{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":true,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Connections","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Connections\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-last-update-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Update Time\"},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.connection-id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Connection ID\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.username\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"User Name\"},\"schema\":\"metric\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.device-ip\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Source IP\"},\"schema\":\"metric\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.geo.country_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Country\"},\"schema\":\"metric\"},{\"id\":\"11\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.geo.city_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"City\"},\"schema\":\"metric\"},{\"id\":\"9\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-start-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"asc\",\"customLabel\":\"Start Time\"},\"schema\":\"metric\"},{\"id\":\"10\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-end-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"End Time\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"854ac790-dfc3-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-30T10:52:32.354Z","version":"Wzg4NTIsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ClientVPN - Login Success (markdown)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success (markdown)\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":24,\"openLinksInNewTab\":false,\"markdown\":\"Login Success\"}}"},"id":"bbb512e0-e004-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-05-30T10:39:07.534Z","version":"Wzg3NjcsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Count (line chart)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Count (line chart)\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-7d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"6724a680-e00b-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:13:43.685Z","version":"WzEwMjgwLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Count by User","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Count by User\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"Login Count\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":1000,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"NO NAME\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-start-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Login Time\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"d376e490-de5a-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:14:42.451Z","version":"WzEwMzQyLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Count by Source IP","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Count by Source IP\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Country\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.city_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"City\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.as.organization.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"ISP\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"e11a3710-de59-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:14:33.282Z","version":"WzEwMzIyLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success by Device Type","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success by Device Type\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.device-type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"283847d0-de5b-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:15:08.010Z","version":"WzEwMzU3LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Src Country(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Src Country(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"bbcaa230-de4d-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:15:38.232Z","version":"WzEwMzgyLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Src Country(Geo)","uiStateJSON":"{\"mapZoom\":2,\"mapCenter\":[30.094512943110125,2.266144752502442]}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Src Country(Geo)\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"attribution\":\"\",\"format\":\"image/png\",\"layers\":\"\",\"styles\":\"\",\"transparent\":true,\"version\":\"\"},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"},\"url\":\"\"}}}"},"id":"5cda0e20-de5a-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:16:04.264Z","version":"WzEwMzk4LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"success\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"success\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Success Src Country(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Success Src Country(Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"26508e50-de56-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:16:58.801Z","version":"WzEwNDE5LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-reset\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-reset\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Top 10 Network Transfer","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Top 10 Network Transfer\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"network.bytes\",\"customLabel\":\"Bytes\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.connection-id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Connection ID\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.username\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Name\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-start-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Start Time\"},\"schema\":\"metric\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-end-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"End Time\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"6a3fc1d0-e00e-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:20:22.330Z","version":"WzEwNDQzLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-reset\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-reset\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Top 10 Long Duration","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Top 10 Long Duration\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"sum\",\"params\":{\"field\":\"event.duration\",\"customLabel\":\"Duration\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.connection-id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Connection ID\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.username\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Name\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-start-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Start Time\"},\"schema\":\"metric\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-end-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"End Time\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"percentageCol\":\"\",\"showMetricsAtAllLevels\":false,\"showPartialRows\":false,\"showTotal\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"totalFunc\":\"sum\"}}"},"id":"83d788e0-e00d-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:21:02.922Z","version":"WzEwNDYzLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ClientVPN - Login Failure (markdown)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure (markdown)\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":24,\"openLinksInNewTab\":false,\"markdown\":\"Login Failure\"}}"},"id":"87a43a80-de5b-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-05-28T07:55:24.072Z","version":"WzM5MTgsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure Count (line chart)","uiStateJSON":"{\"vis\":{\"colors\":{\"Count\":\"#E24D42\"}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure Count (line chart)\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-7d\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"}],\"params\":{\"addLegend\":true,\"addTimeMarker\":false,\"addTooltip\":false,\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"labels\":{\"filter\":true,\"show\":true,\"truncate\":100},\"position\":\"bottom\",\"scale\":{\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{},\"type\":\"category\"}],\"grid\":{\"categoryLines\":false},\"labels\":{},\"legendPosition\":\"right\",\"seriesParams\":[{\"data\":{\"id\":\"1\",\"label\":\"Count\"},\"drawLinesBetweenPoints\":true,\"interpolate\":\"linear\",\"lineWidth\":2,\"mode\":\"stacked\",\"show\":true,\"showCircles\":true,\"type\":\"line\",\"valueAxis\":\"ValueAxis-1\"}],\"thresholdLine\":{\"color\":\"#E7664C\",\"show\":false,\"style\":\"full\",\"value\":10,\"width\":1},\"times\":[],\"type\":\"line\",\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"labels\":{\"filter\":false,\"rotate\":0,\"show\":true,\"truncate\":100},\"name\":\"LeftAxis-1\",\"position\":\"left\",\"scale\":{\"mode\":\"normal\",\"type\":\"linear\"},\"show\":true,\"style\":{},\"title\":{\"text\":\"Count\"},\"type\":\"value\"}]}}"},"id":"7332b300-e00a-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:21:34.909Z","version":"WzEwNDc5LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure Src Country(Pie)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure Src Country(Pie)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"c175cf80-de56-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:36:30.679Z","version":"WzEwNTAyLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure Src Country(Table)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure Src Country(Table)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source Country\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"0b1f89a0-de57-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:36:54.498Z","version":"WzEwNTI5LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure Count by User","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure Count by User\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.username\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Name\",\"customLabel\":\"User Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"95b41510-e008-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:37:15.247Z","version":"WzEwNTU0LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure by Certification","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure by Certification\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.common-name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"No Certification\",\"customLabel\":\"Certification Common Name\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"4fff62e0-e008-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:37:34.390Z","version":"WzEwNTc0LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"event.outcome\",\"negate\":false,\"params\":{\"query\":\"failure\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index\"},\"query\":{\"match_phrase\":{\"event.outcome\":\"failure\"}}},{\"$state\":{\"store\":\"appState\"},\"meta\":{\"alias\":null,\"disabled\":false,\"key\":\"clientvpn.connection-log-type\",\"negate\":false,\"params\":{\"query\":\"connection-attempt\"},\"type\":\"phrase\",\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index\"},\"query\":{\"match_phrase\":{\"clientvpn.connection-log-type\":\"connection-attempt\"}}}],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"ClientVPN - Login Failure by IP address","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"ClientVPN - Login Failure by IP address\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.geo.country_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Country\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.geo.city_name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"City\"},\"schema\":\"metric\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"source.as.organization.name\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"ISP\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"clientvpn.device-ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-last-update-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"asc\",\"customLabel\":\"First Seen\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"clientvpn.connection-last-update-time\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Seen\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"eded4480-e009-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[0].meta.index","type":"index-pattern"},{"id":"0abf5230-dd9c-11ec-9f8e-d90a7585513a","name":"kibanaSavedObjectMeta.searchSourceJSON.filter[1].meta.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-06-02T01:38:49.982Z","version":"WzEwNjEzLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"ClientVPN - Details(markdown)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"ClientVPN - Details(markdown)\",\"type\":\"markdown\",\"aggs\":[],\"params\":{\"fontSize\":24,\"openLinksInNewTab\":false,\"markdown\":\"Details\"}}"},"id":"5dfe40e0-e01d-11ec-9f8e-d90a7585513a","migrationVersion":{"visualization":"7.10.0"},"references":[],"type":"visualization","updated_at":"2022-05-30T13:36:26.406Z","version":"WzEwMTE2LDFd"} {"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"9a8d40d3-c4e2-49c7-8fe4-af313c0aa426\",\"w\":48,\"x\":0,\"y\":0},\"panelIndex\":\"9a8d40d3-c4e2-49c7-8fe4-af313c0aa426\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_0\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":3,\"i\":\"c6e0d6e7-7910-453c-bf04-c5e3c51467d3\",\"w\":48,\"x\":0,\"y\":14},\"panelIndex\":\"c6e0d6e7-7910-453c-bf04-c5e3c51467d3\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_1\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":9,\"i\":\"7454ab88-2699-4af2-9553-cdee0e34b3a5\",\"w\":48,\"x\":0,\"y\":17},\"panelIndex\":\"7454ab88-2699-4af2-9553-cdee0e34b3a5\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_2\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"d96627e0-7709-4199-b48a-f18b2a254c35\",\"w\":14,\"x\":0,\"y\":26},\"panelIndex\":\"d96627e0-7709-4199-b48a-f18b2a254c35\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_3\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":14,\"i\":\"7862d506-b8f7-4e58-9e62-d31372bbe477\",\"w\":22,\"x\":14,\"y\":26},\"panelIndex\":\"7862d506-b8f7-4e58-9e62-d31372bbe477\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_4\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":7,\"i\":\"c28dc991-a426-4e84-9f77-9cbe6c228616\",\"w\":12,\"x\":36,\"y\":26},\"panelIndex\":\"c28dc991-a426-4e84-9f77-9cbe6c228616\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_5\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":7,\"i\":\"0b6992da-a824-4e2c-ba29-9e4825158775\",\"w\":12,\"x\":36,\"y\":33},\"panelIndex\":\"0b6992da-a824-4e2c-ba29-9e4825158775\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_6\"},{\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":null},\"gridData\":{\"h\":17,\"i\":\"37bef3d5-f9fd-4e1e-9b80-cd85c8f88a40\",\"w\":36,\"x\":0,\"y\":40},\"panelIndex\":\"37bef3d5-f9fd-4e1e-9b80-cd85c8f88a40\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_7\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":17,\"i\":\"d78d5a28-caf9-46d9-a771-8997394938b9\",\"w\":12,\"x\":36,\"y\":40},\"panelIndex\":\"d78d5a28-caf9-46d9-a771-8997394938b9\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_8\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"7ebb918b-54b6-48a9-a4e7-01b85d07ef82\",\"w\":24,\"x\":0,\"y\":57},\"panelIndex\":\"7ebb918b-54b6-48a9-a4e7-01b85d07ef82\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_9\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"4b8e70cf-d692-4b02-95a3-6dd8879e00fc\",\"w\":24,\"x\":24,\"y\":57},\"panelIndex\":\"4b8e70cf-d692-4b02-95a3-6dd8879e00fc\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_10\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":3,\"i\":\"259518e1-9fc7-4c0d-ab96-cbeba1846989\",\"w\":48,\"x\":0,\"y\":72},\"panelIndex\":\"259518e1-9fc7-4c0d-ab96-cbeba1846989\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_11\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":8,\"i\":\"d2f1d814-6ae6-4637-a1be-658e9c13148e\",\"w\":48,\"x\":0,\"y\":75},\"panelIndex\":\"d2f1d814-6ae6-4637-a1be-658e9c13148e\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_12\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"a043c505-ec87-4bdd-9e79-eb5ea4860b0d\",\"w\":15,\"x\":0,\"y\":83},\"panelIndex\":\"a043c505-ec87-4bdd-9e79-eb5ea4860b0d\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_13\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"5ba1c59c-65e3-4497-93e9-092c4b244aa1\",\"w\":11,\"x\":15,\"y\":83},\"panelIndex\":\"5ba1c59c-65e3-4497-93e9-092c4b244aa1\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_14\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"f553dfe8-265b-4b1f-a44a-8d3881407ff7\",\"w\":11,\"x\":26,\"y\":83},\"panelIndex\":\"f553dfe8-265b-4b1f-a44a-8d3881407ff7\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_15\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":15,\"i\":\"d5dd9469-5bb6-4043-bda7-d1b6e9e89df0\",\"w\":11,\"x\":37,\"y\":83},\"panelIndex\":\"d5dd9469-5bb6-4043-bda7-d1b6e9e89df0\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_16\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":10,\"i\":\"1948c3a5-b886-4783-87f3-d1da7dd4f151\",\"w\":48,\"x\":0,\"y\":98},\"panelIndex\":\"1948c3a5-b886-4783-87f3-d1da7dd4f151\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_17\"},{\"embeddableConfig\":{\"hidePanelTitles\":true},\"gridData\":{\"h\":3,\"i\":\"d12b43d3-c88a-4a04-b889-08fa76f32d0c\",\"w\":48,\"x\":0,\"y\":108},\"panelIndex\":\"d12b43d3-c88a-4a04-b889-08fa76f32d0c\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_18\"},{\"embeddableConfig\":{},\"gridData\":{\"h\":21,\"i\":\"40b28a32-362e-4eab-bcab-4d51fecfef68\",\"w\":48,\"x\":0,\"y\":111},\"panelIndex\":\"40b28a32-362e-4eab-bcab-4d51fecfef68\",\"version\":\"1.2.0\",\"panelRefName\":\"panel_19\"}]","timeRestore":false,"title":"ClientVPN - Summary","version":1},"id":"d5882440-de4d-11ec-9f8e-d90a7585513a","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"854ac790-dfc3-11ec-9f8e-d90a7585513a","name":"panel_0","type":"visualization"},{"id":"bbb512e0-e004-11ec-9f8e-d90a7585513a","name":"panel_1","type":"visualization"},{"id":"6724a680-e00b-11ec-9f8e-d90a7585513a","name":"panel_2","type":"visualization"},{"id":"d376e490-de5a-11ec-9f8e-d90a7585513a","name":"panel_3","type":"visualization"},{"id":"e11a3710-de59-11ec-9f8e-d90a7585513a","name":"panel_4","type":"visualization"},{"id":"283847d0-de5b-11ec-9f8e-d90a7585513a","name":"panel_5","type":"visualization"},{"id":"bbcaa230-de4d-11ec-9f8e-d90a7585513a","name":"panel_6","type":"visualization"},{"id":"5cda0e20-de5a-11ec-9f8e-d90a7585513a","name":"panel_7","type":"visualization"},{"id":"26508e50-de56-11ec-9f8e-d90a7585513a","name":"panel_8","type":"visualization"},{"id":"6a3fc1d0-e00e-11ec-9f8e-d90a7585513a","name":"panel_9","type":"visualization"},{"id":"83d788e0-e00d-11ec-9f8e-d90a7585513a","name":"panel_10","type":"visualization"},{"id":"87a43a80-de5b-11ec-9f8e-d90a7585513a","name":"panel_11","type":"visualization"},{"id":"7332b300-e00a-11ec-9f8e-d90a7585513a","name":"panel_12","type":"visualization"},{"id":"c175cf80-de56-11ec-9f8e-d90a7585513a","name":"panel_13","type":"visualization"},{"id":"0b1f89a0-de57-11ec-9f8e-d90a7585513a","name":"panel_14","type":"visualization"},{"id":"95b41510-e008-11ec-9f8e-d90a7585513a","name":"panel_15","type":"visualization"},{"id":"4fff62e0-e008-11ec-9f8e-d90a7585513a","name":"panel_16","type":"visualization"},{"id":"eded4480-e009-11ec-9f8e-d90a7585513a","name":"panel_17","type":"visualization"},{"id":"5dfe40e0-e01d-11ec-9f8e-d90a7585513a","name":"panel_18","type":"visualization"},{"id":"af416290-e00c-11ec-9f8e-d90a7585513a","name":"panel_19","type":"search"}],"type":"dashboard","updated_at":"2022-06-02T01:39:08.325Z","version":"WzEwNjMyLDFd"} {"exportedCount":20,"missingRefCount":0,"missingReferences":[]}