ds_mJ8G3LHO" - }, - "showProgressBar": false, - "showLastUpdated": false, - "description": "" - }, - "viz_aMEf9KSl": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - } - }, - "viz_tDM7CEie": { - "type": "splunk.singlevalue", - "options": { - "unit": "records", - "backgroundColor": "transparent" - }, - "dataSources": { - "primary": "ds_KxiIwB4q" - }, - "showProgressBar": false, - "showLastUpdated": false, - "description": "" - } - }, - "inputs": { - "input_SFyxNLxE": { - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "defaultValue": "*", - "token": "tk_tenant_id" - }, - "title": "Tenant:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_YlggFnPS" - }, - "context": { - "formattedConfig": { - "number": { - "prefix": "" - } - }, - "formattedStatics": ">statics | formatByType(formattedConfig)", - "statics": [ - [ - "All" - ], - [ - "*" - ] - ], - "label": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "value": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"value\") | formatByType(formattedConfig)" - } - } - }, - "layout": { - "type": "absolute", - "options": { - "width": 1920, - "height": 1080 - }, - "structure": [ - { - "item": "viz_table_1", - "type": "block", - "position": { - "x": 10, - "y": 80, - "w": 250, - "h": 60 - } - }, - { - "item": "viz_2LxfoWGB", - "type": "block", - "position": { - "x": 10, - "y": 140, - "w": 1750, - "h": 920 - } - }, - { - "item": "viz_kvM2Jjrl", - "type": "block", - "position": { - "x": 320, - "y": 80, - "w": 200, - "h": 60 - } - }, - { - "item": "viz_aMEf9KSl", - "type": "block", - "position": { - "x": 1630, - "y": 70, - "w": 120, - "h": 60 - } - }, - { - "item": "viz_tDM7CEie", - "type": "block", - "position": { - "x": 590, - "y": 80, - "w": 200, - "h": 60 - } - } - ], - "globalInputs": [ - "input_SFyxNLxE" - ] - }, - "title": "TrackMe - KVstore collections audit", - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "latest": "$global_time.latest$", - "earliest": "$global_time.earliest$" - } - } - } - } - }, - "description": "This dashboard shows the size for all KVstore collections, as well as their number of objects" -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_remote_accounts_overview.xml b/dashboards/trackme_trackMe_remote_accounts_overview.xml deleted file mode 100644 index bfc15c54..00000000 --- a/dashboards/trackme_trackMe_remote_accounts_overview.xml +++ /dev/null @@ -1,514 +0,0 @@ - - - - majorValue | rangeValue(majorColorEditorConfig)" - }, - "title": "# Successfully connected Remote Accounts", - "type": "splunk.singlevalue" - }, - "viz_FUEI8OpS": { - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - }, - "type": "splunk.image" - }, - "viz_K39k1shE": { - "context": { - "majorColorEditorConfig": [ - { - "to": 1, - "value": "#4fa484" - }, - { - "from": 1, - "value": "#e85b79" - } - ] - }, - "dataSources": { - "primary": "ds_J3Ns07IG" - }, - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "trendColor": "#45d4ba" - }, - "title": "# Failing Remote Accounts", - "type": "splunk.singlevalue" - }, - "viz_chart_1": { - "dataSources": { - "primary": "ds_VbAZ0by4" - }, - "options": { - "collapseThreshold": 0.01, - "labelDisplay": "valuesAndPercentage", - "seriesColorsByField": { - "failure": "#e85b79", - "success": "#45d4ba" - }, - "showDonutHole": true - }, - "title": "Remote Accounts Statuses", - "type": "splunk.pie" - }, - "viz_cvPBsXSu": { - "context": { - "overall_ops_pctColumnFormatEditorConfig": { - "number": { - "thousandSeparated": false, - "unitPosition": "after" - } - }, - "overall_ops_pctRowColorsEditorConfig": [ - { - "to": 100, - "value": "#FE3A3A" - }, - { - "from": 100, - "value": "#45d4ba" - } - ], - "statusColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "statusRowColorsEditorConfig": [ - { - "match": "success", - "value": "#45d4ba" - }, - { - "match": "failure", - "value": "#e85b79" - } - ] - }, - "dataSources": { - "primary": "ds_NjWl6NcX" - }, - "options": { - "columnFormat": { - "overall_ops_pct": { - "data": "> table | seriesByName(\"overall_ops_pct\") | formatByType(overall_ops_pctColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"overall_ops_pct\") | rangeValue(overall_ops_pctRowColorsEditorConfig)" - }, - "status": { - "data": "> table | seriesByName(\"status\") | formatByType(statusColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"status\") | matchValue(statusRowColorsEditorConfig)" - } - } - }, - "title": "Detailed Remote Accounts Statuses", - "type": "splunk.table" - }, - "viz_jn3W19To": { - "context": { - "statusColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "statusRowColorsEditorConfig": [ - { - "match": "failure", - "value": "#e85b79" - }, - { - "match": "success", - "value": "#45D4BA" - } - ] - }, - "dataSources": { - "primary": "ds_I7q4oaTU" - }, - "options": { - "columnFormat": { - "status": { - "data": "> table | seriesByName(\"status\") | formatByType(statusColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"status\") | matchValue(statusRowColorsEditorConfig)" - } - } - }, - "title": "Status by Remote Account", - "type": "splunk.table" - }, - "viz_qdTyM4tG": { - "type": "splunk.markdown", - "options": { - "markdown": "" - } - }, - "viz_FDlLUqfD": { - "type": "splunk.markdown", - "options": { - "markdown": "## About this dashboard:\n\nThis dashboard uses a TrackMe generating custom command `trackmetestremoteaccounts`.\n\nThe command calls internal API endpoints to perform a connectivity and authenticaton verification of the configure Splunk Remote Accounts.\n\nIf a Splunk Remote Account is reported as in failure, this means that it is disconnected for some reasons, review the message to identify the root cause.\n\nConsult our documentation for more information." - } - }, - "viz_e740WEz8": { - "context": { - "statusColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "statusRowColorsEditorConfig": [ - { - "match": "success", - "value": "#45d4ba" - }, - { - "match": "failure", - "value": "#e85b79" - }, - { - "match": "disabled", - "value": "#A9A9A9" - }, - { - "match": "disabled", - "value": "#A9A9A9" - }, - { - "match": "pending", - "value": "#f8be44" - }, - { - "match": "late", - "value": "#FF964F" - }, - { - "match": "undeterminated", - "value": "#F6540B" - } - ] - }, - "dataSources": { - "primary": "ds_wgCfjkbl" - }, - "options": { - "columnFormat": { - "rotation_status": { - "data": "> table | seriesByName(\"rotation_status\") | formatByType(statusColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"rotation_status\") | matchValue(statusRowColorsEditorConfig)" - } - } - }, - "title": "Bearer Tokens Rotation Information", - "type": "splunk.table", - "description": "TrackMe automatically attempts to rotate bearer tokens for Splunk Remote Accounts, this table shows the key information related to this processus:" - }, - "viz_reJRiebr": { - "type": "splunk.events", - "dataSources": { - "primary": "ds_iUXUCeKY" - }, - "title": "Tokens Rotation Logs (past 30 days)", - "description": "The processus for the rotation of the Splunk Remote Accounts is orchestrated by the General Health Tracker, which executes daily: (index=_internal sourcetype=trackme:rest_api endpoint=maintain_remote_account)" - } - }, - "dataSources": { - "ds_I7q4oaTU": { - "name": "accounts_overview", - "options": { - "extend": "ds_Y4xHTfIQ", - "query": "| fields account, status \n| fields - _raw, _time\n| sort 0 account" - }, - "type": "ds.chain" - }, - "ds_J3Ns07IG": { - "name": "disconnected_accounts", - "options": { - "extend": "ds_Y4xHTfIQ", - "query": "| stats count(eval(status=\"failure\")) as count_disconnected" - }, - "type": "ds.chain" - }, - "ds_NjWl6NcX": { - "name": "table_tenants", - "options": { - "extend": "ds_Y4xHTfIQ", - "query": "| table account, app_namespace, host, port, status, message, *\n| fields - _raw, _time\n| search status=\"$tk_status$\"\n| rex field=status mode=sed \"s/\\\"success/\\\"🟢 success/g\"\n| rex field=status mode=sed \"s/\\\"failure/\\\"❌ failure/g\"\n| fields $tk_show_allfields$" - }, - "type": "ds.chain" - }, - "ds_VbAZ0by4": { - "name": "tenants_count_by_status", - "options": { - "extend": "ds_Y4xHTfIQ", - "query": "| stats count by status" - }, - "type": "ds.chain" - }, - "ds_Y4xHTfIQ": { - "name": "remote_accounts_statuses_main", - "options": { - "query": "| trackmetestremoteaccounts accounts=*\n``` lookup bearer tokens rotation metadata ```\n| lookup trackme_remote_account_token_expiration account OUTPUT last_message as rotation_last_message, mtime as rotation_mtime, remote_bearer_token_id\n\n``` investigate tokens rotation ```\n| eval token_age_sec=now()-rotation_mtime\n| eval time_since_last_rotation=tostring(round(now()-rotation_mtime), \"duration\")\n| eval rotation_mtime=strftime(rotation_mtime, \"%c %Z\")\n| eval token_max_age_expected_sec=token_rotation_frequency*86400\n| eval rotation_status = case(\ntoken_rotation_enablement!=1, \"disabled\",\ntoken_rotation_enablement=1 AND match(rotation_last_message, \"Bearer token renewal operated at\") AND token_age_sec=token_max_age_expected_sec, \"late\",\ntoken_rotation_enablement=1 AND isnull(remote_bearer_token_id), \"pending\",\n1=1, \"undeterminated\"\n)", - "queryParameters": { - "earliest": "-5m", - "latest": "now" - } - }, - "type": "ds.search" - }, - "ds_iLucdxbU": { - "name": "connected_accounts", - "options": { - "extend": "ds_Y4xHTfIQ", - "query": "| stats count(eval(status=\"success\")) as count_connected" - }, - "type": "ds.chain" - }, - "ds_wgCfjkbl": { - "type": "ds.chain", - "options": { - "query": "table account, token_rotation_enablement, token_rotation_frequency, rotation_last_message, rotation_mtime, time_since_last_rotation, rotation_status", - "extend": "ds_Y4xHTfIQ" - }, - "name": "roatation_table_summary" - }, - "ds_iUXUCeKY": { - "type": "ds.search", - "options": { - "query": "index=_internal sourcetype=trackme:rest_api endpoint=maintain_remote_account", - "queryParameters": { - "earliest": "-30d@d", - "latest": "now" - } - }, - "name": "tokens_rotation_logs" - } - }, - "layout": { - "globalInputs": [ - "input_TtwBw5Ye", - "input_LpXj9z03" - ], - "layoutDefinitions": { - "layout_1": { - "options": { - "height": 1800, - "width": 1920 - }, - "structure": [ - { - "item": "viz_chart_1", - "position": { - "h": 250, - "w": 590, - "x": 590, - "y": 160 - }, - "type": "block" - }, - { - "item": "viz_jn3W19To", - "position": { - "h": 250, - "w": 570, - "x": 1190, - "y": 160 - }, - "type": "block" - }, - { - "item": "viz_K39k1shE", - "position": { - "h": 120, - "w": 570, - "x": 10, - "y": 290 - }, - "type": "block" - }, - { - "item": "viz_28VB9M4d", - "position": { - "h": 120, - "w": 570, - "x": 10, - "y": 160 - }, - "type": "block" - }, - { - "item": "viz_cvPBsXSu", - "position": { - "h": 1370, - "w": 1750, - "x": 10, - "y": 420 - }, - "type": "block" - }, - { - "item": "viz_FUEI8OpS", - "position": { - "h": 60, - "w": 120, - "x": 1630, - "y": 10 - }, - "type": "block" - }, - { - "item": "viz_qdTyM4tG", - "type": "block", - "position": { - "x": 0, - "y": 1440, - "w": 300, - "h": 300 - } - }, - { - "item": "viz_FDlLUqfD", - "type": "block", - "position": { - "x": 20, - "y": 20, - "w": 1220, - "h": 140 - } - } - ], - "type": "absolute" - }, - "layout_G7KHXSd1": { - "type": "grid", - "structure": [ - { - "item": "viz_e740WEz8", - "type": "block", - "position": { - "x": 0, - "y": 0, - "w": 1200, - "h": 1026 - } - } - ] - }, - "layout_pjANVB8c": { - "type": "grid", - "structure": [ - { - "item": "viz_reJRiebr", - "type": "block", - "position": { - "x": 0, - "y": 0, - "w": 1200, - "h": 900 - } - } - ] - } - }, - "tabs": { - "items": [ - { - "label": "Overview Statuses", - "layoutId": "layout_1" - }, - { - "layoutId": "layout_G7KHXSd1", - "label": "Token Rotation Statuses" - }, - { - "layoutId": "layout_pjANVB8c", - "label": "Token Rotation Logs" - } - ] - } - } -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_sla.xml b/dashboards/trackme_trackMe_sla.xml deleted file mode 100644 index e6c47bbd..00000000 --- a/dashboards/trackme_trackMe_sla.xml +++ /dev/null @@ -1,408 +0,0 @@ - - - - > = tostring('<>', \"duration\") ]\n| search priority=\"$tk_priority$\" AND monitored_state=\"enabled\"\n| fields tenant_id, object, object_category, percent_sla, priority, monitored_state, range_duration, green_time, not_green_time\n| rename range_duration as \"total duration\", green_time as \"duration green\", not_green_time as \"duration not green\"", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "table_sla" - }, - "ds_Q8G1MpD1": { - "type": "ds.chain", - "options": { - "extend": "ds_OXKeKxE8", - "query": "| stats avg(percent_sla) as avg" - }, - "name": "single_sla" - } - }, - "visualizations": { - "viz_29HlXL59": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - } - }, - "viz_kkzyyTTf": { - "type": "splunk.table", - "options": { - "count": 50, - "columnFormat": { - "tenant_id": { - "width": 150 - }, - "object_category": { - "width": 150 - }, - "object": { - "width": 450 - }, - "percent_sla": { - "data": "> table | seriesByName(\"percent_sla\") | formatByType(percent_slaColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"percent_sla\") | rangeValue(percent_slaRowColorsEditorConfig)", - "width": 150 - }, - "priority": { - "data": "> table | seriesByName(\"priority\") | formatByType(priorityColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"priority\") | matchValue(priorityRowColorsEditorConfig)", - "width": 100 - }, - "monitored_state": { - "data": "> table | seriesByName(\"monitored_state\") | formatByType(monitored_stateColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"monitored_state\") | matchValue(monitored_stateRowColorsEditorConfig)", - "width": 150 - }, - "total duration": { - "width": 185 - }, - "duration green": { - "width": 185 - }, - "duration not green": { - "width": 185 - } - } - }, - "dataSources": { - "primary": "ds_OXKeKxE8" - }, - "context": { - "percent_slaColumnFormatEditorConfig": { - "number": { - "thousandSeparated": false, - "unitPosition": "after", - "unit": "%", - "precision": 2 - } - }, - "percent_slaRowColorsEditorConfig": [ - { - "value": "#dc4e41", - "to": 50 - }, - { - "value": "#dc4e41", - "from": 50, - "to": 80 - }, - { - "value": "#f1813f", - "from": 80, - "to": 90 - }, - { - "value": "#45D4BA", - "from": 90 - } - ], - "priorityColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "priorityRowColorsEditorConfig": [ - { - "match": "low", - "value": "#5C33FF" - }, - { - "match": "medium", - "value": "#207865" - }, - { - "match": "high", - "value": "#AD3F20" - } - ], - "monitored_stateColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "monitored_stateRowColorsEditorConfig": [ - { - "match": "disabled", - "value": "#78062a" - }, - { - "match": "enabled", - "value": "#207865" - } - ] - }, - "eventHandlers": [ - { - "type": "drilldown.linkToDashboard", - "options": { - "app": "trackme", - "dashboard": "trackMe_sla_flip", - "tokens": [ - { - "token": "tk_tenant_id", - "value": "row.tenant_id.value" - }, - { - "token": "tk_object_category", - "value": "row.object_category.value" - }, - { - "token": "tk_object", - "value": "row.object.value" - } - ] - } - } - ], - "title": "SLA percentage per tenant / object", - "description": "Click on a row to see flipping events for this object" - }, - "viz_ACR5b0DN": { - "type": "splunk.singlevalueradial", - "options": { - "unit": "%", - "numberPrecision": 2, - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "backgroundColor": "transparent" - }, - "dataSources": { - "primary": "ds_Q8G1MpD1" - }, - "context": { - "majorColorEditorConfig": [ - { - "to": 50, - "value": "#dc4e41" - }, - { - "from": 50, - "to": 90, - "value": "#f1813f" - }, - { - "from": 90, - "value": "#45D4BA" - } - ] - } - } - }, - "inputs": { - "input_global_trp": { - "type": "input.timerange", - "options": { - "token": "global_time", - "defaultValue": "-90d@d,now" - }, - "title": "Period:" - }, - "input_uHIQHlyb": { - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "token": "tk_tenant_id" - }, - "title": "tenant_id:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_4LUsXK1K" - }, - "context": { - "formattedConfig": { - "number": { - "prefix": "" - } - }, - "formattedStatics": ">statics | formatByType(formattedConfig)", - "statics": [], - "label": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "value": ">primary | seriesByName(\"tenant_id\") | renameSeries(\"value\") | formatByType(formattedConfig)" - } - }, - "input_nAuOVL6b": { - "options": { - "items": [ - { - "label": "All", - "value": "*" - } - ], - "defaultValue": "*", - "token": "tk_object_category" - }, - "title": "object_category:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_KWAYq9tR" - }, - "context": {} - }, - "input_qszD4uG4": { - "options": { - "items": ">frame(label, value) | prepend(formattedStatics) | objects()", - "defaultValue": "*", - "token": "tk_object" - }, - "title": "object:", - "type": "input.dropdown", - "dataSources": { - "primary": "ds_RiJ5iY8a" - }, - "context": { - "formattedConfig": { - "number": { - "prefix": "" - } - }, - "formattedStatics": ">statics | formatByType(formattedConfig)", - "statics": [ - [ - "All" - ], - [ - "*" - ] - ], - "label": ">primary | seriesByName(\"object\") | renameSeries(\"label\") | formatByType(formattedConfig)", - "value": ">primary | seriesByName(\"object\") | renameSeries(\"value\") | formatByType(formattedConfig)" - } - }, - "input_YueZVL1a": { - "options": { - "items": [ - { - "label": "All", - "value": "*" - }, - { - "label": "high", - "value": "high" - }, - { - "label": "medium", - "value": "medium" - }, - { - "label": "low", - "value": "low" - } - ], - "defaultValue": "*", - "token": "tk_priority" - }, - "title": "priority:", - "type": "input.dropdown" - } - }, - "layout": { - "type": "absolute", - "options": { - "height": 1080, - "width": 1920 - }, - "structure": [ - { - "item": "viz_29HlXL59", - "type": "block", - "position": { - "x": 1630, - "y": 30, - "w": 120, - "h": 60 - } - }, - { - "item": "viz_kkzyyTTf", - "type": "block", - "position": { - "x": 0, - "y": 160, - "w": 1750, - "h": 900 - } - }, - { - "item": "viz_ACR5b0DN", - "type": "block", - "position": { - "x": 820, - "y": 10, - "w": 250, - "h": 150 - } - } - ], - "globalInputs": [ - "input_global_trp", - "input_uHIQHlyb", - "input_nAuOVL6b", - "input_YueZVL1a", - "input_qszD4uG4" - ] - }, - "title": "TrackMe - Quality Of Service Auditing - SLA compliance reporting", - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "latest": "$global_time.latest$", - "earliest": "$global_time.earliest$" - } - } - } - } - }, - "description": "" -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_sla_flip.xml b/dashboards/trackme_trackMe_sla_flip.xml deleted file mode 100644 index bf5f13c8..00000000 --- a/dashboards/trackme_trackMe_sla_flip.xml +++ /dev/null @@ -1,322 +0,0 @@ - - - The SLA percentage represents the percentage of time an object has spent in green state, which complies with monitoring rules and quality of service - \" | dedup _time object object_category object_previous_state object_state | table _time object object_category object_previous_state separator object_state result | rename separator as \" \" | `trackme_eval_noicons_flip` | fields _time object object_category object_previous_state \" \" object_state | sort - limit=0 _time", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - } - }, - "name": "table_flip" - }, - "ds_Q8G1MpD1": { - "type": "ds.chain", - "options": { - "extend": "ds_OXKeKxE8", - "query": "| timechart minspan=15m bins=1000 count as flip_events" - }, - "name": "overtime_flip" - }, - "ds_w1veXQwY": { - "type": "ds.chain", - "options": { - "extend": "ds_OXKeKxE8", - "query": "| stats count" - }, - "name": "single_flip" - } - }, - "visualizations": { - "viz_29HlXL59": { - "type": "splunk.image", - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - } - }, - "viz_kkzyyTTf": { - "type": "splunk.table", - "options": { - "count": 50, - "columnFormat": { - "tenant_id": { - "width": 150 - }, - "object_category": { - "width": 150 - }, - "object": { - "width": 450 - }, - "percent_sla": { - "data": "> table | seriesByName(\"percent_sla\") | formatByType(percent_slaColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"percent_sla\") | rangeValue(percent_slaRowColorsEditorConfig)", - "width": 150 - }, - "priority": { - "data": "> table | seriesByName(\"priority\") | formatByType(priorityColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"priority\") | matchValue(priorityRowColorsEditorConfig)", - "width": 100 - }, - "monitored_state": { - "data": "> table | seriesByName(\"monitored_state\") | formatByType(monitored_stateColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"monitored_state\") | matchValue(monitored_stateRowColorsEditorConfig)", - "width": 150 - }, - "total duration": { - "width": 185 - }, - "duration green": { - "width": 185 - }, - "duration not green": { - "width": 185 - } - } - }, - "dataSources": { - "primary": "ds_OXKeKxE8" - }, - "context": { - "percent_slaColumnFormatEditorConfig": { - "number": { - "thousandSeparated": false, - "unitPosition": "after", - "unit": "%", - "precision": 2 - } - }, - "percent_slaRowColorsEditorConfig": [ - { - "value": "#D41F1F", - "to": 20 - }, - { - "value": "#D94E17", - "from": 20, - "to": 40 - }, - { - "value": "#CBA700", - "from": 40, - "to": 60 - }, - { - "value": "#669922", - "from": 60, - "to": 80 - }, - { - "value": "#118832", - "from": 80 - } - ], - "priorityColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "priorityRowColorsEditorConfig": [ - { - "match": "low", - "value": "#5C33FF" - }, - { - "match": "medium", - "value": "#207865" - }, - { - "match": "high", - "value": "#AD3F20" - } - ], - "monitored_stateColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "monitored_stateRowColorsEditorConfig": [ - { - "match": "disabled", - "value": "#78062a" - }, - { - "match": "enabled", - "value": "#207865" - } - ] - }, - "title": "Flipping statuses events table", - "description": "These events occur when an object changes from a state to another" - }, - "viz_cZ5CiteD": { - "type": "splunk.column", - "dataSources": { - "primary": "ds_Q8G1MpD1" - }, - "showProgressBar": false, - "showLastUpdated": false, - "title": "Flipping statuses events over time", - "description": "These events occur when an object changes from a state to another", - "options": { - "dataValuesDisplay": "all", - "xAxisTitleText": "flipping events count", - "yAxisTitleText": "count" - } - }, - "viz_DKb2WaAF": { - "type": "splunk.singlevalue", - "options": { - "backgroundColor": "transparent", - "majorColor": "#62b3b2" - }, - "dataSources": { - "primary": "ds_w1veXQwY" - }, - "title": "", - "description": "" - }, - "viz_9SCh8JZI": { - "type": "splunk.markdown", - "options": { - "markdown": "Number of flipping events detected" - } - } - }, - "inputs": { - "input_global_trp": { - "type": "input.timerange", - "options": { - "token": "global_time", - "defaultValue": "-90d@d,now" - }, - "title": "Period:" - } - }, - "layout": { - "type": "absolute", - "options": { - "height": 1080, - "width": 1920 - }, - "structure": [ - { - "item": "viz_29HlXL59", - "type": "block", - "position": { - "x": 1630, - "y": 10, - "w": 120, - "h": 60 - } - }, - { - "item": "viz_kkzyyTTf", - "type": "block", - "position": { - "x": 0, - "y": 440, - "w": 1750, - "h": 620 - } - }, - { - "item": "viz_cZ5CiteD", - "type": "block", - "position": { - "x": 0, - "y": 120, - "w": 1750, - "h": 290 - } - }, - { - "item": "viz_DKb2WaAF", - "type": "block", - "position": { - "x": 730, - "y": 10, - "w": 190, - "h": 90 - } - }, - { - "item": "viz_9SCh8JZI", - "type": "block", - "position": { - "x": 710, - "y": 90, - "w": 230, - "h": 40 - } - } - ], - "globalInputs": [ - "input_global_trp" - ] - }, - "title": "TrackMe - Quality Of Service Auditing - SLA compliance reporting (drilldow view)", - "defaults": { - "dataSources": { - "ds.search": { - "options": { - "queryParameters": { - "latest": "$global_time.latest$", - "earliest": "$global_time.earliest$" - } - } - } - } - }, - "description": "The SLA percentage represents the percentage of time an object has spent in green state, which complies with monitoring rules and quality of service" -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_trackMe_template_services_monitoring.xml b/dashboards/trackme_trackMe_template_services_monitoring.xml deleted file mode 100644 index 9129b0d9..00000000 --- a/dashboards/trackme_trackMe_template_services_monitoring.xml +++ /dev/null @@ -1,1110 +0,0 @@ - - - - majorValue | rangeValue(majorColorEditorConfig)" - }, - "title": "# Healthy Services", - "type": "splunk.singlevalue" - }, - "viz_AknRpini": { - "context": { - "majorColorEditorConfig": [ - { - "to": 1, - "value": "#4fa484" - }, - { - "from": 1, - "value": "#e85b79" - } - ] - }, - "dataSources": { - "primary": "ds_s5hxbtAJ_ds_gKx6Xfeo" - }, - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "trendColor": "#45d4ba" - }, - "title": "# Unhealthy Services", - "type": "splunk.singlevalue" - }, - "viz_BK9f270s": { - "context": { - "majorColorEditorConfig": [ - { - "to": 1, - "value": "#45d4ba" - }, - { - "from": 1, - "value": "#e85b79" - } - ] - }, - "dataSources": { - "primary": "ds_d5yWeXJG" - }, - "description": "", - "eventHandlers": [ - { - "options": { - "newTab": true, - "url": "/app/trackme/TenantHome?tenant_id=services-mon" - }, - "type": "drilldown.customUrl" - } - ], - "options": { - "backgroundColor": "transparent", - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "unit": "" - }, - "title": "# Active Incidents", - "type": "splunk.singlevalue" - }, - "viz_FUEI8OpS": { - "options": { - "preserveAspectRatio": true, - "src": "../../static/app/trackme/icons/trackme.png" - }, - "type": "splunk.image" - }, - "viz_ImzF0Zr2": { - "context": { - "majorColorEditorConfig": [ - { - "to": 100, - "value": "#e85b79" - }, - { - "from": 100, - "value": "#45d4ba" - } - ] - }, - "dataSources": { - "primary": "ds_lR3Fq4dM_ds_UcZ7DZcJ_ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA" - }, - "description": "", - "eventHandlers": [ - { - "options": { - "newTab": true, - "url": "/app/trackme/TenantHome?tenant_id=services-mon" - }, - "type": "drilldown.customUrl" - } - ], - "options": { - "backgroundColor": "transparent", - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "numberPrecision": 2, - "unit": "%" - }, - "title": "05-Splunk-SOAR", - "type": "splunk.singlevalue" - }, - "viz_JYRSZmd5": { - "context": { - "majorColorEditorConfig": [ - { - "to": 1, - "value": "#e85b79" - }, - { - "from": 1, - "value": "#45d4ba" - } - ] - }, - "dataSources": { - "primary": "ds_H7kDR54r_ds_DhlVHEuA" - }, - "description": "", - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)" - }, - "title": "# Healthy Entities", - "type": "splunk.singlevalue" - }, - "viz_K39k1shE": { - "context": { - "majorColorEditorConfig": [ - { - "to": 1, - "value": "#4fa484" - }, - { - "from": 1, - "value": "#e85b79" - } - ] - }, - "dataSources": { - "primary": "ds_gKx6Xfeo" - }, - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "trendColor": "#45d4ba" - }, - "title": "# Unhealthy Entities", - "type": "splunk.singlevalue" - }, - "viz_M6fWsdGj": { - "options": { - "strokeDasharray": 4 - }, - "type": "abslayout.line" - }, - "viz_MESvuZCV": { - "context": { - "majorColorEditorConfig": [ - { - "to": 1, - "value": "#4fa484" - }, - { - "from": 1, - "value": "#e85b79" - } - ] - }, - "dataSources": { - "primary": "ds_2DnYmzwe_ds_s5hxbtAJ_ds_gKx6Xfeo" - }, - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "trendColor": "#45d4ba" - }, - "title": "# Unhealthy Services", - "type": "splunk.singlevalue" - }, - "viz_NfToq8k9": { - "options": { - "strokeDasharray": 4 - }, - "type": "abslayout.line" - }, - "viz_V9QvnBuU": { - "options": { - "markdown": "**High Priority Services:**" - }, - "type": "splunk.markdown" - }, - "viz_VxL8hGQq": { - "options": { - "markdown": "**Entities:**" - }, - "type": "splunk.markdown" - }, - "viz_WvyO54ii": { - "options": { - "strokeDasharray": 4 - }, - "type": "abslayout.line" - }, - "viz_ab0EDjjj": { - "dataSources": { - "primary": "ds_OOpgEmbW" - }, - "options": { - "seriesColorsByField": { - "healthy": "#45d4ba", - "unhealthy": "#e85b79" - }, - "showIndependentYRanges": true, - "showSplitSeries": true, - "xAxisTitleVisibility": "hide", - "yAxisTitleVisibility": "hide" - }, - "title": "# UP: Critical & High Entities over time", - "type": "splunk.column" - }, - "viz_aw5XRPzb": { - "context": { - "majorColorEditorConfig": [ - { - "to": 100, - "value": "#e85b79" - }, - { - "from": 100, - "value": "#45d4ba" - } - ] - }, - "dataSources": { - "primary": "ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA" - }, - "description": "", - "eventHandlers": [ - { - "options": { - "newTab": true, - "url": "/app/trackme/TenantHome?tenant_id=services-mon" - }, - "type": "drilldown.customUrl" - } - ], - "options": { - "backgroundColor": "transparent", - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "numberPrecision": 2, - "unit": "%" - }, - "title": "03-Use-Cases-and-Controls", - "type": "splunk.singlevalue" - }, - "viz_chart_1": { - "dataSources": { - "primary": "ds_KfxEbgJD_ds_DhlVHEuA" - }, - "options": { - "collapseThreshold": 0.01, - "labelDisplay": "valuesAndPercentage", - "seriesColorsByField": { - "HEALTHY": "#45d4ba", - "UNHEALTHY": "#e85b79" - }, - "showDonutHole": true - }, - "title": "Services Status", - "type": "splunk.pie" - }, - "viz_jn3W19To": { - "context": { - "statusColumnFormatEditorConfig": { - "string": { - "unitPosition": "after" - } - }, - "statusRowColorsEditorConfig": [ - { - "match": "UNHEALTHY", - "value": "#e85b79" - }, - { - "match": "HEALTHY", - "value": "#45D4BA" - } - ] - }, - "dataSources": { - "primary": "ds_DrbLdb5s" - }, - "options": { - "columnFormat": { - "status": { - "data": "> table | seriesByName(\"status\") | formatByType(statusColumnFormatEditorConfig)", - "rowColors": "> table | seriesByName(\"status\") | matchValue(statusRowColorsEditorConfig)" - } - }, - "count": 100 - }, - "title": "Status by Service", - "type": "splunk.table" - }, - "viz_kLA6OLFw": { - "containerOptions": { - "visibility": { - "hideWhenNoData": true - } - }, - "dataSources": { - "primary": "ds_7Jp9SAQd" - }, - "title": "Incidents Activity", - "type": "splunk.events" - }, - "viz_kl8EskT3": { - "context": { - "majorColorEditorConfig": [ - { - "to": 1, - "value": "#e85b79" - }, - { - "from": 1, - "value": "#45d4ba" - } - ] - }, - "dataSources": { - "primary": "ds_geDdUIKX_ds_exLWUiHR_ds_DhlVHEuA" - }, - "description": "", - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)" - }, - "title": "# Healthy Services", - "type": "splunk.singlevalue" - }, - "viz_lqJn7EH9": { - "options": { - "markdown": "**Services:**" - }, - "type": "splunk.markdown" - }, - "viz_sqa1r50N": { - "context": { - "majorColorEditorConfig": [ - { - "to": 100, - "value": "#e85b79" - }, - { - "from": 100, - "value": "#45d4ba" - } - ] - }, - "dataSources": { - "primary": "ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA" - }, - "description": "", - "eventHandlers": [ - { - "options": { - "newTab": true, - "url": "/app/trackme/TenantHome?tenant_id=services-mon" - }, - "type": "drilldown.customUrl" - } - ], - "options": { - "backgroundColor": "transparent", - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "numberPrecision": 2, - "unit": "%" - }, - "title": "02-Data-Tiers", - "type": "splunk.singlevalue" - }, - "viz_txAonahI": { - "options": { - "strokeDasharray": 4 - }, - "type": "abslayout.line" - }, - "viz_uxwMJ618": { - "context": { - "majorColorEditorConfig": [ - { - "to": 1, - "value": "#4fa484" - }, - { - "from": 1, - "value": "#e85b79" - } - ] - }, - "dataSources": { - "primary": "ds_FRAEvrfZ_ds_2DnYmzwe_ds_s5hxbtAJ_ds_gKx6Xfeo" - }, - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "trendColor": "#45d4ba" - }, - "title": "# Unhealthy Services", - "type": "splunk.singlevalue" - }, - "viz_vErjutba": { - "context": { - "majorColorEditorConfig": [ - { - "to": 1, - "value": "#e85b79" - }, - { - "from": 1, - "value": "#45d4ba" - } - ] - }, - "dataSources": { - "primary": "ds_exLWUiHR_ds_DhlVHEuA" - }, - "description": "", - "options": { - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)" - }, - "title": "# Healthy Services", - "type": "splunk.singlevalue" - }, - "viz_xOmCNiuJ": { - "context": { - "majorColorEditorConfig": [ - { - "to": 100, - "value": "#e85b79" - }, - { - "from": 100, - "value": "#45d4ba" - } - ] - }, - "dataSources": { - "primary": "ds_sqB3bWwG_ds_DhlVHEuA" - }, - "description": "", - "eventHandlers": [ - { - "options": { - "newTab": true, - "url": "/app/trackme/TenantHome?tenant_id=services-mon" - }, - "type": "drilldown.customUrl" - } - ], - "options": { - "backgroundColor": "transparent", - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "numberPrecision": 2, - "unit": "%" - }, - "title": "01-Splunk-Infra-Availability", - "type": "splunk.singlevalue" - }, - "viz_z5EsWuws": { - "context": { - "majorColorEditorConfig": [ - { - "to": 100, - "value": "#e85b79" - }, - { - "from": 100, - "value": "#45d4ba" - } - ] - }, - "dataSources": { - "primary": "ds_UcZ7DZcJ_ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA" - }, - "description": "", - "eventHandlers": [ - { - "options": { - "newTab": true, - "url": "/app/trackme/TenantHome?tenant_id=services-mon" - }, - "type": "drilldown.customUrl" - } - ], - "options": { - "backgroundColor": "transparent", - "majorColor": "> majorValue | rangeValue(majorColorEditorConfig)", - "numberPrecision": 2, - "unit": "%" - }, - "title": "04-Cribl-Logstream", - "type": "splunk.singlevalue" - } - }, - "dataSources": { - "ds_2DnYmzwe_ds_s5hxbtAJ_ds_gKx6Xfeo": { - "name": "services_count_unhealthy_critical", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| where priority=\"critical\"\n| stats count(eval(object_state!=\"green\")) as count_unhealthy" - }, - "type": "ds.chain" - }, - "ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA": { - "name": "pct_grp_uses_cases_and_controls", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| where group=\"03-Use-Cases-and-Controls\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability" - }, - "type": "ds.chain" - }, - "ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA": { - "name": "pct_grp_data_tiers", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| where group=\"02-Data-Tiers\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability" - }, - "type": "ds.chain" - }, - "ds_7Jp9SAQd": { - "name": "stateful_incidents_activity", - "options": { - "query": "index=trackme_summary sourcetype=trackme:stateful_alerts tenant_id=services-mon", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - }, - "refresh": "5m" - }, - "type": "ds.search" - }, - "ds_DhlVHEuA": { - "name": "services_count_healthy", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| stats count(eval(object_state==\"green\")) as count_healthy" - }, - "type": "ds.chain" - }, - "ds_DrbLdb5s": { - "name": "services_mon_table_preview", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| eval status=if(object_state==\"green\", \"HEALTHY\", \"UNHEALTHY\")\n| table group, alias, status\n| sort 0 group, alias\n| rename group as service" - }, - "type": "ds.chain" - }, - "ds_FRAEvrfZ_ds_2DnYmzwe_ds_s5hxbtAJ_ds_gKx6Xfeo": { - "name": "services_count_unhealthy_high", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| where priority=\"high\"\n| stats count(eval(object_state!=\"green\")) as count_unhealthy" - }, - "type": "ds.chain" - }, - "ds_H7kDR54r_ds_DhlVHEuA": { - "name": "entities_count_healthy", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| stats sum(count_entities_up) as entities_healthy_count" - }, - "type": "ds.chain" - }, - "ds_KfxEbgJD_ds_DhlVHEuA": { - "name": "services_count_healthy_pie", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| eval status=if(object_state==\"green\", \"HEALTHY\", \"UNHEALTHY\")\n| table alias, status\n| sort 0 alias\n| rename alias as service\n| stats count by status" - }, - "type": "ds.chain" - }, - "ds_OOpgEmbW": { - "name": "entities_status_over_time", - "options": { - "query": "| mstats max(trackme.splk.flx.count_entities_down) as down, max(trackme.splk.flx.count_entities_up) as up where `trackme_metrics_idx(services-mon)` tenant_id=\"services-mon\" object_category=\"splk-flx\" by object span=5m\n| stats sum(up) as up, sum(down) as down by _time\n| timechart max(up) as healthy, max(down) as unhealthy minspan=5m bins=1000", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - }, - "refresh": "5m" - }, - "type": "ds.search" - }, - "ds_UcZ7DZcJ_ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA": { - "name": "pct_grp_cribl", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| where group=\"04-Cribl-Logstream\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability" - }, - "type": "ds.chain" - }, - "ds_YEkB6HsY": { - "name": "services_main_search", - "options": { - "query": "| trackmegetcoll tenant_id=services-mon component=flx\n| table group, object, alias, priority, object_state, metrics\n| sort 0 object\n| spath input=metrics", - "queryParameters": { - "earliest": "-15m", - "latest": "now" - }, - "refresh": "5m" - }, - "type": "ds.search" - }, - "ds_ZMQnbSnG_ds_7Jp9SAQd": { - "name": "fliping_events", - "options": { - "query": "index=trackme_summary sourcetype=trackme:flip tenant_id=services-mon", - "queryParameters": { - "earliest": "$global_time.earliest$", - "latest": "$global_time.latest$" - }, - "refresh": "5m" - }, - "type": "ds.search" - }, - "ds_d5yWeXJG": { - "name": "count_incidents_active", - "options": { - "query": "| inputlookup trackme_stateful_alerting_tenant_services-mon where alert_status IN (\"opened\", \"updated\")\n| stats count", - "queryParameters": { - "earliest": "-15m", - "latest": "now" - }, - "refresh": "5m" - }, - "type": "ds.search" - }, - "ds_exLWUiHR_ds_DhlVHEuA": { - "name": "services_count_healthy_critical", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| where priority=\"critical\"\n| stats count(eval(object_state==\"green\")) as count_healthy" - }, - "type": "ds.chain" - }, - "ds_gKx6Xfeo": { - "name": "entities_count_unhealthy", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| stats sum(count_entities_down) as entities_unhealthy_count" - }, - "type": "ds.chain" - }, - "ds_geDdUIKX_ds_exLWUiHR_ds_DhlVHEuA": { - "name": "services_count_healthy_high", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| where priority=\"high\"\n| stats count(eval(object_state==\"green\")) as count_healthy" - }, - "type": "ds.chain" - }, - "ds_lR3Fq4dM_ds_UcZ7DZcJ_ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA": { - "name": "pct_infra_grp_soar", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| where group=\"05-Splunk-SOAR\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability" - }, - "type": "ds.chain" - }, - "ds_s5hxbtAJ_ds_gKx6Xfeo": { - "name": "services_count_unhealthy", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| stats count(eval(object_state!=\"green\")) as count_unhealthy" - }, - "type": "ds.chain" - }, - "ds_sqB3bWwG_ds_DhlVHEuA": { - "name": "pct_infra_grp_splunk_infra", - "options": { - "extend": "ds_YEkB6HsY", - "query": "| where group=\"01-Splunk-Infra-Availability\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability" - }, - "type": "ds.chain" - } - }, - "layout": { - "globalInputs": [ - "input_global_trp" - ], - "layoutDefinitions": { - "layout_1": { - "options": { - "backgroundImage": { - "sizeType": "cover", - "src": "../../static/app/splunk-dashboard-studio/images/examples-hub/datacenter/Background_v2.png", - "x": 0, - "y": 0 - }, - "height": 1800, - "width": 1920 - }, - "structure": [ - { - "item": "viz_WvyO54ii", - "position": { - "from": { - "x": 90, - "y": 221 - }, - "to": { - "x": 574, - "y": 222 - } - }, - "type": "line" - }, - { - "item": "viz_txAonahI", - "position": { - "from": { - "x": 89, - "y": 381 - }, - "to": { - "x": 572, - "y": 382 - } - }, - "type": "line" - }, - { - "item": "viz_NfToq8k9", - "position": { - "from": { - "x": 200, - "y": 543 - }, - "to": { - "x": 572, - "y": 543 - } - }, - "type": "line" - }, - { - "item": "viz_M6fWsdGj", - "position": { - "from": { - "x": 189, - "y": 702 - }, - "to": { - "x": 571, - "y": 703 - } - }, - "type": "line" - }, - { - "item": "viz_chart_1", - "position": { - "h": 290, - "w": 590, - "x": 590, - "y": 200 - }, - "type": "block" - }, - { - "item": "viz_jn3W19To", - "position": { - "h": 670, - "w": 570, - "x": 1190, - "y": 200 - }, - "type": "block" - }, - { - "item": "viz_K39k1shE", - "position": { - "h": 120, - "w": 280, - "x": 300, - "y": 400 - }, - "type": "block" - }, - { - "item": "viz_28VB9M4d", - "position": { - "h": 120, - "w": 280, - "x": 10, - "y": 240 - }, - "type": "block" - }, - { - "item": "viz_FUEI8OpS", - "position": { - "h": 60, - "w": 120, - "x": 1630, - "y": 10 - }, - "type": "block" - }, - { - "item": "viz_JYRSZmd5", - "position": { - "h": 120, - "w": 280, - "x": 10, - "y": 400 - }, - "type": "block" - }, - { - "item": "viz_AknRpini", - "position": { - "h": 120, - "w": 280, - "x": 300, - "y": 240 - }, - "type": "block" - }, - { - "item": "viz_vErjutba", - "position": { - "h": 120, - "w": 280, - "x": 10, - "y": 560 - }, - "type": "block" - }, - { - "item": "viz_MESvuZCV", - "position": { - "h": 120, - "w": 280, - "x": 300, - "y": 560 - }, - "type": "block" - }, - { - "item": "viz_kl8EskT3", - "position": { - "h": 120, - "w": 280, - "x": 10, - "y": 730 - }, - "type": "block" - }, - { - "item": "viz_uxwMJ618", - "position": { - "h": 120, - "w": 280, - "x": 300, - "y": 730 - }, - "type": "block" - }, - { - "item": "viz_lqJn7EH9", - "position": { - "h": 20, - "w": 80, - "x": 10, - "y": 210 - }, - "type": "block" - }, - { - "item": "viz_VxL8hGQq", - "position": { - "h": 20, - "w": 80, - "x": 10, - "y": 370 - }, - "type": "block" - }, - { - "item": "viz_1wtXnO72", - "position": { - "h": 20, - "w": 190, - "x": 10, - "y": 530 - }, - "type": "block" - }, - { - "item": "viz_V9QvnBuU", - "position": { - "h": 20, - "w": 190, - "x": 10, - "y": 690 - }, - "type": "block" - }, - { - "item": "viz_ab0EDjjj", - "position": { - "h": 370, - "w": 590, - "x": 590, - "y": 500 - }, - "type": "block" - }, - { - "item": "viz_xOmCNiuJ", - "position": { - "h": 120, - "w": 280, - "x": 10, - "y": 80 - }, - "type": "block" - }, - { - "item": "viz_sqa1r50N", - "position": { - "h": 120, - "w": 280, - "x": 300, - "y": 80 - }, - "type": "block" - }, - { - "item": "viz_aw5XRPzb", - "position": { - "h": 120, - "w": 280, - "x": 590, - "y": 80 - }, - "type": "block" - }, - { - "item": "viz_z5EsWuws", - "position": { - "h": 120, - "w": 280, - "x": 880, - "y": 80 - }, - "type": "block" - }, - { - "item": "viz_ImzF0Zr2", - "position": { - "h": 120, - "w": 280, - "x": 1170, - "y": 80 - }, - "type": "block" - }, - { - "item": "viz_BK9f270s", - "position": { - "h": 120, - "w": 280, - "x": 1460, - "y": 80 - }, - "type": "block" - }, - { - "item": "viz_1g7THdTK", - "position": { - "from": { - "x": 11, - "y": 886 - }, - "to": { - "x": 1758, - "y": 886 - } - }, - "type": "line" - }, - { - "item": "viz_kLA6OLFw", - "position": { - "h": 500, - "w": 870, - "x": 10, - "y": 900 - }, - "type": "block" - }, - { - "item": "viz_0EFGjTlR", - "position": { - "h": 500, - "w": 870, - "x": 890, - "y": 900 - }, - "type": "block" - } - ], - "type": "absolute" - } - }, - "tabs": { - "items": [ - { - "label": "New tab", - "layoutId": "layout_1" - } - ] - } - } -} - ]]> - - \ No newline at end of file diff --git a/dashboards/trackme_triggered_alerts.xml b/dashboards/trackme_triggered_alerts.xml deleted file mode 100644 index 41f4d736..00000000 --- a/dashboards/trackme_triggered_alerts.xml +++ /dev/null @@ -1,4 +0,0 @@ - - - - \ No newline at end of file