majorValue | rangeValue(majorColorEditorConfig)"
},
"title": "# Healthy Services",
"type": "splunk.singlevalue"
},
"viz_AknRpini": {
"context": {
"majorColorEditorConfig": [
{
"to": 1,
"value": "#4fa484"
},
{
"from": 1,
"value": "#e85b79"
}
]
},
"dataSources": {
"primary": "ds_s5hxbtAJ_ds_gKx6Xfeo"
},
"options": {
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"trendColor": "#45d4ba"
},
"title": "# Unhealthy Services",
"type": "splunk.singlevalue"
},
"viz_BK9f270s": {
"context": {
"majorColorEditorConfig": [
{
"to": 1,
"value": "#45d4ba"
},
{
"from": 1,
"value": "#e85b79"
}
]
},
"dataSources": {
"primary": "ds_d5yWeXJG"
},
"description": "",
"eventHandlers": [
{
"options": {
"newTab": true,
"url": "/app/trackme/TenantHome?tenant_id=services-mon"
},
"type": "drilldown.customUrl"
}
],
"options": {
"backgroundColor": "transparent",
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"unit": ""
},
"title": "# Active Incidents",
"type": "splunk.singlevalue"
},
"viz_FUEI8OpS": {
"options": {
"preserveAspectRatio": true,
"src": "../../static/app/trackme/icons/trackme.png"
},
"type": "splunk.image"
},
"viz_ImzF0Zr2": {
"context": {
"majorColorEditorConfig": [
{
"to": 100,
"value": "#e85b79"
},
{
"from": 100,
"value": "#45d4ba"
}
]
},
"dataSources": {
"primary": "ds_lR3Fq4dM_ds_UcZ7DZcJ_ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA"
},
"description": "",
"eventHandlers": [
{
"options": {
"newTab": true,
"url": "/app/trackme/TenantHome?tenant_id=services-mon"
},
"type": "drilldown.customUrl"
}
],
"options": {
"backgroundColor": "transparent",
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"numberPrecision": 2,
"unit": "%"
},
"title": "05-Splunk-SOAR",
"type": "splunk.singlevalue"
},
"viz_JYRSZmd5": {
"context": {
"majorColorEditorConfig": [
{
"to": 1,
"value": "#e85b79"
},
{
"from": 1,
"value": "#45d4ba"
}
]
},
"dataSources": {
"primary": "ds_H7kDR54r_ds_DhlVHEuA"
},
"description": "",
"options": {
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)"
},
"title": "# Healthy Entities",
"type": "splunk.singlevalue"
},
"viz_K39k1shE": {
"context": {
"majorColorEditorConfig": [
{
"to": 1,
"value": "#4fa484"
},
{
"from": 1,
"value": "#e85b79"
}
]
},
"dataSources": {
"primary": "ds_gKx6Xfeo"
},
"options": {
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"trendColor": "#45d4ba"
},
"title": "# Unhealthy Entities",
"type": "splunk.singlevalue"
},
"viz_M6fWsdGj": {
"options": {
"strokeDasharray": 4
},
"type": "abslayout.line"
},
"viz_MESvuZCV": {
"context": {
"majorColorEditorConfig": [
{
"to": 1,
"value": "#4fa484"
},
{
"from": 1,
"value": "#e85b79"
}
]
},
"dataSources": {
"primary": "ds_2DnYmzwe_ds_s5hxbtAJ_ds_gKx6Xfeo"
},
"options": {
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"trendColor": "#45d4ba"
},
"title": "# Unhealthy Services",
"type": "splunk.singlevalue"
},
"viz_NfToq8k9": {
"options": {
"strokeDasharray": 4
},
"type": "abslayout.line"
},
"viz_V9QvnBuU": {
"options": {
"markdown": "**High Priority Services:**"
},
"type": "splunk.markdown"
},
"viz_VxL8hGQq": {
"options": {
"markdown": "**Entities:**"
},
"type": "splunk.markdown"
},
"viz_WvyO54ii": {
"options": {
"strokeDasharray": 4
},
"type": "abslayout.line"
},
"viz_ab0EDjjj": {
"dataSources": {
"primary": "ds_OOpgEmbW"
},
"options": {
"seriesColorsByField": {
"healthy": "#45d4ba",
"unhealthy": "#e85b79"
},
"showIndependentYRanges": true,
"showSplitSeries": true,
"xAxisTitleVisibility": "hide",
"yAxisTitleVisibility": "hide"
},
"title": "# UP: Critical & High Entities over time",
"type": "splunk.column"
},
"viz_aw5XRPzb": {
"context": {
"majorColorEditorConfig": [
{
"to": 100,
"value": "#e85b79"
},
{
"from": 100,
"value": "#45d4ba"
}
]
},
"dataSources": {
"primary": "ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA"
},
"description": "",
"eventHandlers": [
{
"options": {
"newTab": true,
"url": "/app/trackme/TenantHome?tenant_id=services-mon"
},
"type": "drilldown.customUrl"
}
],
"options": {
"backgroundColor": "transparent",
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"numberPrecision": 2,
"unit": "%"
},
"title": "03-Use-Cases-and-Controls",
"type": "splunk.singlevalue"
},
"viz_chart_1": {
"dataSources": {
"primary": "ds_KfxEbgJD_ds_DhlVHEuA"
},
"options": {
"collapseThreshold": 0.01,
"labelDisplay": "valuesAndPercentage",
"seriesColorsByField": {
"HEALTHY": "#45d4ba",
"UNHEALTHY": "#e85b79"
},
"showDonutHole": true
},
"title": "Services Status",
"type": "splunk.pie"
},
"viz_jn3W19To": {
"context": {
"statusColumnFormatEditorConfig": {
"string": {
"unitPosition": "after"
}
},
"statusRowColorsEditorConfig": [
{
"match": "UNHEALTHY",
"value": "#e85b79"
},
{
"match": "HEALTHY",
"value": "#45D4BA"
}
]
},
"dataSources": {
"primary": "ds_DrbLdb5s"
},
"options": {
"columnFormat": {
"status": {
"data": "> table | seriesByName(\"status\") | formatByType(statusColumnFormatEditorConfig)",
"rowColors": "> table | seriesByName(\"status\") | matchValue(statusRowColorsEditorConfig)"
}
},
"count": 100
},
"title": "Status by Service",
"type": "splunk.table"
},
"viz_kLA6OLFw": {
"containerOptions": {
"visibility": {
"hideWhenNoData": true
}
},
"dataSources": {
"primary": "ds_7Jp9SAQd"
},
"title": "Incidents Activity",
"type": "splunk.events"
},
"viz_kl8EskT3": {
"context": {
"majorColorEditorConfig": [
{
"to": 1,
"value": "#e85b79"
},
{
"from": 1,
"value": "#45d4ba"
}
]
},
"dataSources": {
"primary": "ds_geDdUIKX_ds_exLWUiHR_ds_DhlVHEuA"
},
"description": "",
"options": {
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)"
},
"title": "# Healthy Services",
"type": "splunk.singlevalue"
},
"viz_lqJn7EH9": {
"options": {
"markdown": "**Services:**"
},
"type": "splunk.markdown"
},
"viz_sqa1r50N": {
"context": {
"majorColorEditorConfig": [
{
"to": 100,
"value": "#e85b79"
},
{
"from": 100,
"value": "#45d4ba"
}
]
},
"dataSources": {
"primary": "ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA"
},
"description": "",
"eventHandlers": [
{
"options": {
"newTab": true,
"url": "/app/trackme/TenantHome?tenant_id=services-mon"
},
"type": "drilldown.customUrl"
}
],
"options": {
"backgroundColor": "transparent",
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"numberPrecision": 2,
"unit": "%"
},
"title": "02-Data-Tiers",
"type": "splunk.singlevalue"
},
"viz_txAonahI": {
"options": {
"strokeDasharray": 4
},
"type": "abslayout.line"
},
"viz_uxwMJ618": {
"context": {
"majorColorEditorConfig": [
{
"to": 1,
"value": "#4fa484"
},
{
"from": 1,
"value": "#e85b79"
}
]
},
"dataSources": {
"primary": "ds_FRAEvrfZ_ds_2DnYmzwe_ds_s5hxbtAJ_ds_gKx6Xfeo"
},
"options": {
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"trendColor": "#45d4ba"
},
"title": "# Unhealthy Services",
"type": "splunk.singlevalue"
},
"viz_vErjutba": {
"context": {
"majorColorEditorConfig": [
{
"to": 1,
"value": "#e85b79"
},
{
"from": 1,
"value": "#45d4ba"
}
]
},
"dataSources": {
"primary": "ds_exLWUiHR_ds_DhlVHEuA"
},
"description": "",
"options": {
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)"
},
"title": "# Healthy Services",
"type": "splunk.singlevalue"
},
"viz_xOmCNiuJ": {
"context": {
"majorColorEditorConfig": [
{
"to": 100,
"value": "#e85b79"
},
{
"from": 100,
"value": "#45d4ba"
}
]
},
"dataSources": {
"primary": "ds_sqB3bWwG_ds_DhlVHEuA"
},
"description": "",
"eventHandlers": [
{
"options": {
"newTab": true,
"url": "/app/trackme/TenantHome?tenant_id=services-mon"
},
"type": "drilldown.customUrl"
}
],
"options": {
"backgroundColor": "transparent",
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"numberPrecision": 2,
"unit": "%"
},
"title": "01-Splunk-Infra-Availability",
"type": "splunk.singlevalue"
},
"viz_z5EsWuws": {
"context": {
"majorColorEditorConfig": [
{
"to": 100,
"value": "#e85b79"
},
{
"from": 100,
"value": "#45d4ba"
}
]
},
"dataSources": {
"primary": "ds_UcZ7DZcJ_ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA"
},
"description": "",
"eventHandlers": [
{
"options": {
"newTab": true,
"url": "/app/trackme/TenantHome?tenant_id=services-mon"
},
"type": "drilldown.customUrl"
}
],
"options": {
"backgroundColor": "transparent",
"majorColor": "> majorValue | rangeValue(majorColorEditorConfig)",
"numberPrecision": 2,
"unit": "%"
},
"title": "04-Cribl-Logstream",
"type": "splunk.singlevalue"
}
},
"dataSources": {
"ds_2DnYmzwe_ds_s5hxbtAJ_ds_gKx6Xfeo": {
"name": "services_count_unhealthy_critical",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| where priority=\"critical\"\n| stats count(eval(object_state!=\"green\")) as count_unhealthy"
},
"type": "ds.chain"
},
"ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA": {
"name": "pct_grp_uses_cases_and_controls",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| where group=\"03-Use-Cases-and-Controls\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability"
},
"type": "ds.chain"
},
"ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA": {
"name": "pct_grp_data_tiers",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| where group=\"02-Data-Tiers\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability"
},
"type": "ds.chain"
},
"ds_7Jp9SAQd": {
"name": "stateful_incidents_activity",
"options": {
"query": "index=trackme_summary sourcetype=trackme:stateful_alerts tenant_id=services-mon",
"queryParameters": {
"earliest": "$global_time.earliest$",
"latest": "$global_time.latest$"
},
"refresh": "5m"
},
"type": "ds.search"
},
"ds_DhlVHEuA": {
"name": "services_count_healthy",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| stats count(eval(object_state==\"green\")) as count_healthy"
},
"type": "ds.chain"
},
"ds_DrbLdb5s": {
"name": "services_mon_table_preview",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| eval status=if(object_state==\"green\", \"HEALTHY\", \"UNHEALTHY\")\n| table group, alias, status\n| sort 0 group, alias\n| rename group as service"
},
"type": "ds.chain"
},
"ds_FRAEvrfZ_ds_2DnYmzwe_ds_s5hxbtAJ_ds_gKx6Xfeo": {
"name": "services_count_unhealthy_high",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| where priority=\"high\"\n| stats count(eval(object_state!=\"green\")) as count_unhealthy"
},
"type": "ds.chain"
},
"ds_H7kDR54r_ds_DhlVHEuA": {
"name": "entities_count_healthy",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| stats sum(count_entities_up) as entities_healthy_count"
},
"type": "ds.chain"
},
"ds_KfxEbgJD_ds_DhlVHEuA": {
"name": "services_count_healthy_pie",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| eval status=if(object_state==\"green\", \"HEALTHY\", \"UNHEALTHY\")\n| table alias, status\n| sort 0 alias\n| rename alias as service\n| stats count by status"
},
"type": "ds.chain"
},
"ds_OOpgEmbW": {
"name": "entities_status_over_time",
"options": {
"query": "| mstats max(trackme.splk.flx.count_entities_down) as down, max(trackme.splk.flx.count_entities_up) as up where `trackme_metrics_idx(services-mon)` tenant_id=\"services-mon\" object_category=\"splk-flx\" by object span=5m\n| stats sum(up) as up, sum(down) as down by _time\n| timechart max(up) as healthy, max(down) as unhealthy minspan=5m bins=1000",
"queryParameters": {
"earliest": "$global_time.earliest$",
"latest": "$global_time.latest$"
},
"refresh": "5m"
},
"type": "ds.search"
},
"ds_UcZ7DZcJ_ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA": {
"name": "pct_grp_cribl",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| where group=\"04-Cribl-Logstream\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability"
},
"type": "ds.chain"
},
"ds_YEkB6HsY": {
"name": "services_main_search",
"options": {
"query": "| trackmegetcoll tenant_id=services-mon component=flx\n| table group, object, alias, priority, object_state, metrics\n| sort 0 object\n| spath input=metrics",
"queryParameters": {
"earliest": "-15m",
"latest": "now"
},
"refresh": "5m"
},
"type": "ds.search"
},
"ds_ZMQnbSnG_ds_7Jp9SAQd": {
"name": "fliping_events",
"options": {
"query": "index=trackme_summary sourcetype=trackme:flip tenant_id=services-mon",
"queryParameters": {
"earliest": "$global_time.earliest$",
"latest": "$global_time.latest$"
},
"refresh": "5m"
},
"type": "ds.search"
},
"ds_d5yWeXJG": {
"name": "count_incidents_active",
"options": {
"query": "| inputlookup trackme_stateful_alerting_tenant_services-mon where alert_status IN (\"opened\", \"updated\")\n| stats count",
"queryParameters": {
"earliest": "-15m",
"latest": "now"
},
"refresh": "5m"
},
"type": "ds.search"
},
"ds_exLWUiHR_ds_DhlVHEuA": {
"name": "services_count_healthy_critical",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| where priority=\"critical\"\n| stats count(eval(object_state==\"green\")) as count_healthy"
},
"type": "ds.chain"
},
"ds_gKx6Xfeo": {
"name": "entities_count_unhealthy",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| stats sum(count_entities_down) as entities_unhealthy_count"
},
"type": "ds.chain"
},
"ds_geDdUIKX_ds_exLWUiHR_ds_DhlVHEuA": {
"name": "services_count_healthy_high",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| where priority=\"high\"\n| stats count(eval(object_state==\"green\")) as count_healthy"
},
"type": "ds.chain"
},
"ds_lR3Fq4dM_ds_UcZ7DZcJ_ds_2ZTCKK9f_ds_3LTtlnYr_ds_sqB3bWwG_ds_DhlVHEuA": {
"name": "pct_infra_grp_soar",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| where group=\"05-Splunk-SOAR\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability"
},
"type": "ds.chain"
},
"ds_s5hxbtAJ_ds_gKx6Xfeo": {
"name": "services_count_unhealthy",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| stats count(eval(object_state!=\"green\")) as count_unhealthy"
},
"type": "ds.chain"
},
"ds_sqB3bWwG_ds_DhlVHEuA": {
"name": "pct_infra_grp_splunk_infra",
"options": {
"extend": "ds_YEkB6HsY",
"query": "| where group=\"01-Splunk-Infra-Availability\"\n| stats sum(count_entities) as count_entities, sum(count_entities_down) as down, sum(count_entities_up) as up\n| eval pct_availability=up/count_entities*100\n| fields pct_availability"
},
"type": "ds.chain"
}
},
"layout": {
"globalInputs": [
"input_global_trp"
],
"layoutDefinitions": {
"layout_1": {
"options": {
"backgroundImage": {
"sizeType": "cover",
"src": "../../static/app/splunk-dashboard-studio/images/examples-hub/datacenter/Background_v2.png",
"x": 0,
"y": 0
},
"height": 1800,
"width": 1920
},
"structure": [
{
"item": "viz_WvyO54ii",
"position": {
"from": {
"x": 90,
"y": 221
},
"to": {
"x": 574,
"y": 222
}
},
"type": "line"
},
{
"item": "viz_txAonahI",
"position": {
"from": {
"x": 89,
"y": 381
},
"to": {
"x": 572,
"y": 382
}
},
"type": "line"
},
{
"item": "viz_NfToq8k9",
"position": {
"from": {
"x": 200,
"y": 543
},
"to": {
"x": 572,
"y": 543
}
},
"type": "line"
},
{
"item": "viz_M6fWsdGj",
"position": {
"from": {
"x": 189,
"y": 702
},
"to": {
"x": 571,
"y": 703
}
},
"type": "line"
},
{
"item": "viz_chart_1",
"position": {
"h": 290,
"w": 590,
"x": 590,
"y": 200
},
"type": "block"
},
{
"item": "viz_jn3W19To",
"position": {
"h": 670,
"w": 570,
"x": 1190,
"y": 200
},
"type": "block"
},
{
"item": "viz_K39k1shE",
"position": {
"h": 120,
"w": 280,
"x": 300,
"y": 400
},
"type": "block"
},
{
"item": "viz_28VB9M4d",
"position": {
"h": 120,
"w": 280,
"x": 10,
"y": 240
},
"type": "block"
},
{
"item": "viz_FUEI8OpS",
"position": {
"h": 60,
"w": 120,
"x": 1630,
"y": 10
},
"type": "block"
},
{
"item": "viz_JYRSZmd5",
"position": {
"h": 120,
"w": 280,
"x": 10,
"y": 400
},
"type": "block"
},
{
"item": "viz_AknRpini",
"position": {
"h": 120,
"w": 280,
"x": 300,
"y": 240
},
"type": "block"
},
{
"item": "viz_vErjutba",
"position": {
"h": 120,
"w": 280,
"x": 10,
"y": 560
},
"type": "block"
},
{
"item": "viz_MESvuZCV",
"position": {
"h": 120,
"w": 280,
"x": 300,
"y": 560
},
"type": "block"
},
{
"item": "viz_kl8EskT3",
"position": {
"h": 120,
"w": 280,
"x": 10,
"y": 730
},
"type": "block"
},
{
"item": "viz_uxwMJ618",
"position": {
"h": 120,
"w": 280,
"x": 300,
"y": 730
},
"type": "block"
},
{
"item": "viz_lqJn7EH9",
"position": {
"h": 20,
"w": 80,
"x": 10,
"y": 210
},
"type": "block"
},
{
"item": "viz_VxL8hGQq",
"position": {
"h": 20,
"w": 80,
"x": 10,
"y": 370
},
"type": "block"
},
{
"item": "viz_1wtXnO72",
"position": {
"h": 20,
"w": 190,
"x": 10,
"y": 530
},
"type": "block"
},
{
"item": "viz_V9QvnBuU",
"position": {
"h": 20,
"w": 190,
"x": 10,
"y": 690
},
"type": "block"
},
{
"item": "viz_ab0EDjjj",
"position": {
"h": 370,
"w": 590,
"x": 590,
"y": 500
},
"type": "block"
},
{
"item": "viz_xOmCNiuJ",
"position": {
"h": 120,
"w": 280,
"x": 10,
"y": 80
},
"type": "block"
},
{
"item": "viz_sqa1r50N",
"position": {
"h": 120,
"w": 280,
"x": 300,
"y": 80
},
"type": "block"
},
{
"item": "viz_aw5XRPzb",
"position": {
"h": 120,
"w": 280,
"x": 590,
"y": 80
},
"type": "block"
},
{
"item": "viz_z5EsWuws",
"position": {
"h": 120,
"w": 280,
"x": 880,
"y": 80
},
"type": "block"
},
{
"item": "viz_ImzF0Zr2",
"position": {
"h": 120,
"w": 280,
"x": 1170,
"y": 80
},
"type": "block"
},
{
"item": "viz_BK9f270s",
"position": {
"h": 120,
"w": 280,
"x": 1460,
"y": 80
},
"type": "block"
},
{
"item": "viz_1g7THdTK",
"position": {
"from": {
"x": 11,
"y": 886
},
"to": {
"x": 1758,
"y": 886
}
},
"type": "line"
},
{
"item": "viz_kLA6OLFw",
"position": {
"h": 500,
"w": 870,
"x": 10,
"y": 900
},
"type": "block"
},
{
"item": "viz_0EFGjTlR",
"position": {
"h": 500,
"w": 870,
"x": 890,
"y": 900
},
"type": "block"
}
],
"type": "absolute"
}
},
"tabs": {
"items": [
{
"label": "New tab",
"layoutId": "layout_1"
}
]
}
}
}
]]>