{"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF AuditActivity - Cloud Account(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF AuditActivity - Cloud Account(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.account.id\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}]}}}"},"id":"7deb8aef-716d-490c-8cfc-efe13517b6cd","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MTUsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF AuditActivity - Region(Bar)","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF AuditActivity - Region(Bar)\",\"type\":\"histogram\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"},{\"id\":\"4\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"cloud.region\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":5,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"group\"}],\"params\":{\"type\":\"histogram\",\"grid\":{\"categoryLines\":false},\"categoryAxes\":[{\"id\":\"CategoryAxis-1\",\"type\":\"category\",\"position\":\"bottom\",\"show\":false,\"style\":{},\"scale\":{\"type\":\"linear\"},\"labels\":{\"show\":true,\"filter\":true,\"truncate\":100},\"title\":{}}],\"valueAxes\":[{\"id\":\"ValueAxis-1\",\"name\":\"LeftAxis-1\",\"type\":\"value\",\"position\":\"left\",\"show\":true,\"style\":{},\"scale\":{\"type\":\"linear\",\"mode\":\"normal\"},\"labels\":{\"show\":true,\"rotate\":0,\"filter\":false,\"truncate\":100},\"title\":{\"text\":\"Count\"}}],\"seriesParams\":[{\"show\":\"true\",\"type\":\"histogram\",\"mode\":\"stacked\",\"data\":{\"label\":\"Count\",\"id\":\"1\"},\"valueAxis\":\"ValueAxis-1\",\"drawLinesBetweenPoints\":true,\"showCircles\":true}],\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"times\":[],\"addTimeMarker\":false,\"labels\":{\"show\":false},\"thresholdLine\":{\"show\":false,\"value\":10,\"width\":1,\"style\":\"full\",\"color\":\"#34130C\"},\"dimensions\":{\"x\":{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"},\"y\":[{\"accessor\":2,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"series\":[{\"accessor\":1,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"06b55905-ea0e-4314-b9c7-b911aa15bce3","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MTYsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF AuditActivity - Source Countries","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF AuditActivity - Source Countries\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"},\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"5a3b69ee-6d06-44bb-b5d9-f9e18e87ad1e","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MTcsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF AuditActivity - Source IP","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":null,\"direction\":null}}}}","version":1,"visState":"{\"title\":\"OCSF AuditActivity - Source IP\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.ip\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Source\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\",\"dimensions\":{\"metrics\":[{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"}],\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"ip\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"39b8a8ae-b451-4053-8630-673e483e807a","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MTgsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF AuditActivity - Source Countries(Geo)","uiStateJSON":"{\"mapZoom\":2,\"mapCenter\":[21.453068633086783,26.3558692421991]}","version":1,"visState":"{\"title\":\"OCSF AuditActivity - Source Countries(Geo)\",\"type\":\"region_map\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.geo.country_iso_code\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":100,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"addTooltip\":true,\"colorSchema\":\"Yellow to Red\",\"emsHotLink\":\"https://maps.elastic.co/v7.7?locale=en#file/world_countries\",\"isDisplayWarning\":true,\"legendPosition\":\"bottomright\",\"mapCenter\":[0,0],\"mapZoom\":2,\"outlineWeight\":1,\"selectedJoinField\":{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},\"selectedLayer\":{\"attribution\":\"Made with NaturalEarth\",\"created_at\":\"2017-04-26T17:12:15.978370\",\"fields\":[{\"description\":\"ISO 3166-1 alpha-2 Code\",\"name\":\"iso2\",\"type\":\"id\"},{\"description\":\"ISO 3166-1 alpha-3 Code\",\"name\":\"iso3\",\"type\":\"id\"},{\"description\":\"Name\",\"name\":\"name\",\"type\":\"name\"}],\"format\":{\"type\":\"geojson\"},\"id\":\"world_countries\",\"isEMS\":true,\"layerId\":\"elastic_maps_service.World Countries\",\"name\":\"World Countries\",\"origin\":\"elastic_maps_service\"},\"showAllShapes\":true,\"wms\":{\"enabled\":false,\"options\":{\"format\":\"image/png\",\"transparent\":true},\"selectedTmsLayer\":{\"attribution\":\"Map data © OpenStreetMap contributors\",\"id\":\"road_map\",\"maxZoom\":10,\"minZoom\":0,\"origin\":\"elastic_maps_service\"}}}}"},"id":"4c8220d1-bab5-4906-be17-b10c35ce6a43","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MTksMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF AuditActivity - Source AS","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF AuditActivity - Source AS\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"source.as.organization.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":false,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100},\"dimensions\":{\"metric\":{\"accessor\":1,\"format\":{\"id\":\"number\"},\"params\":{},\"aggType\":\"count\"},\"buckets\":[{\"accessor\":0,\"format\":{\"id\":\"terms\",\"params\":{\"id\":\"string\",\"otherBucketLabel\":\"Other\",\"missingBucketLabel\":\"Missing\"}},\"params\":{},\"aggType\":\"terms\"}]}}}"},"id":"27d4b61c-cfae-466c-9dba-a027c64867a8","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjAsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF AuditActivity - API Service(Pie)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF AuditActivity - API Service(Pie)\",\n \"type\": \"pie\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.service.name\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"segment\"\n }\n ],\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n },\n \"dimensions\": {\n \"metric\": {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n }\n }\n}"},"id":"163c19e3-9b02-4bb4-b26e-a294f3d70b52","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjEsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF AuditActivity - API Service(Area)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF AuditActivity - API Service(Area)\",\n \"type\": \"area\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"timeRange\": {\n \"from\": \"now-1y\",\n \"to\": \"now\"\n },\n \"useNormalizedOpenSearchInterval\": true,\n \"scaleMetricValues\": false,\n \"interval\": \"auto\",\n \"drop_partials\": false,\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n },\n \"schema\": \"segment\"\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.service.name\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"group\"\n }\n ],\n \"params\": {\n \"type\": \"area\",\n \"grid\": {\n \"categoryLines\": false\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": true,\n \"filter\": true,\n \"truncate\": 100\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": false,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"Count\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": \"true\",\n \"type\": \"area\",\n \"mode\": \"stacked\",\n \"data\": {\n \"label\": \"Count\",\n \"id\": \"1\"\n },\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"interpolate\": \"linear\",\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"thresholdLine\": {\n \"show\": false,\n \"value\": 10,\n \"width\": 1,\n \"style\": \"full\",\n \"color\": \"#34130C\"\n },\n \"labels\": {},\n \"dimensions\": {\n \"x\": null,\n \"y\": [\n {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n ]\n }\n }\n}"},"id":"f9b06a7e-7632-454e-8fe2-37ae995cc174","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjIsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF AuditActivity - API Operation(Pie)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF AuditActivity - API Operation(Pie)\",\n \"type\": \"pie\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.operation\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"segment\"\n }\n ],\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n },\n \"dimensions\": {\n \"metric\": {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n }\n }\n}"},"id":"16630642-2f9f-4f2b-a1e9-a6234c63bcc7","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjMsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF AuditActivity - API Operation(Area)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF AuditActivity - API Operation(Area)\",\n \"type\": \"area\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"timeRange\": {\n \"from\": \"now-1y\",\n \"to\": \"now\"\n },\n \"useNormalizedOpenSearchInterval\": true,\n \"scaleMetricValues\": false,\n \"interval\": \"auto\",\n \"drop_partials\": false,\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n },\n \"schema\": \"segment\"\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.operation\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"group\"\n }\n ],\n \"params\": {\n \"type\": \"area\",\n \"grid\": {\n \"categoryLines\": false\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": true,\n \"filter\": true,\n \"truncate\": 100\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": false,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"Count\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": \"true\",\n \"type\": \"area\",\n \"mode\": \"stacked\",\n \"data\": {\n \"label\": \"Count\",\n \"id\": \"1\"\n },\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"interpolate\": \"linear\",\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"thresholdLine\": {\n \"show\": false,\n \"value\": 10,\n \"width\": 1,\n \"style\": \"full\",\n \"color\": \"#34130C\"\n },\n \"labels\": {},\n \"dimensions\": {\n \"x\": {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"date\",\n \"params\": {\n \"pattern\": \"YYYY-MM-DD HH:mm\"\n }\n },\n \"params\": {\n \"date\": true,\n \"interval\": \"PT12H\",\n \"format\": \"YYYY-MM-DD HH:mm\",\n \"bounds\": {\n \"min\": \"2020-03-27T10:17:24.061Z\",\n \"max\": \"2020-04-26T10:17:24.061Z\"\n }\n },\n \"aggType\": \"date_histogram\"\n },\n \"y\": [\n {\n \"accessor\": 1,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n ]\n }\n }\n}"},"id":"0b2ee410-2caf-4a52-ae64-ffc99066a464","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjQsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF AuditActivity - Error Code(Pie)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF AuditActivity - Error Code(Pie)\",\n \"type\": \"pie\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.response.error\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"segment\"\n }\n ],\n \"params\": {\n \"type\": \"pie\",\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"isDonut\": true,\n \"labels\": {\n \"show\": false,\n \"values\": true,\n \"last_level\": true,\n \"truncate\": 100\n },\n \"dimensions\": {\n \"metric\": {\n \"accessor\": 1,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n },\n \"buckets\": [\n {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"terms\",\n \"params\": {\n \"id\": \"string\",\n \"otherBucketLabel\": \"Other\",\n \"missingBucketLabel\": \"Missing\"\n }\n },\n \"params\": {},\n \"aggType\": \"terms\"\n }\n ]\n }\n }\n}"},"id":"d59922fb-72b0-46db-8841-9b096c6bb0f5","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjUsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\n \"query\": {\n \"query\": \"\",\n \"language\": \"kuery\"\n },\n \"filter\": [],\n \"indexRefName\": \"kibanaSavedObjectMeta.searchSourceJSON.index\"\n}"},"title":"OCSF AuditActivity - Error Code(Area)","uiStateJSON":"{}","version":1,"visState":"{\n \"title\": \"OCSF AuditActivity - Error Code(Area)\",\n \"type\": \"area\",\n \"aggs\": [\n {\n \"id\": \"1\",\n \"enabled\": true,\n \"type\": \"count\",\n \"params\": {},\n \"schema\": \"metric\"\n },\n {\n \"id\": \"2\",\n \"enabled\": true,\n \"type\": \"date_histogram\",\n \"params\": {\n \"field\": \"@timestamp\",\n \"timeRange\": {\n \"from\": \"now-1y\",\n \"to\": \"now\"\n },\n \"useNormalizedOpenSearchInterval\": true,\n \"scaleMetricValues\": false,\n \"interval\": \"auto\",\n \"drop_partials\": false,\n \"min_doc_count\": 1,\n \"extended_bounds\": {}\n },\n \"schema\": \"segment\"\n },\n {\n \"id\": \"3\",\n \"enabled\": true,\n \"type\": \"terms\",\n \"params\": {\n \"field\": \"api.response.error\",\n \"orderBy\": \"1\",\n \"order\": \"desc\",\n \"size\": 10,\n \"otherBucket\": false,\n \"otherBucketLabel\": \"Other\",\n \"missingBucket\": false,\n \"missingBucketLabel\": \"Missing\"\n },\n \"schema\": \"group\"\n }\n ],\n \"params\": {\n \"type\": \"area\",\n \"grid\": {\n \"categoryLines\": false\n },\n \"categoryAxes\": [\n {\n \"id\": \"CategoryAxis-1\",\n \"type\": \"category\",\n \"position\": \"bottom\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\"\n },\n \"labels\": {\n \"show\": true,\n \"filter\": true,\n \"truncate\": 100\n },\n \"title\": {}\n }\n ],\n \"valueAxes\": [\n {\n \"id\": \"ValueAxis-1\",\n \"name\": \"LeftAxis-1\",\n \"type\": \"value\",\n \"position\": \"left\",\n \"show\": true,\n \"style\": {},\n \"scale\": {\n \"type\": \"linear\",\n \"mode\": \"normal\"\n },\n \"labels\": {\n \"show\": true,\n \"rotate\": 0,\n \"filter\": false,\n \"truncate\": 100\n },\n \"title\": {\n \"text\": \"Count\"\n }\n }\n ],\n \"seriesParams\": [\n {\n \"show\": \"true\",\n \"type\": \"area\",\n \"mode\": \"stacked\",\n \"data\": {\n \"label\": \"Count\",\n \"id\": \"1\"\n },\n \"drawLinesBetweenPoints\": true,\n \"showCircles\": true,\n \"interpolate\": \"linear\",\n \"valueAxis\": \"ValueAxis-1\"\n }\n ],\n \"addTooltip\": true,\n \"addLegend\": true,\n \"legendPosition\": \"right\",\n \"times\": [],\n \"addTimeMarker\": false,\n \"thresholdLine\": {\n \"show\": false,\n \"value\": 10,\n \"width\": 1,\n \"style\": \"full\",\n \"color\": \"#34130C\"\n },\n \"labels\": {},\n \"dimensions\": {\n \"x\": {\n \"accessor\": 0,\n \"format\": {\n \"id\": \"date\",\n \"params\": {\n \"pattern\": \"YYYY-MM-DD HH:mm\"\n }\n },\n \"params\": {\n \"date\": true,\n \"interval\": \"PT12H\",\n \"format\": \"YYYY-MM-DD HH:mm\",\n \"bounds\": {\n \"min\": \"2020-03-27T10:33:25.001Z\",\n \"max\": \"2020-04-26T10:33:25.001Z\"\n }\n },\n \"aggType\": \"date_histogram\"\n },\n \"y\": [\n {\n \"accessor\": 2,\n \"format\": {\n \"id\": \"number\"\n },\n \"params\": {},\n \"aggType\": \"count\"\n }\n ],\n \"series\": [\n {\n \"accessor\": 1,\n \"format\": {\n \"id\": \"terms\",\n \"params\": {\n \"id\": \"string\",\n \"otherBucketLabel\": \"Other\",\n \"missingBucketLabel\": \"Missing\"\n }\n },\n \"params\": {},\n \"aggType\": \"terms\"\n }\n ]\n }\n }\n}"},"id":"484e2908-a929-48d4-b6fc-a9b44a87c721","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjYsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF AuditActivity - User Agent Browser","uiStateJSON":"{}","version":1,"visState":"{\"title\":\"OCSF AuditActivity - User Agent Browser\",\"type\":\"pie\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"user_agent.name\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":15,\"otherBucket\":true,\"otherBucketLabel\":\"Other2\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\"},\"schema\":\"segment\"}],\"params\":{\"type\":\"pie\",\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":true,\"labels\":{\"show\":false,\"values\":true,\"last_level\":true,\"truncate\":100}}}"},"id":"9b7367ef-61d0-4de9-a60c-72166fc35edc","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjcsMV0="} {"attributes":{"description":"","kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[],\"indexRefName\":\"kibanaSavedObjectMeta.searchSourceJSON.index\"}"},"title":"OCSF AuditActivity - Matched IoC","uiStateJSON":"{\"vis\":{\"params\":{\"sort\":{\"columnIndex\":1,\"direction\":\"desc\"}}}}","version":1,"visState":"{\"title\":\"OCSF AuditActivity - Matched IoC\",\"type\":\"table\",\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"params\":{},\"schema\":\"metric\"},{\"id\":\"2\",\"enabled\":true,\"type\":\"terms\",\"params\":{\"field\":\"threat.matched.providers\",\"orderBy\":\"1\",\"order\":\"desc\",\"size\":10,\"otherBucket\":true,\"otherBucketLabel\":\"Other\",\"missingBucket\":false,\"missingBucketLabel\":\"Missing\",\"customLabel\":\"Providers\"},\"schema\":\"bucket\"}],\"params\":{\"perPage\":10,\"showPartialRows\":false,\"showMetricsAtAllLevels\":false,\"sort\":{\"columnIndex\":null,\"direction\":null},\"showTotal\":false,\"totalFunc\":\"sum\",\"percentageCol\":\"\"}}"},"id":"702c51d7-b962-46e1-8d39-d25391b63d38","migrationVersion":{"visualization":"7.10.0"},"references":[{"id":"524a9840-1bf2-11ee-9a4d-6b546e0c4ef4","name":"kibanaSavedObjectMeta.searchSourceJSON.index","type":"index-pattern"}],"type":"visualization","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjgsMV0="} {"attributes":{"description":"","hits":0,"kibanaSavedObjectMeta":{"searchSourceJSON":"{\"query\":{\"language\":\"kuery\",\"query\":\"\"},\"filter\":[]}"},"optionsJSON":"{\"hidePanelTitles\":false,\"useMargins\":true}","panelsJSON":"[{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":7,\"i\":\"f9c7d205-70a5-4a53-adb1-5da91f376422\"},\"panelIndex\":\"f9c7d205-70a5-4a53-adb1-5da91f376422\",\"embeddableConfig\":{},\"panelRefName\":\"panel_0\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":7,\"i\":\"2a9fda54-e27d-47fb-a4c6-3423bb23f278\"},\"panelIndex\":\"2a9fda54-e27d-47fb-a4c6-3423bb23f278\",\"embeddableConfig\":{},\"panelRefName\":\"panel_1\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":7,\"w\":11,\"h\":7,\"i\":\"2caf428f-8d7b-49f8-88b3-091bfe4d7cd4\"},\"panelIndex\":\"2caf428f-8d7b-49f8-88b3-091bfe4d7cd4\",\"embeddableConfig\":{},\"panelRefName\":\"panel_2\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":11,\"y\":7,\"w\":10,\"h\":15,\"i\":\"dc2d6142-821d-4481-8d27-7480793df9e9\"},\"panelIndex\":\"dc2d6142-821d-4481-8d27-7480793df9e9\",\"embeddableConfig\":{},\"panelRefName\":\"panel_3\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":21,\"y\":7,\"w\":27,\"h\":15,\"i\":\"af9adcdb-0ac9-49ad-9d92-cc9ddf581cb8\"},\"panelIndex\":\"af9adcdb-0ac9-49ad-9d92-cc9ddf581cb8\",\"embeddableConfig\":{\"mapCenter\":null,\"mapZoom\":2},\"panelRefName\":\"panel_4\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":14,\"w\":11,\"h\":8,\"i\":\"7221ae7e-1c2a-4e02-9330-42062c082f1a\"},\"panelIndex\":\"7221ae7e-1c2a-4e02-9330-42062c082f1a\",\"embeddableConfig\":{},\"panelRefName\":\"panel_5\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":22,\"w\":15,\"h\":9,\"i\":\"32c0dcdd-fcaa-4b82-85ee-d28c932db877\"},\"panelIndex\":\"32c0dcdd-fcaa-4b82-85ee-d28c932db877\",\"embeddableConfig\":{},\"panelRefName\":\"panel_6\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":15,\"y\":22,\"w\":33,\"h\":9,\"i\":\"f3cb8418-a18c-40da-bafd-926d2dbd5540\"},\"panelIndex\":\"f3cb8418-a18c-40da-bafd-926d2dbd5540\",\"embeddableConfig\":{},\"panelRefName\":\"panel_7\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":31,\"w\":15,\"h\":9,\"i\":\"06afdbd3-08a5-4542-8672-082d3d4135bc\"},\"panelIndex\":\"06afdbd3-08a5-4542-8672-082d3d4135bc\",\"embeddableConfig\":{},\"panelRefName\":\"panel_8\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":15,\"y\":31,\"w\":33,\"h\":9,\"i\":\"2977242c-6276-4e19-8c48-664b03adae1c\"},\"panelIndex\":\"2977242c-6276-4e19-8c48-664b03adae1c\",\"embeddableConfig\":{},\"panelRefName\":\"panel_9\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":40,\"w\":15,\"h\":9,\"i\":\"6c57aebe-5265-46bb-8c85-3754a3c796b6\"},\"panelIndex\":\"6c57aebe-5265-46bb-8c85-3754a3c796b6\",\"embeddableConfig\":{},\"panelRefName\":\"panel_10\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":15,\"y\":40,\"w\":33,\"h\":9,\"i\":\"3c09fda4-20cd-4a1a-88d6-bf464d0648bf\"},\"panelIndex\":\"3c09fda4-20cd-4a1a-88d6-bf464d0648bf\",\"embeddableConfig\":{},\"panelRefName\":\"panel_11\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":49,\"w\":18,\"h\":13,\"i\":\"b95f4822-ffe0-4147-a5ab-675efa1e95a6\"},\"panelIndex\":\"b95f4822-ffe0-4147-a5ab-675efa1e95a6\",\"embeddableConfig\":{},\"panelRefName\":\"panel_12\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":18,\"y\":49,\"w\":30,\"h\":13,\"i\":\"a95e3403-c300-4b8e-9dd3-6f45ae748a80\"},\"panelIndex\":\"a95e3403-c300-4b8e-9dd3-6f45ae748a80\",\"embeddableConfig\":{},\"panelRefName\":\"panel_13\"},{\"version\":\"2.3.0\",\"gridData\":{\"x\":0,\"y\":62,\"w\":48,\"h\":18,\"i\":\"8213c42d-ab7a-40db-a66f-91ed5d4f921b\"},\"panelIndex\":\"8213c42d-ab7a-40db-a66f-91ed5d4f921b\",\"embeddableConfig\":{},\"panelRefName\":\"panel_14\"}]","timeRestore":false,"title":"OCSF AuditActivity Summary","version":1},"id":"7b20c74d-0abd-4ce3-8943-df73908f2b54","migrationVersion":{"dashboard":"7.9.3"},"references":[{"id":"7deb8aef-716d-490c-8cfc-efe13517b6cd","name":"panel_0","type":"visualization"},{"id":"06b55905-ea0e-4314-b9c7-b911aa15bce3","name":"panel_1","type":"visualization"},{"id":"5a3b69ee-6d06-44bb-b5d9-f9e18e87ad1e","name":"panel_2","type":"visualization"},{"id":"39b8a8ae-b451-4053-8630-673e483e807a","name":"panel_3","type":"visualization"},{"id":"4c8220d1-bab5-4906-be17-b10c35ce6a43","name":"panel_4","type":"visualization"},{"id":"27d4b61c-cfae-466c-9dba-a027c64867a8","name":"panel_5","type":"visualization"},{"id":"163c19e3-9b02-4bb4-b26e-a294f3d70b52","name":"panel_6","type":"visualization"},{"id":"f9b06a7e-7632-454e-8fe2-37ae995cc174","name":"panel_7","type":"visualization"},{"id":"16630642-2f9f-4f2b-a1e9-a6234c63bcc7","name":"panel_8","type":"visualization"},{"id":"0b2ee410-2caf-4a52-ae64-ffc99066a464","name":"panel_9","type":"visualization"},{"id":"d59922fb-72b0-46db-8841-9b096c6bb0f5","name":"panel_10","type":"visualization"},{"id":"484e2908-a929-48d4-b6fc-a9b44a87c721","name":"panel_11","type":"visualization"},{"id":"9b7367ef-61d0-4de9-a60c-72166fc35edc","name":"panel_12","type":"visualization"},{"id":"702c51d7-b962-46e1-8d39-d25391b63d38","name":"panel_13","type":"visualization"},{"id":"002d7bc0-1c7b-11ee-b6a2-179ee6cdfd67","name":"panel_14","type":"search"}],"type":"dashboard","updated_at":"2023-07-07T09:36:05.321Z","version":"WzE2MjksMV0="} {"exportedCount":15,"missingRefCount":0,"missingReferences":[]}