{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"CloudHSM - eventName (CloudTrail)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - eventName (CloudTrail)\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"eventName\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"00ff9690-c4f3-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c4423070-c4f0-11ec-ab71-6f054bb9d785","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-04-25T23:54:11.449Z","version":"WzE1NjA0LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"CloudHSM - IAM User (CloudTrail)","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudHSM - IAM User (CloudTrail)\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"IAM User\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source IP\"},\"schema\":\"bucket\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source Country\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Seen\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"b74ac370-c4f3-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c4423070-c4f0-11ec-ab71-6f054bb9d785","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-04-26T00:01:53.186Z","version":"WzE1NjQzLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"savedSearchRefName":"search_0","title":"CloudHSM - AWS Account Region","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudHSM - AWS Account Region\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"72fc6230-d350-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c4423070-c4f0-11ec-ab71-6f054bb9d785","name":"search_0","type":"search"}],"type":"visualization","updated_at":"2022-05-14T06:38:22.162Z","version":"WzE4MzcxLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"},"title":"CloudHSM - Log Filter","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Log Filter\",\"type\":\"input_control_vis\",\"aggs\":[],\"params\":{\"controls\":[{\"id\":\"1650886828252\",\"fieldName\":\"cloud.account.id\",\"parent\":\"\",\"label\":\"AWS Account\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":false,\"dynamicOptions\":false,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_0_index_pattern\"},{\"id\":\"1650886897560\",\"fieldName\":\"cloud.region\",\"parent\":\"\",\"label\":\"Cloud Region\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_1_index_pattern\"},{\"id\":\"1650887018076\",\"fieldName\":\"cloudhsm.cluster_id\",\"parent\":\"1650886897560\",\"label\":\"Cluster Name\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_2_index_pattern\"},{\"id\":\"1650929226519\",\"fieldName\":\"cloudhsm.hsm_id\",\"parent\":\"1650887018076\",\"label\":\"Instance Name\",\"type\":\"list\",\"options\":{\"type\":\"terms\",\"multiselect\":true,\"dynamicOptions\":true,\"size\":5,\"order\":\"desc\"},\"indexPatternRefName\":\"control_3_index_pattern\"}],\"updateFiltersOnChange\":false,\"useTimeFilter\":false,\"pinFilters\":false}}"},"id":"37cc6e20-c48d-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"control_0_index_pattern","type":"index-pattern"},{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"control_1_index_pattern","type":"index-pattern"},{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"control_2_index_pattern","type":"index-pattern"},{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"control_3_index_pattern","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T01:15:35.147Z","version":"WzE3NzYyLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM Command Type","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - HSM Command Type\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.command_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":false}}"},"id":"e09cec40-c4e8-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T22:41:42.148Z","version":"WzE1MzkzLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - CloudHSM Log Type","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - CloudHSM Log Type\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.log_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"row\":true}}"},"id":"047a5150-c4e6-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-02T13:46:46.679Z","version":"WzE3MDkzLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM Opcode","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - HSM Opcode\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.opcode\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"586e4b10-c4e9-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T22:45:03.169Z","version":"WzE1NDI4LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Generate Symmetric Keys","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Generate Symmetric Keys\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.priv_secret_key_handle\",\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode:CN_GENERATE_KEY AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\"\"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"a1e29590-d348-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T06:03:37.987Z","version":"WzE4MTE5LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Generate Asymmetric Keys","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Generate Asymmetric Keys\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.priv_secret_key_handle\",\"customLabel\":\"Private\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode:CN_GENERATE_KEY_PAIR AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.public_key_handle\",\"customLabel\":\"Public\"},\"schema\":\"metric\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":true},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"ef52a680-d348-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T06:02:33.228Z","version":"WzE4MTAwLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Delete Keys","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Delete Keys\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.key_handle\",\"customLabel\":\"Private\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode:(CN_TOMBSTONE_OBJECT OR CN_DESTROY_OBJECT) AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"e124a030-d349-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T06:01:52.918Z","version":"WzE4MDk2LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Share Keys","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"CloudHSM - Share Keys\",\"type\":\"metric\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"cardinality\",\"params\":{\"field\":\"cloudhsm.key_handle\",\"customLabel\":\"Private\"},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode:CN_SHARE_OBJECT AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"}],\"params\":{\"addTooltip\":true,\"addLegend\":false,\"type\":\"metric\",\"metric\":{\"percentageMode\":false,\"useRanges\":false,\"colorSchema\":\"Green to Red\",\"metricColorMode\":\"None\",\"colorsRange\":[{\"from\":0,\"to\":10000}],\"labels\":{\"show\":false},\"invertColors\":false,\"style\":{\"bgFill\":\"#000\",\"bgColor\":false,\"labelColor\":false,\"subText\":\"\",\"fontSize\":60}}}}"},"id":"b7097120-d34b-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T06:04:28.850Z","version":"WzE4MTM2LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Create HSM User","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":7,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"CloudHSM - Create HSM User\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode: (CN_CREATE_USER OR CN_CREATE_CO) AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\"-\"}]},\"schema\":\"bucket\"},{\"id\":\"9\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"AWS Account\"},\"schema\":\"bucket\"},{\"id\":\"10\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Region\"},\"schema\":\"bucket\"},{\"id\":\"11\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.cluster_id\",\"orderBy\":\"_key\",\"order\":\"asc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Cluster Name\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.name\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Name\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.id\",\"orderBy\":\"_key\",\"order\":\"asc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"?\",\"customLabel\":\"ID\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.roles\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Type\"},\"schema\":\"bucket\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Created\"},\"schema\":\"bucket\"},{\"id\":\"12\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"?\",\"customLabel\":\"Created By\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"d6d20080-d364-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T09:04:19.592Z","version":"WzE4NzgwLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM Login Success vs Failure","uiStateJSON":"{\"vis\":{\"colors\":{\" - failure\":\"#E24D42\",\" - success\":\"#7EB26D\"}}}","version":1,"visState":"{\"title\":\"CloudHSM - HSM Login Success vs Failure\",\"type\":\"line\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode: CN_LOGIN\",\"language\":\"kuery\"},\"label\":\" \"}]},\"schema\":\"group\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"date_histogram\",\"params\":{\"field\":\"@timestamp\",\"timeRange\":{\"from\":\"now-1y\",\"to\":\"now\"},\"useNormalizedOpenSearchInterval\":true,\"scaleMetricValues\":false,\"interval\":\"auto\",\"drop_partials\":false,\"min_doc_count\":1,\"extended_bounds\":{}},\"schema\":\"segment\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"event.outcome\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":3,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"line\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":true,\"type\":\"line\",\"mode\":\"normal\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"lineWidth\":2,\"interpolate\":\"linear\",\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#E7664C\"}}}"},"id":"adf169f0-c4e4-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T23:50:00.309Z","version":"WzE1NTczLDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM User Login Success","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudHSM - HSM User Login Success\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode_hex: 0xd AND cloudhsm.hsm_return: SUCCESS\",\"language\":\"kuery\"},\"label\":\"Login Success\"}]},\"schema\":\"bucket\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.user_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"HSM User\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.user_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"HSM User Type\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"asc\",\"customLabel\":\"First Seen\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Seen\"},\"schema\":\"metric\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"54a1b450-c489-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T11:17:45.108Z","version":"WzE1MTI5LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - HSM User Login Issue","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"CloudHSM - HSM User Login Issue\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode_hex: 0xd AND NOT cloudhsm.hsm_return: SUCCESS\",\"language\":\"kuery\"},\"label\":\"Login Issue\"}]},\"schema\":\"bucket\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.user_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"HSM User\"},\"schema\":\"bucket\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.user_type\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"HSM User Type\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"asc\",\"customLabel\":\"First Seen\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"top_hits\",\"params\":{\"field\":\"@timestamp\",\"aggregate\":\"concat\",\"size\":1,\"sortField\":\"@timestamp\",\"sortOrder\":\"desc\",\"customLabel\":\"Last Seen\"},\"schema\":\"metric\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.hsm_error\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"377085b0-c2d0-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-04-25T21:52:44.242Z","version":"WzE1MzA1LDFd"} {"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":15,\"i\":\"c1e7bd46-8879-4833-870d-4c35a00bbc91\"},\"panelIndex\":\"c1e7bd46-8879-4833-870d-4c35a00bbc91\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":15,\"i\":\"60539bde-802e-4bfb-9de7-63dbdcf5db42\"},\"panelIndex\":\"60539bde-802e-4bfb-9de7-63dbdcf5db42\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":15,\"w\":15,\"h\":15,\"i\":\"320c92e0-3d4d-485a-b6bb-0e753512d930\"},\"panelIndex\":\"320c92e0-3d4d-485a-b6bb-0e753512d930\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":15,\"y\":15,\"w\":33,\"h\":15,\"i\":\"bd811213-a118-4b57-b03a-379e3f8ec0da\"},\"panelIndex\":\"bd811213-a118-4b57-b03a-379e3f8ec0da\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":30,\"w\":48,\"h\":7,\"i\":\"82803b59-7e2c-49fa-8269-07294ece9f89\"},\"panelIndex\":\"82803b59-7e2c-49fa-8269-07294ece9f89\",\"embeddableConfig\":{},\"panelRefName\":\"panel_4\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":37,\"w\":14,\"h\":17,\"i\":\"597320a4-59a2-43b6-990f-76c1729fa585\"},\"panelIndex\":\"597320a4-59a2-43b6-990f-76c1729fa585\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":14,\"y\":37,\"w\":16,\"h\":17,\"i\":\"8a88c3d7-0aeb-4ffc-b7e2-0eeee39d438f\"},\"panelIndex\":\"8a88c3d7-0aeb-4ffc-b7e2-0eeee39d438f\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":30,\"y\":37,\"w\":18,\"h\":17,\"i\":\"64cb783c-478c-4e84-b53b-25349dd6cb49\"},\"panelIndex\":\"64cb783c-478c-4e84-b53b-25349dd6cb49\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":54,\"w\":11,\"h\":7,\"i\":\"a6112cd6-d3c6-43b8-8d2f-ce6e6e3166e7\"},\"panelIndex\":\"a6112cd6-d3c6-43b8-8d2f-ce6e6e3166e7\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":11,\"y\":54,\"w\":15,\"h\":7,\"i\":\"bbdd8113-50b4-4785-ba74-e5ab1e75b235\"},\"panelIndex\":\"bbdd8113-50b4-4785-ba74-e5ab1e75b235\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":26,\"y\":54,\"w\":11,\"h\":7,\"i\":\"fb8ba371-ab66-417e-8e22-08f394b61b99\"},\"panelIndex\":\"fb8ba371-ab66-417e-8e22-08f394b61b99\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":37,\"y\":54,\"w\":11,\"h\":7,\"i\":\"58585690-757a-4e9f-b4f1-1ba73bea2a0d\"},\"panelIndex\":\"58585690-757a-4e9f-b4f1-1ba73bea2a0d\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":61,\"w\":48,\"h\":15,\"i\":\"f55d3b7f-7b9a-4613-96bf-8942a4a179ef\"},\"panelIndex\":\"f55d3b7f-7b9a-4613-96bf-8942a4a179ef\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":76,\"w\":48,\"h\":9,\"i\":\"4444e43c-8374-4df4-a33b-bb1822d8ad6c\"},\"panelIndex\":\"4444e43c-8374-4df4-a33b-bb1822d8ad6c\",\"embeddableConfig\":{\"vis\":{\"colors\":{\" - failure\":\"#BF1B00\",\" - success\":\"#7EB26D\"}}},\"panelRefName\":\"panel_13\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":85,\"w\":20,\"h\":17,\"i\":\"573a852c-b7b6-4bd5-8d0b-bc028d93ea3a\"},\"panelIndex\":\"573a852c-b7b6-4bd5-8d0b-bc028d93ea3a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":20,\"y\":85,\"w\":28,\"h\":17,\"i\":\"33afc7d3-70d3-4f1f-be17-27367ddd0767\"},\"panelIndex\":\"33afc7d3-70d3-4f1f-be17-27367ddd0767\",\"embeddableConfig\":{},\"panelRefName\":\"panel_15\"},{\"version\":\"1.2.0\",\"gridData\":{\"x\":0,\"y\":102,\"w\":48,\"h\":19,\"i\":\"11e5aca8-63dd-485b-891d-9bef06f8db95\"},\"panelIndex\":\"11e5aca8-63dd-485b-891d-9bef06f8db95\",\"embeddableConfig\":{},\"panelRefName\":\"panel_16\"}]","timeRestore":false,"title":"CloudHSM Summary","version":1},"id":"576b5200-c2d0-11ec-ab71-6f054bb9d785","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"00ff9690-c4f3-11ec-ab71-6f054bb9d785","name":"panel_0","type":"visualization"},{"id":"b74ac370-c4f3-11ec-ab71-6f054bb9d785","name":"panel_1","type":"visualization"},{"id":"72fc6230-d350-11ec-ab71-6f054bb9d785","name":"panel_2","type":"visualization"},{"id":"c4423070-c4f0-11ec-ab71-6f054bb9d785","name":"panel_3","type":"search"},{"id":"37cc6e20-c48d-11ec-ab71-6f054bb9d785","name":"panel_4","type":"visualization"},{"id":"e09cec40-c4e8-11ec-ab71-6f054bb9d785","name":"panel_5","type":"visualization"},{"id":"047a5150-c4e6-11ec-ab71-6f054bb9d785","name":"panel_6","type":"visualization"},{"id":"586e4b10-c4e9-11ec-ab71-6f054bb9d785","name":"panel_7","type":"visualization"},{"id":"a1e29590-d348-11ec-ab71-6f054bb9d785","name":"panel_8","type":"visualization"},{"id":"ef52a680-d348-11ec-ab71-6f054bb9d785","name":"panel_9","type":"visualization"},{"id":"e124a030-d349-11ec-ab71-6f054bb9d785","name":"panel_10","type":"visualization"},{"id":"b7097120-d34b-11ec-ab71-6f054bb9d785","name":"panel_11","type":"visualization"},{"id":"d6d20080-d364-11ec-ab71-6f054bb9d785","name":"panel_12","type":"visualization"},{"id":"adf169f0-c4e4-11ec-ab71-6f054bb9d785","name":"panel_13","type":"visualization"},{"id":"54a1b450-c489-11ec-ab71-6f054bb9d785","name":"panel_14","type":"visualization"},{"id":"377085b0-c2d0-11ec-ab71-6f054bb9d785","name":"panel_15","type":"visualization"},{"id":"8a312410-c48a-11ec-ab71-6f054bb9d785","name":"panel_16","type":"search"}],"type":"dashboard","updated_at":"2022-05-14T09:06:38.423Z","version":"WzE4ODQ3LDFd"} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"CloudHSM - Create User","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":7,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"CloudHSM - Create User\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{\"customLabel\":\"\"},\"schema\":\"metric\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"filters\",\"params\":{\"filters\":[{\"input\":{\"query\":\"cloudhsm.opcode: (CN_CREATE_USER OR CN_CREATE_CO) AND event.outcome:success\",\"language\":\"kuery\"},\"label\":\"-\"}]},\"schema\":\"bucket\"},{\"id\":\"9\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":20,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"AWS Account\"},\"schema\":\"bucket\"},{\"id\":\"10\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Region\"},\"schema\":\"bucket\"},{\"id\":\"11\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloudhsm.cluster_id\",\"orderBy\":\"_key\",\"order\":\"asc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Cluster Name\"},\"schema\":\"bucket\"},{\"id\":\"6\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.name\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Name\"},\"schema\":\"bucket\"},{\"id\":\"5\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.id\",\"orderBy\":\"_key\",\"order\":\"asc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"?\",\"customLabel\":\"ID\"},\"schema\":\"bucket\"},{\"id\":\"7\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.target.roles\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Type\"},\"schema\":\"bucket\"},{\"id\":\"8\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"@timestamp\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":1,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Created\"},\"schema\":\"bucket\"},{\"id\":\"12\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user.id\",\"orderBy\":\"_key\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":true,\"missingBucketLabel\":\"?\",\"customLabel\":\"Created By\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"95334230-d358-11ec-ab71-6f054bb9d785","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"c6f6c3f0-c291-11ec-ab71-6f054bb9d785","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2022-05-14T09:02:48.631Z","version":"WzE4NzYyLDFd"} {"exportedCount":17,"missingRefCount":0,"missingReferences":[]}