{
  "visState": "{\"title\":\"Top updated [Auditbeat File Integrity]\",\"type\":\"pie\",\"params\":{\"addTooltip\":true,\"addLegend\":true,\"legendPosition\":\"right\",\"isDonut\":false,\"type\":\"pie\"},\"aggs\":[{\"id\":\"1\",\"enabled\":true,\"type\":\"count\",\"schema\":\"metric\",\"params\":{\"customLabel\":\"\"}},{\"id\":\"3\",\"enabled\":true,\"type\":\"terms\",\"schema\":\"segment\",\"params\":{\"field\":\"file.path.raw\",\"size\":10,\"order\":\"desc\",\"orderBy\":\"1\",\"customLabel\":\"Path\"}}],\"listeners\":{}}", 
  "description": "", 
  "title": "Top updated [Auditbeat File Integrity]", 
  "uiStateJSON": "{}", 
  "version": 1, 
  "savedSearchId": "a380a060-cb44-11e7-9835-2f31fe08873b", 
  "kibanaSavedObjectMeta": {
    "searchSourceJSON": "{\"filter\":[{\"meta\":{\"index\":\"auditbeat-*\",\"negate\":false,\"disabled\":false,\"alias\":null,\"type\":\"phrase\",\"key\":\"event.action\",\"value\":\"updated\"},\"query\":{\"match\":{\"event.action\":{\"query\":\"updated\",\"type\":\"phrase\"}}},\"$state\":{\"store\":\"appState\"}}]}"
  }
}